Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16276.roa
File:                     AS16276.roa (raw, json)
Hash identifier:          pcN9adDH71HIqOnwkIyzE45E11ouvutABqz/notpRPY=
Subject key identifier:   9C:4E:C5:EF:A1:9C:7F:A3:E3:D6:E0:E2:71:47:78:3F:13:4C:C0:61
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1E61C038FC3C054B9956272C4FB738F52D344AE4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16276.roa
Signing time:             Wed 18 Mar 2026 07:26:29 +0000
ROA not before:           Wed 18 Mar 2026 07:21:29 +0000
ROA not after:            Wed 17 Mar 2027 07:26:29 +0000
asID:                     16276
IP address blocks:        169.40.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:c0:38:fc:3c:05:4b:99:56:27:2c:4f:b7:38:f5:2d:34:4a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 18 07:21:29 2026 GMT
            Not After : Mar 17 07:26:29 2027 GMT
        Subject: CN=9C4EC5EFA19C7FA3E3D6E0E27147783F134CC061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:ab:a9:7b:a4:4c:5b:77:4e:b2:5f:76:8e:
                    e1:13:bd:b5:fa:91:eb:4e:c5:95:b1:cd:2b:bd:49:
                    c1:83:02:4e:a0:80:7a:2e:6d:d5:d3:41:7a:e0:77:
                    05:8c:95:01:7b:24:15:72:58:74:41:1b:0f:03:93:
                    20:a2:7e:3a:40:b1:54:c8:5d:d4:2b:3c:0b:39:f3:
                    30:ae:99:5e:2f:b8:9f:ea:0f:18:a7:7f:46:ff:c3:
                    e4:76:28:3f:41:77:6a:ad:b3:d0:01:db:d2:16:ee:
                    57:a6:54:a7:e7:eb:85:f1:8e:42:30:b9:a6:08:06:
                    e5:1c:ed:ae:82:9a:5a:71:f3:c6:b4:5d:a9:a5:03:
                    c2:bc:81:ca:ac:5e:e0:20:4e:55:9e:44:4c:c9:0c:
                    3d:6c:91:36:73:16:5e:2d:ee:0d:7b:2b:00:30:46:
                    a3:c4:ea:12:eb:1e:c1:17:03:56:25:a4:d8:1d:40:
                    f1:95:3b:16:78:db:fa:9c:89:8e:cb:26:fa:6a:66:
                    88:3f:ff:d4:ed:88:f7:4e:88:21:a3:c8:f0:c1:76:
                    be:ce:d1:bb:8b:85:d9:23:c1:c6:3c:77:3e:9e:5c:
                    8f:10:7c:33:58:fb:23:f7:17:3e:68:7f:53:88:b9:
                    86:7d:d9:7a:72:09:96:40:aa:3d:58:ab:79:f1:cf:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:C5:EF:A1:9C:7F:A3:E3:D6:E0:E2:71:47:78:3F:13:4C:C0:61
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:70:78:73:44:6f:95:e1:6b:f4:fa:a3:15:6e:12:40:49:87:
         bc:c2:e8:98:4b:02:53:20:97:f1:96:86:3b:38:06:62:15:e4:
         77:53:20:14:34:1e:1f:a6:81:12:4b:64:3e:71:7b:0f:10:27:
         18:6f:a6:57:c5:d9:15:c6:04:ef:c8:c0:47:67:ef:69:0d:0c:
         c8:e3:e5:81:fd:65:d8:4a:67:c4:bf:e8:7c:59:a3:ff:70:b8:
         23:8d:e2:95:c9:11:42:45:e5:18:70:14:71:dc:96:81:c5:c1:
         e5:76:4e:a8:31:bb:3b:52:d9:28:5e:ec:48:10:13:1d:36:24:
         6b:f6:d6:11:b1:25:b3:fe:0c:e0:8a:23:a6:f9:32:e9:cc:e1:
         04:c2:fb:35:7b:4e:64:2a:2b:14:b6:a8:c6:e3:ab:e5:be:71:
         63:96:05:46:62:aa:d6:d5:33:bd:61:1c:5c:59:65:5c:48:ca:
         e5:67:d4:61:72:17:1f:24:57:b1:cd:38:e7:15:2d:bb:45:57:
         78:65:90:93:a3:23:a2:6c:8e:bd:07:7f:f4:e9:f9:3e:94:03:
         bd:81:4e:07:2a:22:4f:80:b3:c5:97:43:3c:92:61:b1:0a:55:
         6b:c8:a4:a3:d9:25:f0:c8:3e:af:71:34:d4:bc:bc:d5:32:d0:
         15:4b:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:37 2026 by rpki-client