$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: +OOsJ4cJlP/UomOi4xpEYRtgaH5PEuZgpCsPqUn/eQE= Subject key identifier: 8A:F7:AA:A3:AC:77:6F:1A:D0:9A:57:AA:64:20:25:BA:93:95:59:BF Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2B572E40DC003644D1F3DF672DB552DC17B219F9 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Sat 25 Jul 2026 00:04:38 +0000 ROA not before: Fri 24 Jul 2026 23:59:38 +0000 ROA not after: Sat 24 Jul 2027 00:04:38 +0000 asID: 9304 IP address blocks: 86.38.187.0/24 maxlen: 24 89.116.244.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:57:2e:40:dc:00:36:44:d1:f3:df:67:2d:b5:52:dc:17:b2:19:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 24 23:59:38 2026 GMT Not After : Jul 24 00:04:38 2027 GMT Subject: CN=8AF7AAA3AC776F1AD09A57AA642025BA939559BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8a:79:19:06:60:fa:35:d0:6f:bf:a2:5b:0c: ec:a2:35:9f:31:00:72:86:fb:1a:e5:ad:a9:50:6b: 63:d3:1f:66:19:7c:7e:51:60:f9:de:7b:b8:e3:c4: 7a:bc:b6:63:65:bf:75:de:01:8b:ee:08:5e:cc:0d: 5d:8a:73:c7:60:d9:23:b1:eb:ad:28:53:5b:84:f3: d7:8b:1c:be:c9:2c:8f:16:a6:64:7c:8f:58:a3:35: 87:82:f1:b9:4a:65:55:aa:6f:e7:80:a7:da:a0:62: 03:45:26:02:68:69:0f:96:f7:25:b9:7e:1e:45:6f: 3e:f7:2c:f1:59:ea:29:00:27:da:fe:cb:fe:24:a1: ae:32:88:b2:e9:0c:3a:f0:b3:ba:51:7d:04:b5:89: a8:78:5f:0e:2e:98:d1:a5:a7:97:d6:1d:96:0f:ce: 9f:b3:bb:67:d9:e4:9c:ba:4d:78:25:04:43:73:87: 03:fb:24:1b:55:e1:4f:3c:a7:a0:e7:d9:c9:5e:64: ae:de:f4:8c:61:88:cb:80:ca:8d:ed:53:32:26:34: 34:b5:4b:ce:01:be:bb:02:eb:6b:01:10:b8:86:03: 27:97:4b:93:9a:4f:e7:ec:5a:c7:06:cc:10:3a:cb: ad:c5:37:c6:ee:89:56:3c:c4:73:3e:36:c9:fd:ac: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:AA:A3:AC:77:6F:1A:D0:9A:57:AA:64:20:25:BA:93:95:59:BF X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 89.116.244.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:18:ea:fe:17:6c:da:2d:53:d4:73:f4:a6:72:af:39:80:17: ea:a4:3b:47:88:e2:9d:3b:26:e6:9c:fb:ea:cd:db:6e:30:19: 7f:53:87:9b:cd:19:bf:fb:0f:6d:e3:8b:47:f0:de:b6:ec:a8: 7a:0b:d6:51:36:3c:52:4c:c1:26:cc:5b:5f:f0:12:b6:cb:d1: 09:54:37:ea:7a:1d:57:65:83:31:03:15:11:07:10:68:12:60: 80:2e:60:c0:f7:d6:da:da:d0:58:ba:e9:31:d0:27:58:b1:94: cb:10:eb:cf:9a:13:19:a0:58:5f:05:3d:e7:c7:90:8f:09:9b: e7:71:68:9e:6e:f0:a3:c1:41:3f:19:c5:e3:72:09:98:b4:57: 93:46:0a:00:21:f9:01:d6:3b:ec:6a:3f:f6:47:19:9b:f5:62: a7:d0:bd:0f:a2:e4:db:eb:a6:a4:91:d0:a5:b3:0b:64:d8:9b: 94:1b:6b:8a:4a:3d:c9:b1:a7:f0:f0:8e:30:fc:b8:31:8d:2e: e4:90:d9:5b:af:51:f2:91:88:d6:52:45:af:66:8a:7f:b2:40: 76:cd:36:98:df:52:dc:81:ab:1c:99:06:8b:55:47:01:45:91: fd:e5:57:96:b5:bf:e3:34:f8:30:06:eb:c0:6d:29:ec:20:82: 7a:0d:3b:b9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUK1cuQNwANkTR899nLbVS3BeyGfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MjQyMzU5MzhaFw0yNzA3MjQwMDA0MzhaMDMxMTAvBgNV BAMTKDhBRjdBQUEzQUM3NzZGMUFEMDlBNTdBQTY0MjAyNUJBOTM5NTU5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPinkZBmD6NdBvv6JbDOyiNZ8x AHKG+xrlralQa2PTH2YZfH5RYPnee7jjxHq8tmNlv3XeAYvuCF7MDV2Kc8dg2SOx 660oU1uE89eLHL7JLI8WpmR8j1ijNYeC8blKZVWqb+eAp9qgYgNFJgJoaQ+W9yW5 fh5Fbz73LPFZ6ikAJ9r+y/4koa4yiLLpDDrws7pRfQS1iah4Xw4umNGlp5fWHZYP zp+zu2fZ5Jy6TXglBENzhwP7JBtV4U88p6Dn2cleZK7e9IxhiMuAyo3tUzImNDS1 S84BvrsC62sBELiGAyeXS5OaT+fsWscGzBA6y63FN8buiVY8xHM+Nsn9rCi9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUiveqo6x3bxrQmleqZCAlupOVWb8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABWJrsDBABZdPQDBABZdfow DQYJKoZIhvcNAQELBQADggEBAIoY6v4XbNotU9Rz9KZyrzmAF+qkO0eI4p07Juac ++rN224wGX9Th5vNGb/7D23ji0fw3rbsqHoL1lE2PFJMwSbMW1/wErbL0QlUN+p6 HVdlgzEDFREHEGgSYIAuYMD31tra0Fi66THQJ1ixlMsQ68+aExmgWF8FPefHkI8J m+dxaJ5u8KPBQT8ZxeNyCZi0V5NGCgAh+QHWO+xqP/ZHGZv1YqfQvQ+i5NvrpqSR 0KWzC2TYm5Qba4pKPcmxp/DwjjD8uDGNLuSQ2VuvUfKRiNZSRa9min+yQHbNNpjf UtyBqxyZBotVRwFFkf3lV5a1v+M0+DAG68BtKewggnoNO7k= -----END CERTIFICATE-----Generated at Wed Jul 29 10:29:55 2026 by rpki-client