$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: z3AZhBLnKDtI88olxblKCy3a7NQwggyyDhLprDE8Exs= Subject key identifier: EC:64:4E:E5:6C:4A:46:F6:E6:A9:2F:B3:6A:1E:02:23:8B:65:E6:95 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 361AD6F994769B6D5CFF1E274D66F2CBE9C1559E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa Signing time: Wed 24 Sep 2025 21:09:05 +0000 ROA not before: Wed 24 Sep 2025 21:04:05 +0000 ROA not after: Wed 23 Sep 2026 21:09:05 +0000 asID: 9009 IP address blocks: 84.46.170.0/24 maxlen: 24 84.46.234.0/24 maxlen: 24 84.46.235.0/24 maxlen: 24 86.38.178.0/23 maxlen: 24 89.116.62.0/24 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.82.0/24 maxlen: 24 89.117.88.0/24 maxlen: 24 89.117.89.0/24 maxlen: 24 89.117.90.0/24 maxlen: 24 89.117.113.0/24 maxlen: 24 89.117.114.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1a:d6:f9:94:76:9b:6d:5c:ff:1e:27:4d:66:f2:cb:e9:c1:55:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 24 21:04:05 2025 GMT Not After : Sep 23 21:09:05 2026 GMT Subject: CN=EC644EE56C4A46F6E6A92FB36A1E02238B65E695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:00:73:a8:81:81:b0:d1:c8:f4:0a:07:51: c9:b0:9e:97:d4:bd:05:41:94:36:f4:64:64:62:eb: 33:31:48:99:d5:fe:cd:18:bf:93:51:af:63:86:5d: 4a:bf:bb:5d:a2:11:68:c2:8e:52:0f:97:7e:3e:a8: a5:e3:16:e1:6b:04:e2:90:20:07:55:c2:8b:fc:61: 90:b7:8a:a6:bb:11:10:de:50:e3:e1:14:3e:c1:eb: cb:bf:74:81:80:42:81:a4:05:c6:50:d6:78:13:79: 65:f7:d1:61:c6:01:a6:5e:29:4a:d1:6b:8f:9d:df: 6d:b1:ca:57:c3:ec:29:3d:3f:74:c0:75:7c:50:f5: b3:96:38:d4:e0:48:7b:fe:95:f3:50:9a:84:3b:be: b2:e5:5f:08:bc:d3:08:9c:61:b0:40:d4:9d:ea:fc: 2b:7f:53:f6:8a:2c:02:0d:09:c6:1c:2d:22:37:ec: be:f4:bb:81:ad:b5:9e:2a:0c:e8:ce:eb:cc:c7:8f: 1e:5b:c4:2b:d0:e2:cb:5b:31:a6:bb:c3:26:08:2c: bc:90:cf:31:2a:fd:54:34:ac:1e:f8:30:fe:73:99: 8b:4a:06:5f:6d:4b:f9:46:9b:17:62:c6:3c:4d:cb: 56:2e:5a:50:c7:13:99:50:e5:77:2c:c2:74:a7:e1: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:4E:E5:6C:4A:46:F6:E6:A9:2F:B3:6A:1E:02:23:8B:65:E6:95 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 84.46.234.0/23 86.38.178.0/23 89.116.62.0/24 89.116.102.0/24 89.116.163.0/24 89.116.215.0/24 89.117.64.0/24 89.117.82.0/24 89.117.88.0-89.117.90.255 