$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa File: AS137897.roa (raw, json) Hash identifier: H3d7rSnX2siROs56CUVThFnunp4wLNg3xEwzpEZdgMU= Subject key identifier: 24:E3:0B:9F:BB:53:8F:CF:3F:94:D1:83:0F:94:80:14:1D:43:DA:20 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 2FF8665E254BBD78B81B366FB6E47A98DBB40119 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa Signing time: Thu 12 Mar 2026 15:11:00 +0000 ROA not before: Thu 12 Mar 2026 15:06:00 +0000 ROA not after: Thu 11 Mar 2027 15:11:00 +0000 asID: 137897 IP address blocks: 169.40.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f8:66:5e:25:4b:bd:78:b8:1b:36:6f:b6:e4:7a:98:db:b4:01:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 12 15:06:00 2026 GMT Not After : Mar 11 15:11:00 2027 GMT Subject: CN=24E30B9FBB538FCF3F94D1830F9480141D43DA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f7:b7:7a:ff:53:5a:40:22:8d:c5:33:23:b7: a0:ff:21:09:56:ce:44:b7:77:07:29:9a:ea:1d:43: e8:23:29:74:1a:1f:2b:6f:46:71:1d:14:17:8e:84: 30:1f:e0:0f:92:18:10:61:bb:95:43:29:c4:a3:77: 0e:7e:27:43:48:8e:38:35:72:0d:19:a8:7e:50:3d: 93:39:f7:e6:2e:b3:4c:77:01:2a:1c:f8:2a:b0:3f: 5b:c1:e1:76:f3:11:54:a9:50:74:7c:5c:fc:84:b8: 90:b3:37:60:da:c5:6a:ab:57:6b:aa:f9:35:79:95: 3c:b4:23:77:58:b7:ec:6b:03:70:cd:e8:95:d7:98: 11:23:bf:9d:8e:41:a1:17:5a:04:31:24:fa:77:2c: 8d:15:ce:81:7d:4c:f7:e5:0b:f1:c1:6f:0f:6a:50: f3:bb:cc:98:fe:1d:7f:a3:67:fe:12:68:af:d6:f5: b5:b3:e9:79:43:c7:7d:ad:bc:3c:1b:b2:c5:e0:f3: b9:6b:1c:37:17:4f:24:7b:62:a9:b2:49:79:39:1c: e5:d5:05:be:e5:c3:ec:e5:ee:64:57:b8:39:a0:04: 31:be:f8:e9:09:78:32:cd:29:8e:af:00:39:7f:23: 73:10:b6:48:39:f3:5d:1c:81:3c:0d:31:98:f3:81: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E3:0B:9F:BB:53:8F:CF:3F:94:D1:83:0F:94:80:14:1D:43:DA:20 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.133.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:73:11:87:11:13:fa:a9:59:b4:39:d8:bd:36:f6:f0:9c:cb: ef:f6:5c:d5:e1:c5:87:8a:ba:26:25:3a:89:3e:de:3b:8e:48: 1f:d6:81:c5:9b:28:9c:66:24:e4:fc:db:e4:7f:95:62:21:61: 56:ec:41:f2:11:b7:d0:d6:eb:eb:5d:d9:72:50:8c:f8:f8:86: e6:02:68:f4:78:63:32:fc:ce:9b:55:ba:1c:4f:62:19:2c:f1: 13:d9:17:ee:e2:9c:2f:f5:3c:14:ca:4a:f5:11:54:69:51:e7: 4b:a6:d2:80:6d:99:ef:be:f2:b3:13:86:02:d4:bd:a8:92:cb: d3:cd:d3:24:cc:d4:3c:86:df:95:1f:7f:60:ff:6c:88:07:a4: e2:d1:5f:11:8b:33:02:4f:b9:e3:80:14:8e:7f:7c:06:77:b9: aa:4d:0f:57:32:e7:89:19:6f:a3:4e:f3:9e:7b:f3:e4:9b:4f: 55:e9:78:21:af:fc:df:1f:20:dc:28:7d:d6:3a:94:56:77:96: da:ff:ef:24:13:5b:91:57:2b:52:ee:a0:f0:68:64:8d:fe:9c: 49:02:08:51:33:34:b6:55:ea:4e:b2:56:5d:86:1d:bc:f1:45: e7:b7:de:7d:5d:21:88:56:a3:a2:f4:88:f3:91:b2:92:fa:35: 2a:ca:bc:ce -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUL/hmXiVLvXi4GzZvtuR6mNu0ARkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDBaFw0yNzAzMTExNTExMDBaMDMxMTAvBgNV BAMTKDI0RTMwQjlGQkI1MzhGQ0YzRjk0RDE4MzBGOTQ4MDE0MUQ0M0RBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD297d6/1NaQCKNxTMjt6D/IQlW zkS3dwcpmuodQ+gjKXQaHytvRnEdFBeOhDAf4A+SGBBhu5VDKcSjdw5+J0NIjjg1 cg0ZqH5QPZM59+Yus0x3ASoc+CqwP1vB4XbzEVSpUHR8XPyEuJCzN2DaxWqrV2uq +TV5lTy0I3dYt+xrA3DN6JXXmBEjv52OQaEXWgQxJPp3LI0VzoF9TPflC/HBbw9q UPO7zJj+HX+jZ/4SaK/W9bWz6XlDx32tvDwbssXg87lrHDcXTyR7YqmySXk5HOXV Bb7lw+zl7mRXuDmgBDG++OkJeDLNKY6vADl/I3MQtkg5810cgTwNMZjzgW1vAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUJOMLn7tTj88/lNGDD5SAFB1D2iAwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzEzNzg5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkohTANBgkqhkiG9w0B AQsFAAOCAQEAG3MRhxET+qlZtDnYvTb28JzL7/Zc1eHFh4q6JiU6iT7eO45IH9aB xZsonGYk5Pzb5H+VYiFhVuxB8hG30Nbr613ZclCM+PiG5gJo9HhjMvzOm1W6HE9i GSzxE9kX7uKcL/U8FMpK9RFUaVHnS6bSgG2Z777ysxOGAtS9qJLL083TJMzUPIbf lR9/YP9siAek4tFfEYszAk+544AUjn98Bne5qk0PVzLniRlvo07znnvz5JtPVel4 Ia/83x8g3Ch91jqUVneW2v/vJBNbkVcrUu6g8Ghkjf6cSQIIUTM0tlXqTrJWXYYd vPFF57fefV0hiFajovSI85Gykvo1Ksq8zg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:11:10 2026 by rpki-client