$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: v7XmbXs5HCAhgNfemQNxhjci37tXiEcYj3gS/xx55tA= Subject key identifier: 65:C9:36:2A:50:03:7D:15:90:54:89:1B:FF:2B:BB:EA:A2:73:A8:31 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 027C5392CA233AE4B3EAC0F921619B4F7A4F6860 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa Signing time: Tue 10 Feb 2026 00:15:59 +0000 ROA not before: Tue 10 Feb 2026 00:10:59 +0000 ROA not after: Tue 09 Feb 2027 00:15:59 +0000 asID: 29802 IP address blocks: 89.117.126.0/24 maxlen: 24 89.117.132.0/23 maxlen: 24 89.117.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:53:92:ca:23:3a:e4:b3:ea:c0:f9:21:61:9b:4f:7a:4f:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 10 00:10:59 2026 GMT Not After : Feb 9 00:15:59 2027 GMT Subject: CN=65C9362A50037D159054891BFF2BBBEAA273A831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:e5:41:74:5c:77:37:e7:b2:e9:5e:58:2c: 03:e0:0a:73:b9:99:f9:b4:48:e3:af:8d:5d:42:8e: 22:8a:4b:ba:3b:10:92:d8:9d:4c:00:87:c3:f6:14: 0d:ff:97:91:e9:0d:44:27:d2:1a:e6:f7:26:ca:2b: 47:aa:8a:f3:cf:42:c6:d7:c0:2b:39:92:30:3c:b0: d7:db:a5:08:8a:f5:17:a4:f7:47:0b:17:2c:26:77: d2:d9:a2:00:9e:26:91:f7:f2:7e:49:c1:69:c9:6b: c7:52:60:08:7d:e1:9d:05:70:2d:8c:4d:1f:d7:40: 38:3c:e1:7b:89:d6:1a:8e:d7:90:8a:83:58:93:06: 83:17:8a:c7:e4:ce:6f:20:df:da:00:bb:a5:bc:fc: 79:82:ba:6d:8d:f4:88:e8:d4:23:8a:ec:ec:b1:25: 4f:4f:13:e9:f4:2a:ad:71:f9:c3:a5:b2:74:1a:a8: 53:f6:c9:ba:bb:52:c0:aa:13:49:48:0f:26:3a:34: 16:7a:a3:c0:d9:fd:2e:16:09:84:1c:44:62:ff:2e: 23:8d:9f:75:09:bb:54:5b:2d:a7:ea:12:1b:d7:6b: 65:de:71:1a:ad:de:a8:96:05:43:0d:15:af:c6:73: b0:f5:8c:f0:1d:19:7a:23:5d:ec:88:88:3f:8a:6c: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C9:36:2A:50:03:7D:15:90:54:89:1B:FF:2B:BB:EA:A2:73:A8:31 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.126.0/24 89.117.132.0/23 89.117.215.0/24 Signature Algorithm: sha256WithRSAEncryption bc:45:4d:80:6e:2e:16:4b:17:c9:22:eb:de:fd:9b:e7:48:35: 9f:c1:61:51:08:bc:12:49:62:b0:de:f2:e1:95:72:4d:f3:8e: 4e:68:ba:de:2f:b7:b3:57:a0:bf:6b:98:35:16:b1:13:d3:38: f8:f9:d2:ab:c7:c1:4f:e5:82:2b:ef:8e:dd:f0:36:ec:99:3e: 3b:d8:76:ff:f1:a5:e6:d8:8b:5c:67:eb:84:39:4f:35:4c:ca: 78:a1:e5:fd:f4:7d:97:d3:e0:77:e5:21:5b:91:4c:2d:71:e7: 99:2b:c6:23:61:df:2a:21:e8:74:54:98:25:5c:b7:7f:16:57: bf:34:fe:42:17:8f:f0:1a:71:29:be:13:01:d4:8f:9a:61:1c: c3:a4:19:70:94:c9:cf:92:19:b8:1e:f8:27:27:35:f2:5f:0a: 5b:8e:d0:c8:6d:27:3f:93:81:d1:36:88:d2:f5:31:69:f1:21: e7:cc:25:01:ea:bb:03:57:24:cd:85:c2:d6:86:6b:1c:c9:28: d6:f1:16:31:46:f4:7c:bc:c8:49:43:7b:05:cb:7a:6f:7f:9b: 51:f7:ae:a9:1b:a5:81:75:ba:5d:b2:8b:f9:b7:7d:e1:29:90: c2:98:32:bd:ba:99:a7:ca:41:46:7e:a0:1c:cf:52:04:39:b7: dc:1e:49:b7 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUAnxTksojOuSz6sD5IWGbT3pPaGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAyMTAwMDEwNTlaFw0yNzAyMDkwMDE1NTlaMDMxMTAvBgNV BAMTKDY1QzkzNjJBNTAwMzdEMTU5MDU0ODkxQkZGMkJCQkVBQTI3M0E4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCs+VBdFx3N+ey6V5YLAPgCnO5 mfm0SOOvjV1CjiKKS7o7EJLYnUwAh8P2FA3/l5HpDUQn0hrm9ybKK0eqivPPQsbX wCs5kjA8sNfbpQiK9Rek90cLFywmd9LZogCeJpH38n5JwWnJa8dSYAh94Z0FcC2M TR/XQDg84XuJ1hqO15CKg1iTBoMXisfkzm8g39oAu6W8/HmCum2N9Ijo1COK7Oyx JU9PE+n0Kq1x+cOlsnQaqFP2ybq7UsCqE0lIDyY6NBZ6o8DZ/S4WCYQcRGL/LiON n3UJu1RbLafqEhvXa2XecRqt3qiWBUMNFa/Gc7D1jPAdGXojXeyIiD+KbDPDAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUZck2KlADfRWQVIkb/yu76qJzqDEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWXV+AwQBWXWEAwQAWXXX MA0GCSqGSIb3DQEBCwUAA4IBAQC8RU2Abi4WSxfJIuve/ZvnSDWfwWFRCLwSSWKw 3vLhlXJN845OaLreL7ezV6C/a5g1FrET0zj4+dKrx8FP5YIr747d8DbsmT472Hb/ 8aXm2ItcZ+uEOU81TMp4oeX99H2X0+B35SFbkUwtceeZK8YjYd8qIeh0VJglXLd/ Fle/NP5CF4/wGnEpvhMB1I+aYRzDpBlwlMnPkhm4HvgnJzXyXwpbjtDIbSc/k4HR NojS9TFp8SHnzCUB6rsDVyTNhcLWhmscySjW8RYxRvR8vMhJQ3sFy3pvf5tR966p G6WBdbpdsov5t33hKZDCmDK9upmnykFGfqAcz1IEObfcHkm3 -----END CERTIFICATE-----Generated at Mon Mar 2 04:49:24 2026 by rpki-client