89.117.113.0-89.117.114.255 89.117.154.0/24 Signature Algorithm: sha256WithRSAEncryption 08:87:ad:06:c1:99:df:fc:ef:c7:b8:d4:15:63:01:11:80:1f: 2f:5c:df:71:a3:0b:1e:07:4b:4b:c8:a1:2b:0a:c6:c4:ac:47: bf:a1:30:b7:bb:21:33:e1:32:79:bf:c6:5c:0e:bb:7a:42:2a: b2:d0:db:27:9d:7c:58:c6:34:17:04:a5:e8:ad:2a:80:3b:05: 50:f2:25:11:9d:2e:c8:a6:90:19:52:18:26:3e:83:28:7b:de: 35:7e:8f:69:fe:2b:4b:eb:ca:da:f4:e3:54:39:7f:3b:ce:e1: af:7d:94:38:e2:96:b5:02:a5:89:c5:10:6d:91:60:3e:79:65: c0:5c:c3:cb:62:8a:5e:d8:59:da:c6:ef:1c:ae:52:a0:89:e7: b8:da:f0:23:dd:c1:d8:0c:0d:ee:12:cf:d7:a9:cf:ee:f8:d3: 6a:21:7d:b7:cc:17:ed:78:8c:e0:8f:2c:a5:08:fe:18:2c:3f: 5e:cb:7c:b8:c6:30:7c:92:e3:c2:39:bc:dc:4e:a0:94:31:bd: c9:10:3c:bf:6e:00:04:8f:b0:5e:de:5a:51:cf:fc:9d:74:88: 53:f2:2a:86:af:aa:b2:87:82:1a:6e:52:3a:41:da:96:4c:cb: ab:9b:e8:16:3a:36:5e:b4:f1:f9:9e:4b:b4:78:72:ad:4d:3e: a3:8e:e2:e9 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIUNhrW+ZR2m21c/x4nTWbyy+nBVZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA5MjQyMTA0MDVaFw0yNjA5MjMyMTA5MDVaMDMxMTAvBgNV BAMTKEVDNjQ0RUU1NkM0QTQ2RjZFNkE5MkZCMzZBMUUwMjIzOEI2NUU2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KABzqIGBsNHI9AoHUcmwnpfU vQVBlDb0ZGRi6zMxSJnV/s0Yv5NRr2OGXUq/u12iEWjCjlIPl34+qKXjFuFrBOKQ IAdVwov8YZC3iqa7ERDeUOPhFD7B68u/dIGAQoGkBcZQ1ngTeWX30WHGAaZeKUrR a4+d322xylfD7Ck9P3TAdXxQ9bOWONTgSHv+lfNQmoQ7vrLlXwi80wicYbBA1J3q /Ct/U/aKLAINCcYcLSI37L70u4GttZ4qDOjO68zHjx5bxCvQ4stbMaa7wyYILLyQ zzEq/VQ0rB74MP5zmYtKBl9tS/lGmxdixjxNy1YuWlDHE5lQ5XcswnSn4ZVjAgMB AAGjggJ/MIICezAdBgNVHQ4EFgQU7GRO5WxKRvbmqS+zah4CI4tl5pUwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwcQYIKwYBBQUHAQcBAf8EYjBgMF4EAgABMFgDBABULqoDBAFULuoDBAFWJrID BABZdD4DBABZdGYDBABZdKMDBABZdNcDBABZdUADBABZdVIwDAMEA1l1WAMEAFl1 WjAMAwQAWXVxAwQAWXVyAwQAWXWaMA0GCSqGSIb3DQEBCwUAA4IBAQAIh60GwZnf /O/HuNQVYwERgB8vXN9xowseB0tLyKErCsbErEe/oTC3uyEz4TJ5v8ZcDrt6Qiqy 0NsnnXxYxjQXBKXorSqAOwVQ8iURnS7IppAZUhgmPoMoe941fo9p/itL68ra9ONU OX87zuGvfZQ44pa1AqWJxRBtkWA+eWXAXMPLYope2Fnaxu8crlKgiee42vAj3cHY DA3uEs/Xqc/u+NNqIX23zBfteIzgjyylCP4YLD9ey3y4xjB8kuPCObzcTqCUMb3J EDy/bgAEj7Be3lpRz/yddIhT8iqGr6qyh4IablI6QdqWTMurm+gWOjZetPH5nku0 eHKtTT6jjuLp -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:31 2025 by rpki-client