$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa File: AS51167.roa (raw, json) Hash identifier: eiaUWVGbCqVr72PnF+hJZuqoup+LH36XK7Q73wWTXOk= Subject key identifier: A3:E3:0D:3D:16:2C:BA:E4:1A:4A:AD:7D:54:A9:24:AD:C7:71:61:1C Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 4E4C9882E1D484B862797BC68B8B61376BD67443 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa Signing time: Mon 08 Jun 2026 16:47:30 +0000 ROA not before: Mon 08 Jun 2026 16:42:30 +0000 ROA not after: Mon 07 Jun 2027 16:47:30 +0000 asID: 51167 IP address blocks: 84.46.240.0/20 maxlen: 24 89.116.24.0/21 maxlen: 24 89.117.16.0/21 maxlen: 21 89.117.48.0/20 maxlen: 24 89.117.72.0/21 maxlen: 24 89.117.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 15:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:98:82:e1:d4:84:b8:62:79:7b:c6:8b:8b:61:37:6b:d6:74:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 8 16:42:30 2026 GMT Not After : Jun 7 16:47:30 2027 GMT Subject: CN=A3E30D3D162CBAE41A4AAD7D54A924ADC771611C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:5f:21:82:20:f2:66:3b:50:5b:65:9a:e4: fa:19:ea:e5:a6:c4:7d:da:6f:f5:ca:ff:b5:d8:d3: db:74:5b:ba:5e:c1:c3:72:e9:2b:af:12:d6:33:ba: 81:02:91:4e:29:83:36:07:c6:2d:dc:a0:a5:1f:be: 42:b4:b4:2e:8e:ca:51:51:80:5d:44:4b:28:69:84: 12:f9:f6:c3:ab:0e:26:ed:37:e6:5e:a0:55:5b:e7: b2:0f:ec:7b:78:d5:e8:f5:d1:e1:34:f4:80:30:19: c6:e7:70:c5:05:85:77:c2:1b:ac:4a:b2:5e:61:f9: 3a:46:fe:d5:f9:6b:dd:52:f9:a9:bc:c3:fc:03:ab: 88:3a:74:5f:b1:3b:fa:49:f7:00:3d:00:17:d7:34: eb:c7:c8:d5:16:25:2b:47:ef:9d:3e:c0:50:0c:6b: a3:f8:5b:ad:39:73:46:ee:27:88:3f:a8:e5:e6:55: ab:46:85:a5:ec:63:4e:26:d1:41:ca:01:3f:c3:66: 0a:a0:0d:23:1a:9e:a6:b5:09:9d:47:38:48:3a:e0: 5c:fa:8a:63:d0:12:95:26:26:0f:ec:d5:a2:8a:53: 01:b1:03:a1:42:86:82:ea:af:d3:07:f9:ae:22:e6: b4:89:48:d8:c8:40:8a:5f:65:7d:b6:48:40:1a:f5: 25:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E3:0D:3D:16:2C:BA:E4:1A:4A:AD:7D:54:A9:24:AD:C7:71:61:1C X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.240.0/20 89.116.24.0/21 89.117.16.0/21 89.117.48.0/20 89.117.72.0/21 89.117.144.0/21 Signature Algorithm: sha256WithRSAEncryption 32:41:94:6e:c0:70:7e:6e:db:8c:bd:91:40:44:6d:d4:9f:65: 61:12:7b:b0:98:b8:73:5c:f2:a6:2a:4d:77:4c:b6:73:10:14: 58:b7:df:5a:b0:5f:9d:7e:9d:dd:52:6d:d7:f8:42:63:85:a4: 40:e3:5a:b7:5e:17:d2:b5:de:da:5a:6c:25:5a:98:99:ca:7d: 3a:0d:72:3a:d2:c0:74:61:04:91:fd:e4:be:1a:3d:b2:8b:e7: ae:de:04:40:9e:4d:5b:f4:47:a0:92:bd:4c:de:a2:df:16:32: d5:b8:7e:e5:15:2f:bd:72:58:d7:33:50:1e:ee:d9:9e:2b:d0: 3d:51:8f:69:88:a3:3b:61:e3:ae:9b:f3:94:61:c1:23:fc:52: 6c:3c:4f:e0:2d:d3:96:91:38:8a:eb:d8:a2:98:2b:26:bd:ad: 83:41:bd:7e:a4:16:ee:76:16:ff:ef:21:b4:ca:ca:e7:38:f4: aa:f2:a5:aa:6f:a7:d1:af:1c:51:eb:17:71:cc:dc:1d:ae:21: d7:d1:82:12:60:74:29:1c:e6:dc:6b:15:4e:ad:02:cb:6c:dd: 39:4e:7f:62:7d:c0:63:4a:5e:0c:a4:fe:09:96:13:1d:da:0c: b7:64:54:3d:f7:84:f4:13:64:07:70:0d:df:4c:d0:df:6d:5c: 10:de:51:f4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUTkyYguHUhLhieXvGi4thN2vWdEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA2MDgxNjQyMzBaFw0yNzA2MDcxNjQ3MzBaMDMxMTAvBgNV BAMTKEEzRTMwRDNEMTYyQ0JBRTQxQTRBQUQ3RDU0QTkyNEFEQzc3MTYxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KF8hgiDyZjtQW2Wa5PoZ6uWm xH3ab/XK/7XY09t0W7pewcNy6SuvEtYzuoECkU4pgzYHxi3coKUfvkK0tC6OylFR gF1ESyhphBL59sOrDibtN+ZeoFVb57IP7Ht41ej10eE09IAwGcbncMUFhXfCG6xK sl5h+TpG/tX5a91S+am8w/wDq4g6dF+xO/pJ9wA9ABfXNOvHyNUWJStH750+wFAM a6P4W605c0buJ4g/qOXmVatGhaXsY04m0UHKAT/DZgqgDSManqa1CZ1HOEg64Fz6 imPQEpUmJg/s1aKKUwGxA6FChoLqr9MH+a4i5rSJSNjIQIpfZX22SEAa9SWXAgMB AAGjggJMMIICSDAdBgNVHQ4EFgQUo+MNPRYsuuQaSq19VKkkrcdxYRwwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzUxMTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEVC7wAwQDWXQYAwQDWXUQ AwQEWXUwAwQDWXVIAwQDWXWQMA0GCSqGSIb3DQEBCwUAA4IBAQAyQZRuwHB+btuM vZFARG3Un2VhEnuwmLhzXPKmKk13TLZzEBRYt99asF+dfp3dUm3X+EJjhaRA41q3 XhfStd7aWmwlWpiZyn06DXI60sB0YQSR/eS+Gj2yi+eu3gRAnk1b9Eegkr1M3qLf FjLVuH7lFS+9cljXM1Ae7tmeK9A9UY9piKM7YeOum/OUYcEj/FJsPE/gLdOWkTiK 69iimCsmva2DQb1+pBbudhb/7yG0ysrnOPSq8qWqb6fRrxxR6xdxzNwdriHX0YIS YHQpHObcaxVOrQLLbN05Tn9ifcBjSl4MpP4JlhMd2gy3ZFQ994T0E2QHcA3fTNDf bVwQ3lH0 -----END CERTIFICATE-----Generated at Sat Jun 13 09:24:48 2026 by rpki-client