$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: nI5cx0HxMuLlWRkNqjBXG6jPXEXjC5PnFRMevFddelM= Subject key identifier: 4E:B2:43:4C:ED:DD:B0:C0:54:82:AF:41:F0:F5:64:86:D0:49:1C:C3 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7B806CC8E9578E45EFBC45D4D88D9BA498B591D9 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3356.roa Signing time: Thu 11 Jun 2026 20:47:33 +0000 ROA not before: Thu 11 Jun 2026 20:42:33 +0000 ROA not after: Thu 10 Jun 2027 20:47:33 +0000 asID: 3356 IP address blocks: 86.38.7.0/24 maxlen: 24 86.38.151.0/24 maxlen: 24 89.116.54.0/24 maxlen: 24 89.116.125.0/24 maxlen: 24 89.117.135.0/24 maxlen: 24 89.117.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 15:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:80:6c:c8:e9:57:8e:45:ef:bc:45:d4:d8:8d:9b:a4:98:b5:91:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 11 20:42:33 2026 GMT Not After : Jun 10 20:47:33 2027 GMT Subject: CN=4EB2434CEDDDB0C05482AF41F0F56486D0491CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:a1:44:5b:b0:d7:10:7b:3b:1c:cb:cf:6d: a6:a3:cd:37:14:0b:1b:f1:7a:3c:6e:b5:b0:16:f9: 62:7c:b4:fc:4a:69:82:7a:d2:f5:08:4c:0f:9e:7a: 35:67:54:95:82:60:9d:61:8b:81:73:e5:42:de:53: c9:a5:14:1d:8f:75:c1:c9:1c:a7:e8:f7:37:a1:66: bc:e8:c3:7e:11:2d:ab:96:1d:67:6a:c7:31:64:82: 51:3e:59:02:34:1a:fc:c3:03:9c:dd:a9:08:27:0b: 25:70:1c:fe:2c:c5:51:cb:df:e5:d9:58:c9:79:e3: 44:85:33:61:c1:4e:c7:97:ba:21:b4:d1:18:7e:0b: 96:76:bc:b8:39:09:68:4b:96:56:f0:2f:aa:60:45: 75:c4:9d:d8:50:a5:a1:b5:f2:9b:87:73:9c:7b:e4: bf:cc:b9:29:38:54:62:33:19:1b:28:f8:c4:3b:63: 07:fb:60:36:11:d9:ff:03:e6:2c:85:46:b7:8a:eb: 2e:41:b8:30:4c:b6:14:7f:51:10:a0:8c:ee:15:ec: 58:86:f9:23:73:bb:50:c4:63:89:8d:9c:46:cb:24: 70:8f:a9:20:26:47:10:39:5c:3c:cb:6e:fc:7f:d4: aa:38:57:d7:d7:25:fa:9b:6f:46:99:86:13:07:82: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:43:4C:ED:DD:B0:C0:54:82:AF:41:F0:F5:64:86:D0:49:1C:C3 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.7.0/24 86.38.151.0/24 89.116.54.0/24 89.116.125.0/24 89.117.135.0-89.117.136.255 Signature Algorithm: sha256WithRSAEncryption cb:1c:7c:f3:8b:9f:78:f3:6a:11:bd:19:10:61:78:fe:46:7e: f1:a3:c4:c6:61:b9:46:72:d1:81:ad:45:5c:1a:80:92:76:ad: 60:9d:d0:ca:22:da:a1:5d:77:e6:26:63:23:62:5c:ff:93:24: 36:8b:3b:aa:9c:6a:3d:32:94:32:e9:28:fe:d8:a3:b9:09:7a: 54:57:e4:3b:6e:ff:16:3f:8f:e9:b3:5f:61:90:e6:ea:65:2d: 75:18:e7:a3:c1:17:23:2b:49:ac:82:45:a2:1c:bd:d9:fc:39: ba:b4:35:88:15:eb:db:e0:1a:c4:14:a4:6c:7d:5b:8c:d7:f5: da:33:37:b1:72:30:59:8d:55:e2:bd:6a:5d:51:a9:ff:6c:c2: d2:fc:8d:3e:aa:1b:10:a4:66:ac:35:63:aa:f4:65:75:5c:27: bd:ce:e1:03:13:af:86:be:e3:20:56:5f:c0:d0:bb:e4:28:97: 0c:d9:33:b3:b4:7f:98:f2:d6:fd:a7:12:5f:c3:66:87:cf:6a: 50:cb:dc:29:39:dc:f3:b9:a2:25:83:23:45:5d:62:71:23:37: 52:e0:dc:ac:17:87:35:8a:eb:ce:29:8e:08:4b:93:fa:e5:d1: 5c:fb:88:50:d8:89:03:91:87:b3:26:cb:dd:ad:e0:1f:41:02: a2:52:5e:54 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUe4BsyOlXjkXvvEXU2I2bpJi1kdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA2MTEyMDQyMzNaFw0yNzA2MTAyMDQ3MzNaMDMxMTAvBgNV BAMTKDRFQjI0MzRDRUREREIwQzA1NDgyQUY0MUYwRjU2NDg2RDA0OTFDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtKFEW7DXEHs7HMvPbaajzTcU CxvxejxutbAW+WJ8tPxKaYJ60vUITA+eejVnVJWCYJ1hi4Fz5ULeU8mlFB2PdcHJ HKfo9zehZrzow34RLauWHWdqxzFkglE+WQI0GvzDA5zdqQgnCyVwHP4sxVHL3+XZ WMl540SFM2HBTseXuiG00Rh+C5Z2vLg5CWhLllbwL6pgRXXEndhQpaG18puHc5x7 5L/MuSk4VGIzGRso+MQ7Ywf7YDYR2f8D5iyFRreK6y5BuDBMthR/URCgjO4V7FiG +SNzu1DEY4mNnEbLJHCPqSAmRxA5XDzLbvx/1Ko4V9fXJfqbb0aZhhMHgtYXAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUTrJDTO3dsMBUgq9B8PVkhtBJHMMwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzMzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwPwYIKwYBBQUHAQcBAf8EMDAuMCwEAgABMCYDBABWJgcDBABWJpcDBABZdDYD BABZdH0wDAMEAFl1hwMEAFl1iDANBgkqhkiG9w0BAQsFAAOCAQEAyxx884ufePNq Eb0ZEGF4/kZ+8aPExmG5RnLRga1FXBqAknatYJ3QyiLaoV135iZjI2Jc/5MkNos7 qpxqPTKUMuko/tijuQl6VFfkO27/Fj+P6bNfYZDm6mUtdRjno8EXIytJrIJFohy9 2fw5urQ1iBXr2+AaxBSkbH1bjNf12jM3sXIwWY1V4r1qXVGp/2zC0vyNPqobEKRm rDVjqvRldVwnvc7hAxOvhr7jIFZfwNC75CiXDNkzs7R/mPLW/acSX8Nmh89qUMvc KTnc87miJYMjRV1icSM3UuDcrBeHNYrrzimOCEuT+uXRXPuIUNiJA5GHsybL3a3g H0EColJeVA== -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:18 2026 by rpki-client