$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: 26yXBctuxJk5aQ2UJrNGLRpkclEoHfgrRzoIHwe7AaQ= Subject key identifier: 94:22:4C:03:BA:E4:BD:F4:3C:4C:58:A6:38:BB:F3:4D:C9:8C:03:E5 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 1E7E4A7A3E0B9E391497DE744120A1A751AE9B06 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa Signing time: Tue 03 Nov 2026 10:52:15 +0000 ROA not before: Tue 03 Nov 2026 10:47:15 +0000 ROA not after: Tue 02 Nov 2027 10:52:15 +0000 asID: 9009 IP address blocks: 84.46.170.0/24 maxlen: 24 84.46.234.0/24 maxlen: 24 84.46.235.0/24 maxlen: 24 86.38.178.0/23 maxlen: 24 89.116.62.0/24 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.116.237.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.82.0/24 maxlen: 24 89.117.88.0/24 maxlen: 24 89.117.89.0/24 maxlen: 24 89.117.90.0/24 maxlen: 24 89.117.113.0/24 maxlen: 24 89.117.114.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.160.0/24 maxlen: 24 89.117.161.0/24 maxlen: 24 89.117.162.0/24 maxlen: 24 89.117.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 22:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7e:4a:7a:3e:0b:9e:39:14:97:de:74:41:20:a1:a7:51:ae:9b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 3 10:47:15 2026 GMT Not After : Nov 2 10:52:15 2027 GMT Subject: CN=94224C03BAE4BDF43C4C58A638BBF34DC98C03E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:09:2f:84:27:df:8f:7f:22:55:e6:34:b2: 1a:46:c9:5b:ed:49:52:f6:c8:89:3a:09:c6:49:a5: 57:e0:6c:8b:20:f4:53:b1:b4:f8:7d:99:d8:cc:b8: e7:bf:13:e8:cd:0e:0e:35:a4:38:2f:fb:4d:3e:23: 63:fd:77:ae:a2:f3:05:0b:c3:c3:65:e9:3a:0f:bf: e6:57:b0:65:3a:f4:2d:89:ef:22:10:86:8d:bc:74: ea:b7:2d:79:01:05:87:e4:7c:0d:85:f1:a2:3f:52: d9:d3:f6:43:47:0e:d2:57:b4:a2:8a:b0:99:dd:54: cb:62:c1:45:f4:e7:05:a9:d5:94:14:73:ac:1f:3c: a4:5d:9d:3d:10:8e:89:0a:53:83:7b:05:87:ce:17: c6:c4:6a:bf:31:95:0a:63:f7:80:64:31:b0:9a:d3: 5c:fa:fc:58:71:9d:7f:c0:6b:f6:46:18:c6:10:7f: 93:69:17:a2:58:e0:b5:b7:d1:8d:f5:54:50:99:34: 3b:21:d1:fa:c7:8d:c6:7d:be:1f:4f:05:e6:ff:32: 89:3c:ff:3c:a5:fc:3a:97:68:09:fa:83:67:b3:e3: 8f:85:7d:9e:ad:19:59:bf:36:ee:4c:6d:ca:97:2a: 3d:78:f3:0e:0f:8a:8a:49:b9:5c:0e:39:20:f0:52: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:4C:03:BA:E4:BD:F4:3C:4C:58:A6:38:BB:F3:4D:C9:8C:03:E5 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 84.46.234.0/23 86.38.178.0/23 89.116.62.0/24 89.116.102.0/24 89.116.163.0/24 89.116.215.0/24 89.116.237.0/24 89.117.28.0/24 89.117.64.0/24 89.117.82.0/24 89.117.88.0-89.117.90.255 89.117.113.0-89.117.114.255 89.117.154.0/23 89.