$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: 5ZxTm2AmR5I5sYEmoeU+opfKpYYFC8uJkvC2jV280LI= Subject key identifier: E5:7F:55:AA:40:F9:B1:EF:97:C1:AC:9D:18:7A:59:34:D2:17:05:5E Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 6D7B86250DAC9577E135266A44FC9CE2DFD10C1A Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa Signing time: Sun 26 Jul 2026 15:49:14 +0000 ROA not before: Sun 26 Jul 2026 15:44:14 +0000 ROA not after: Sun 25 Jul 2027 15:49:14 +0000 asID: 42831 IP address blocks: 89.116.148.0/24 maxlen: 24 89.117.70.0/24 maxlen: 24 89.117.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:86:25:0d:ac:95:77:e1:35:26:6a:44:fc:9c:e2:df:d1:0c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 26 15:44:14 2026 GMT Not After : Jul 25 15:49:14 2027 GMT Subject: CN=E57F55AA40F9B1EF97C1AC9D187A5934D217055E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:d4:1b:16:7e:c3:92:5a:1e:7a:b1:e4:57: 65:cb:7e:a6:48:ad:23:3f:fc:c5:49:30:cb:7d:62: 32:e5:2e:0e:46:ce:7a:5c:7b:1b:ce:4b:98:c7:a2: 96:4b:65:49:03:22:cd:13:d1:77:f6:71:38:73:a0: 2f:79:d7:5a:5b:2b:12:58:9d:91:24:69:4a:5c:3b: 71:b9:18:f6:0a:b3:08:29:e2:81:fe:5d:ab:a5:ba: 49:09:e1:2d:ca:e9:f5:3d:97:5e:22:ee:a9:42:53: a9:69:90:cc:16:99:6e:96:a4:b4:c2:77:bf:1f:1f: 41:87:38:d0:be:6f:fe:7b:6d:4f:89:ce:fc:a7:6f: 90:00:a2:0b:ea:e6:8b:83:e5:99:d4:74:77:ca:96: 5e:c8:6c:23:6a:e4:85:10:b1:eb:31:21:55:92:f6: a9:06:ae:a4:c6:ae:c6:ad:ef:c1:90:db:56:42:16: e6:fa:6e:6b:3d:69:43:1b:ca:65:41:9b:3e:1d:38: c7:76:5a:4d:77:9c:5a:5b:c2:92:ac:30:de:4c:21: aa:c4:00:b1:ee:58:d2:4b:52:b4:b4:5e:74:71:94: c5:42:ed:45:15:62:b9:aa:00:54:91:52:a4:d0:d9: 0a:94:bd:64:cb:42:ff:75:54:e5:51:2f:46:16:7a: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:55:AA:40:F9:B1:EF:97:C1:AC:9D:18:7A:59:34:D2:17:05:5E X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.148.0/24 89.117.70.0/23 Signature Algorithm: sha256WithRSAEncryption 53:3b:8b:92:6b:7a:fe:23:1c:39:92:02:af:79:f4:95:fe:f7: 00:37:11:97:8f:1c:27:85:d4:79:c0:1f:31:f2:30:7d:19:be: 6e:d0:e8:70:4a:f2:d3:df:4b:46:73:b3:d0:5e:64:2d:57:79: c5:9f:d7:f1:ed:82:06:7b:fd:1b:ba:01:f2:76:2c:36:07:ff: 89:40:bc:f4:d8:97:a8:3a:fe:64:ec:64:b8:9a:15:25:55:3f: eb:15:ae:7e:48:e0:fd:68:2a:2a:50:fb:86:a0:c6:0b:aa:af: dd:69:3d:23:1a:8e:1b:52:34:79:71:6d:77:38:45:75:a5:4b: d3:5b:38:91:34:bb:38:59:38:55:3f:6e:8a:3c:1d:39:b5:b4: 17:62:0b:40:5c:9b:47:9a:a6:0b:98:93:44:83:9d:cd:c4:58: 62:86:91:59:51:ca:2d:e3:23:29:8e:fb:9e:fe:88:6f:9f:3a: b2:18:64:95:2b:49:11:6b:23:25:e9:d5:bf:2a:db:1e:b7:64: 1c:27:6f:ee:49:23:ac:45:eb:28:89:8d:5e:af:5e:48:1e:f2: 4c:11:02:b9:dc:c5:25:15:3f:5b:81:4d:9d:5e:e6:cb:4b:34: fb:00:c0:96:8e:6c:7c:f0:8a:ac:ac:9f:09:e8:4b:15:40:78: 16:1d:1a:aa -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbXuGJQ2slXfhNSZqRPyc4t/RDBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MjYxNTQ0MTRaFw0yNzA3MjUxNTQ5MTRaMDMxMTAvBgNV BAMTKEU1N0Y1NUFBNDBGOUIxRUY5N0MxQUM5RDE4N0E1OTM0RDIxNzA1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNNQbFn7DkloeerHkV2XLfqZI rSM//MVJMMt9YjLlLg5GznpcexvOS5jHopZLZUkDIs0T0Xf2cThzoC9511pbKxJY nZEkaUpcO3G5GPYKswgp4oH+XaulukkJ4S3K6fU9l14i7qlCU6lpkMwWmW6WpLTC d78fH0GHONC+b/57bU+Jzvynb5AAogvq5ouD5ZnUdHfKll7IbCNq5IUQsesxIVWS 9qkGrqTGrsat78GQ21ZCFub6bms9aUMbymVBmz4dOMd2Wk13nFpbwpKsMN5MIarE ALHuWNJLUrS0XnRxlMVC7UUVYrmqAFSRUqTQ2QqUvWTLQv91VOVRL0YWekKDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5X9VqkD5se+XwaydGHpZNNIXBV4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQyODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXSUAwQBWXVGMA0GCSqG SIb3DQEBCwUAA4IBAQBTO4uSa3r+Ixw5kgKvefSV/vcANxGXjxwnhdR5wB8x8jB9 Gb5u0OhwSvLT30tGc7PQXmQtV3nFn9fx7YIGe/0bugHydiw2B/+JQLz02JeoOv5k 7GS4mhUlVT/rFa5+SOD9aCoqUPuGoMYLqq/daT0jGo4bUjR5cW13OEV1pUvTWziR NLs4WThVP26KPB05tbQXYgtAXJtHmqYLmJNEg53NxFhihpFZUcot4yMpjvue/ohv nzqyGGSVK0kRayMl6dW/Ktset2QcJ2/uSSOsResoiY1er15IHvJMEQK53MUlFT9b gU2dXubLSzT7AMCWjmx88IqsrJ8J6EsVQHgWHRqq -----END CERTIFICATE-----Generated at Tue Jul 28 21:18:50 2026 by rpki-client