$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa File: AS16589.roa (raw, json) Hash identifier: UCaj/ePg/kdmMZc3nC0jATQr44ddS0zrj6wZXivmJOE= Subject key identifier: A6:FC:6B:BE:8C:0E:7A:E1:25:18:B7:DC:35:5D:02:BD:8F:1A:9A:7F Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0CD74189198CD84BC4ADEACAD9224BEDAF18F225 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa Signing time: Thu 12 Mar 2026 15:10:59 +0000 ROA not before: Thu 12 Mar 2026 15:05:59 +0000 ROA not after: Thu 11 Mar 2027 15:10:59 +0000 asID: 16589 IP address blocks: 169.40.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d7:41:89:19:8c:d8:4b:c4:ad:ea:ca:d9:22:4b:ed:af:18:f2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 12 15:05:59 2026 GMT Not After : Mar 11 15:10:59 2027 GMT Subject: CN=A6FC6BBE8C0E7AE12518B7DC355D02BD8F1A9A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:14:93:70:53:8b:8b:4c:ca:cb:e3:ba:64:b6: 4d:46:d1:29:c2:0e:e3:14:ae:e2:1c:b2:ab:98:75: ac:1e:5e:40:6a:46:ac:a1:04:3d:3d:b0:cb:07:81: f4:e0:42:7f:d7:59:4d:d4:9c:1a:4a:25:cc:1a:ed: 4b:49:e6:9f:5a:42:a1:15:df:a6:de:13:fe:b4:80: 89:40:a8:97:99:62:ba:bb:4f:16:e5:64:75:d3:4e: 28:88:41:2f:fc:41:b8:9e:ae:e6:88:e2:6d:ec:4c: 44:3c:d9:3c:82:96:11:11:89:c7:75:64:9b:97:1b: da:37:60:5b:98:05:84:a1:88:f1:7d:a5:2f:f3:8d: 8a:8d:21:44:b3:5f:45:37:61:45:b7:b4:98:1f:cb: 57:e8:21:8e:b0:b9:35:22:a7:c1:67:55:39:2d:1b: 57:4a:99:32:a4:15:61:0b:e9:48:93:bf:b4:ba:68: ef:99:bb:95:44:8a:0d:cd:a3:1a:cc:69:c1:f9:fc: 9c:a2:c9:c3:52:a8:61:bf:ed:4c:ff:0f:c0:aa:02: c3:0f:c9:9c:bb:af:27:3c:45:cc:fa:81:00:ae:81: b8:b5:fe:32:81:26:9c:dc:86:fa:b1:06:39:15:0a: 06:74:6b:b3:57:17:32:24:10:93:ec:d4:9b:d7:32: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FC:6B:BE:8C:0E:7A:E1:25:18:B7:DC:35:5D:02:BD:8F:1A:9A:7F X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.129.0/24 Signature Algorithm: sha256WithRSAEncryption b0:2c:4e:3c:8a:39:90:a2:b3:c5:8f:90:50:98:1b:e0:4b:c1: a1:14:12:78:db:17:c8:a7:36:43:8e:1e:56:97:82:80:ca:01: 8b:88:66:5e:c8:db:07:28:05:17:03:f9:75:46:67:fd:74:a3: fd:30:53:fe:18:60:70:16:05:f0:95:c0:7e:4d:5b:bb:45:06: 1d:ec:7a:a4:59:25:d8:6b:b3:1c:63:f0:5c:eb:aa:1b:b4:aa: 34:b9:b4:04:1c:c4:25:3f:5b:5c:66:c2:e2:18:a8:fd:5b:24: 60:a3:2c:74:0e:93:1d:c0:5b:31:97:35:6a:86:01:73:52:06: 24:ab:0d:b1:39:a9:c4:0b:37:0a:4d:d3:1c:9d:06:8f:9e:d8: a0:5e:3b:d3:7f:7b:ea:cd:7e:98:da:e9:74:a0:a6:40:7a:17: 8f:77:ab:f7:79:26:ca:53:f0:08:d1:0a:8c:b2:ef:4b:c0:ad: 2f:d3:79:ad:df:4b:cd:e2:98:2a:00:b1:f7:fb:09:42:ea:d4: 17:cd:8c:1b:18:65:16:86:25:cf:d5:4f:49:c4:2f:85:5c:ff: 0d:4c:63:87:c3:92:df:32:89:be:6c:67:2f:87:67:84:54:de: c8:a6:17:4c:a8:8a:05:d5:1e:f8:97:9d:0a:06:51:9c:61:5c: bd:95:4d:7a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUDNdBiRmM2EvErerK2SJL7a8Y8iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTIxNTA1NTlaFw0yNzAzMTExNTEwNTlaMDMxMTAvBgNV BAMTKEE2RkM2QkJFOEMwRTdBRTEyNTE4QjdEQzM1NUQwMkJEOEYxQTlBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FJNwU4uLTMrL47pktk1G0SnC DuMUruIcsquYdaweXkBqRqyhBD09sMsHgfTgQn/XWU3UnBpKJcwa7UtJ5p9aQqEV 36beE/60gIlAqJeZYrq7TxblZHXTTiiIQS/8QbieruaI4m3sTEQ82TyClhERicd1 ZJuXG9o3YFuYBYShiPF9pS/zjYqNIUSzX0U3YUW3tJgfy1foIY6wuTUip8FnVTkt G1dKmTKkFWEL6UiTv7S6aO+Zu5VEig3NoxrMacH5/JyiycNSqGG/7Uz/D8CqAsMP yZy7ryc8Rcz6gQCugbi1/jKBJpzchvqxBjkVCgZ0a7NXFzIkEJPs1JvXMoGzAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUpvxrvowOeuElGLfcNV0CvY8amn8wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzE2NTg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiBMA0GCSqGSIb3DQEB CwUAA4IBAQCwLE48ijmQorPFj5BQmBvgS8GhFBJ42xfIpzZDjh5Wl4KAygGLiGZe yNsHKAUXA/l1Rmf9dKP9MFP+GGBwFgXwlcB+TVu7RQYd7HqkWSXYa7McY/Bc66ob tKo0ubQEHMQlP1tcZsLiGKj9WyRgoyx0DpMdwFsxlzVqhgFzUgYkqw2xOanECzcK TdMcnQaPntigXjvTf3vqzX6Y2ul0oKZAehePd6v3eSbKU/AI0QqMsu9LwK0v03mt 30vN4pgqALH3+wlC6tQXzYwbGGUWhiXP1U9JxC+FXP8NTGOHw5LfMom+bGcvh2eE VN7IphdMqIoF1R74l50KBlGcYVy9lU16 -----END CERTIFICATE-----Generated at Thu Mar 26 08:13:21 2026 by rpki-client