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption 93:e4:d6:23:be:4c:d7:b3:97:00:2e:54:2a:20:9f:54:c1:a8: 46:27:0b:4e:2f:b8:9f:a4:20:1e:99:91:6b:fd:b1:41:a5:3d: d6:c1:1d:c7:fd:1f:27:e2:fa:03:3b:f6:ad:f3:c2:14:01:8c: d7:6a:4c:db:a6:d5:de:de:44:2e:c0:01:e4:3f:8a:0c:39:77: 59:b2:54:3a:64:06:8e:06:5b:56:a1:bd:25:5e:93:52:25:6f: 4c:a2:b9:45:10:d8:fe:5a:01:07:71:20:48:52:cb:d4:f4:c3: 21:12:92:64:67:e2:34:e7:d0:f4:90:f0:9a:57:bf:0f:00:87: d1:cd:db:04:e2:df:f4:61:e7:b1:d1:f2:62:42:36:3f:b2:43: 27:ce:c2:9e:dd:9c:3f:78:ff:53:ac:1b:fe:ee:f9:30:00:df: 82:6a:85:77:4c:6e:de:c0:83:66:50:d0:7d:07:41:fd:a3:b5: 20:2b:1d:ef:5a:05:96:30:f1:9d:ce:18:ee:14:52:b7:ca:de: f5:f5:9e:2f:22:ca:97:94:c4:1f:cf:58:3f:82:bf:ff:60:38: d4:83:3d:bb:b8:89:81:b1:93:d3:9f:88:38:36:e7:98:96:02: 46:e4:ac:ce:93:93:18:b7:b9:6a:7e:d1:2a:b5:66:96:fa:db: 64:05:36:c9 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIUHn5Kej4LnjkUl950QSChp1GumwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMDMxMDQ3MTVaFw0yNzExMDIxMDUyMTVaMDMxMTAvBgNV BAMTKDk0MjI0QzAzQkFFNEJERjQzQzRDNThBNjM4QkJGMzREQzk4QzAzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbzAkvhCffj38iVeY0shpGyVvt SVL2yIk6CcZJpVfgbIsg9FOxtPh9mdjMuOe/E+jNDg41pDgv+00+I2P9d66i8wUL w8Nl6ToPv+ZXsGU69C2J7yIQho28dOq3LXkBBYfkfA2F8aI/UtnT9kNHDtJXtKKK sJndVMtiwUX05wWp1ZQUc6wfPKRdnT0QjokKU4N7BYfOF8bEar8xlQpj94BkMbCa 01z6/FhxnX/Aa/ZGGMYQf5NpF6JY4LW30Y31VFCZNDsh0frHjcZ9vh9PBeb/Mok8 /zyl/DqXaAn6g2ez44+FfZ6tGVm/Nu5MbcqXKj148w4PiopJuVwOOSDwUhTVAgMB AAGjggKSMIICjjAdBgNVHQ4EFgQUlCJMA7rkvfQ8TFimOLvzTcmMA+UwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwgYMGCCsGAQUFBwEHAQH/BHQwcjBwBAIAATBqAwQAVC6qAwQBVC7qAwQBViay AwQAWXQ+AwQAWXRmAwQAWXSjAwQAWXTXAwQAWXTtAwQAWXUcAwQAWXVAAwQAWXVS MAwDBANZdVgDBABZdVowDAMEAFl1cQMEAFl1cgMEAVl1mgMEAll1oDANBgkqhkiG 9w0BAQsFAAOCAQEAk+TWI75M17OXAC5UKiCfVMGoRicLTi+4n6QgHpmRa/2xQaU9 1sEdx/0fJ+L6Azv2rfPCFAGM12pM26bV3t5ELsAB5D+KDDl3WbJUOmQGjgZbVqG9 JV6TUiVvTKK5RRDY/loBB3EgSFLL1PTDIRKSZGfiNOfQ9JDwmle/DwCH0c3bBOLf 9GHnsdHyYkI2P7JDJ87Cnt2cP3j/U6wb/u75MADfgmqFd0xu3sCDZlDQfQdB/aO1 ICsd71oFljDxnc4Y7hRSt8re9fWeLyLKl5TEH89YP4K//2A41IM9u7iJgbGT05+I ODbnmJYCRuSszpOTGLe5an7RKrVmlvrbZAU2yQ== -----END CERTIFICATE-----Generated at Thu Nov 5 09:34:57 2026 by rpki-client