$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: ogSv8pTbAMEWIiBgdu6zhxbjYB0TGurtBdo+9JHr6r8= Subject key identifier: 89:BC:B2:5D:22:BC:4B:FC:1F:6D:38:1B:B2:04:31:ED:32:58:E9:06 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 44E91E52408A8C058AA59CC3791BDA53589DB9D8 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa Signing time: Wed 23 Sep 2026 02:20:26 +0000 ROA not before: Wed 23 Sep 2026 02:15:26 +0000 ROA not after: Wed 22 Sep 2027 02:20:26 +0000 asID: 16509 IP address blocks: 13.141.66.0/23 maxlen: 24 13.141.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 17:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e9:1e:52:40:8a:8c:05:8a:a5:9c:c3:79:1b:da:53:58:9d:b9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 23 02:15:26 2026 GMT Not After : Sep 22 02:20:26 2027 GMT Subject: CN=89BCB25D22BC4BFC1F6D381BB20431ED3258E906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:c0:b5:cb:73:e0:9d:df:5f:4f:52:1c:4e: f8:4c:07:d5:47:41:8f:15:4d:9e:4b:30:7b:a3:cc: 92:26:96:a2:8d:75:7a:af:8f:ec:c3:80:4f:aa:7e: d1:3d:6a:a3:d7:c3:22:b9:c3:57:cb:29:43:f0:4f: 93:9a:e7:28:17:86:23:29:a0:c5:26:47:17:8b:f7: c0:06:fe:0e:49:e9:87:1c:0a:8e:a9:51:f5:7d:cb: c7:85:6e:52:44:81:6a:b1:60:25:bb:85:54:74:d6: 36:7a:a5:19:04:66:9b:51:5a:72:84:eb:1b:6a:99: 7b:15:05:c5:86:ed:c1:bc:8d:b1:ac:64:2f:de:61: 19:44:8d:dc:40:13:c8:cc:e8:ae:ee:b2:6b:ac:70: 94:55:b4:dc:8b:ae:38:01:d7:f6:43:38:85:87:20: bc:03:8d:9c:0f:55:0c:65:86:24:ce:d3:6b:88:8e: 2f:46:20:91:64:dd:de:b4:ac:cd:64:3b:86:7a:ee: 83:cf:25:97:cf:92:75:e0:28:ed:3c:9a:36:d7:61: ec:43:44:67:cb:d3:81:44:4d:d7:ac:5c:90:75:de: b0:c6:17:7d:a1:ee:cf:48:3f:4a:e3:60:0e:2e:27: c5:d1:0e:3c:24:3b:03:73:64:e9:1c:d1:8e:44:c7: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BC:B2:5D:22:BC:4B:FC:1F:6D:38:1B:B2:04:31:ED:32:58:E9:06 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.66.0/23 13.141.124.0/23 Signature Algorithm: sha256WithRSAEncryption a9:af:b6:72:81:30:63:43:51:ba:e1:7f:29:56:e3:92:4d:60: e3:ec:ea:a5:27:0e:37:2a:b0:69:da:e5:02:63:ae:50:a1:01: ae:88:c3:52:bb:5f:3c:d9:87:cd:fd:97:d0:39:d7:9d:ca:4c: 37:21:67:e5:f0:b1:cb:1b:1f:b6:ae:ab:2c:9c:79:69:52:fc: 2f:93:c4:af:a1:bd:25:9d:86:16:e0:e1:a5:04:6e:01:18:83: 01:06:e5:48:98:e4:be:88:6a:44:bf:87:8e:e5:0b:cf:60:23: f6:ee:7e:39:61:40:95:5b:40:7d:42:68:fb:3c:a7:65:fd:a5: 0b:c2:ad:f5:dc:49:2c:76:3b:cf:82:51:72:5e:9d:56:ac:05: 34:03:b2:8b:fb:b8:22:59:4a:ec:9e:d9:cf:34:d9:17:fc:aa: 02:b3:e0:bc:0e:5b:74:7b:d8:59:e4:78:2e:54:ff:15:15:71: 66:fd:74:6a:be:16:e9:9e:d5:7d:34:a4:ed:7b:ec:08:0a:0c: 23:66:64:34:36:85:72:2f:7d:13:2d:ec:07:75:16:f1:7a:89: 58:be:d6:ca:e2:d4:80:d1:26:e4:bd:36:32:2a:94:e5:54:19: 99:47:16:75:47:8c:ad:48:b3:ba:43:a4:1b:97:c1:8c:29:02: fe:40:9b:6f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUROkeUkCKjAWKpZzDeRvaU1idudgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MjMwMjE1MjZaFw0yNzA5MjIwMjIwMjZaMDMxMTAvBgNV BAMTKDg5QkNCMjVEMjJCQzRCRkMxRjZEMzgxQkIyMDQzMUVEMzI1OEU5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY8C1y3Pgnd9fT1IcTvhMB9VH QY8VTZ5LMHujzJImlqKNdXqvj+zDgE+qftE9aqPXwyK5w1fLKUPwT5Oa5ygXhiMp oMUmRxeL98AG/g5J6YccCo6pUfV9y8eFblJEgWqxYCW7hVR01jZ6pRkEZptRWnKE 6xtqmXsVBcWG7cG8jbGsZC/eYRlEjdxAE8jM6K7usmuscJRVtNyLrjgB1/ZDOIWH ILwDjZwPVQxlhiTO02uIji9GIJFk3d60rM1kO4Z67oPPJZfPknXgKO08mjbXYexD RGfL04FETdesXJB13rDGF32h7s9IP0rjYA4uJ8XRDjwkOwNzZOkc0Y5Ex49dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUibyyXSK8S/wfbTgbsgQx7TJY6QYwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBDY1CAwQBDY18MA0GCSqG SIb3DQEBCwUAA4IBAQCpr7ZygTBjQ1G64X8pVuOSTWDj7OqlJw43KrBp2uUCY65Q oQGuiMNSu1882YfN/ZfQOdedykw3IWfl8LHLGx+2rqssnHlpUvwvk8Svob0lnYYW 4OGlBG4BGIMBBuVImOS+iGpEv4eO5QvPYCP27n45YUCVW0B9Qmj7PKdl/aULwq31 3EksdjvPglFyXp1WrAU0A7KL+7giWUrsntnPNNkX/KoCs+C8Dlt0e9hZ5HguVP8V FXFm/XRqvhbpntV9NKTte+wICgwjZmQ0NoVyL30TLewHdRbxeolYvtbK4tSA0Sbk vTYyKpTlVBmZRxZ1R4ytSLO6Q6Qbl8GMKQL+QJtv -----END CERTIFICATE-----Generated at Wed Sep 23 09:39:52 2026 by rpki-client