$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: gUfSyPkbQwNJB37nhcHdRCTW7N7viB3aF6quskrcIB4= Subject key identifier: 34:A8:7E:59:0A:78:5C:18:CA:A3:B4:52:AA:F4:11:C0:04:D9:F7:FE Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2835005DECFC6A66A7590FF7E7F0A34ADF8A5FA5 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Mon 03 Nov 2025 00:08:30 +0000 ROA not before: Mon 03 Nov 2025 00:03:30 +0000 ROA not after: Mon 02 Nov 2026 00:08:30 +0000 asID: 9304 IP address blocks: 89.116.141.0/24 maxlen: 24 89.116.237.0/24 maxlen: 24 89.116.244.0/24 maxlen: 24 89.117.129.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:35:00:5d:ec:fc:6a:66:a7:59:0f:f7:e7:f0:a3:4a:df:8a:5f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 3 00:03:30 2025 GMT Not After : Nov 2 00:08:30 2026 GMT Subject: CN=34A87E590A785C18CAA3B452AAF411C004D9F7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a3:1d:35:da:6e:ea:1b:8a:c1:9b:c3:fb:a1: cd:02:97:4c:7a:2d:e2:8b:e5:3b:1d:03:ec:8a:9e: 52:9f:45:55:38:aa:46:5d:d7:32:cc:ee:f1:1d:a3: bc:7f:56:bf:82:11:05:9f:06:ec:19:41:10:31:1b: e1:89:4b:5b:b8:8b:43:56:2a:f5:9e:eb:88:63:5a: 21:db:43:75:c1:17:3e:77:54:fc:9c:fb:a8:42:be: 7a:2a:34:78:e8:ab:39:65:04:ec:0c:a5:27:ee:7c: 86:9d:3d:96:e8:8d:76:23:14:38:a0:67:3c:2f:3e: fe:bb:f4:79:85:0b:67:1e:13:17:09:72:7d:55:c7: 57:1f:ff:e2:a4:f1:c3:17:0e:70:0e:ef:8d:2f:3e: 59:e6:cb:f9:39:42:af:5c:6b:c3:70:f2:10:69:67: 60:24:ea:2d:95:5c:1c:d1:bc:ac:c3:d7:34:40:fc: 10:ac:4c:9b:44:f1:46:8e:85:39:88:ef:56:c2:cb: 87:87:a5:3e:d0:7f:bd:a9:7b:16:40:b2:fc:17:6b: 18:5e:3b:9e:9d:6e:4c:50:aa:9d:e3:d3:32:e6:c1: 71:72:36:97:d3:0b:20:50:e0:b3:82:e5:43:ae:d6: 38:e3:04:d9:14:59:20:8d:7f:34:f7:68:ba:c5:bd: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:7E:59:0A:78:5C:18:CA:A3:B4:52:AA:F4:11:C0:04:D9:F7:FE X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.141.0/24 89.116.237.0/24 89.116.244.0/24 89.117.129.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 28:67:11:6d:ac:90:42:61:bf:d6:7f:7a:7a:47:0f:4e:bf:f9: 7d:c4:2b:df:c0:5e:cd:81:a5:fd:89:b4:46:fb:2b:68:32:86: 0f:80:8c:9b:7d:0f:e8:28:18:9b:23:01:0a:64:b5:4e:02:d3: 2d:4c:40:72:33:d1:2c:1d:7e:45:62:8a:58:b2:c3:8b:d9:e9: b8:aa:ca:1c:3d:0b:f4:0b:cd:5e:03:9d:e8:cc:4d:e0:b4:20: a0:76:81:53:49:7c:dc:da:3a:f4:2e:dc:28:92:91:98:cc:bf: 8b:d6:fd:cf:f1:b8:7d:77:cc:27:05:47:1a:a6:43:12:2b:c8: 1a:31:ce:21:86:9b:6c:eb:95:51:37:b5:88:df:ab:d3:9e:48: 0c:e8:9d:87:bd:dd:7c:69:eb:96:5d:89:03:9a:2f:83:30:e3: 20:28:5d:0d:72:4d:8f:9b:0f:b2:73:88:8b:fa:1e:3e:95:e4: 26:e1:31:b1:cb:d8:4c:a3:f9:2c:5a:83:87:4f:e7:1e:72:85: 1d:b4:d6:d3:70:04:02:22:54:df:14:61:7d:04:37:61:09:c8: b1:03:0e:8d:b9:2d:c7:f6:3d:32:c2:1b:b7:2c:e9:ab:10:f8: 52:0b:aa:69:98:26:6c:79:c4:3c:48:5a:6d:ca:be:a7:7a:28: c6:fb:d1:aa -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUKDUAXez8amanWQ/35/CjSt+KX6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTExMDMwMDAzMzBaFw0yNjExMDIwMDA4MzBaMDMxMTAvBgNV BAMTKDM0QTg3RTU5MEE3ODVDMThDQUEzQjQ1MkFBRjQxMUMwMDREOUY3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhox012m7qG4rBm8P7oc0Cl0x6 LeKL5TsdA+yKnlKfRVU4qkZd1zLM7vEdo7x/Vr+CEQWfBuwZQRAxG+GJS1u4i0NW KvWe64hjWiHbQ3XBFz53VPyc+6hCvnoqNHjoqzllBOwMpSfufIadPZbojXYjFDig ZzwvPv679HmFC2ceExcJcn1Vx1cf/+Kk8cMXDnAO740vPlnmy/k5Qq9ca8Nw8hBp Z2Ak6i2VXBzRvKzD1zRA/BCsTJtE8UaOhTmI71bCy4eHpT7Qf72pexZAsvwXaxhe O56dbkxQqp3j0zLmwXFyNpfTCyBQ4LOC5UOu1jjjBNkUWSCNfzT3aLrFvbE/AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUNKh+WQp4XBjKo7RSqvQRwATZ9/4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABZdI0DBABZdO0DBABZdPQD BABZdYEDBABZdfowDQYJKoZIhvcNAQELBQADggEBAChnEW2skEJhv9Z/enpHD06/ +X3EK9/AXs2Bpf2JtEb7K2gyhg+AjJt9D+goGJsjAQpktU4C0y1MQHIz0SwdfkVi iliyw4vZ6biqyhw9C/QLzV4DnejMTeC0IKB2gVNJfNzaOvQu3CiSkZjMv4vW/c/x uH13zCcFRxqmQxIryBoxziGGm2zrlVE3tYjfq9OeSAzonYe93Xxp65ZdiQOaL4Mw 4yAoXQ1yTY+bD7JziIv6Hj6V5CbhMbHL2Eyj+Sxag4dP5x5yhR201tNwBAIiVN8U YX0EN2EJyLEDDo25Lcf2PTLCG7cs6asQ+FILqmmYJmx5xDxIWm3Kvqd6KMb70ao= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:25 2025 by rpki-client