$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203048.roa File: AS203048.roa (raw, json) Hash identifier: Lqftsip81EZauhyLIXUjzQHMvJq0IvSniE19xz9sieA= Subject key identifier: 99:0B:36:14:2B:56:86:FC:40:2D:C0:B9:F7:7D:1B:B1:3D:E3:9D:60 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0A6F8C9C3271BCEAE8F920AAA884F1818FBB8364 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203048.roa Signing time: Thu 07 May 2026 10:06:52 +0000 ROA not before: Thu 07 May 2026 10:01:52 +0000 ROA not after: Thu 06 May 2027 10:06:52 +0000 asID: 203048 IP address blocks: 169.40.38.0/24 maxlen: 24 169.40.110.0/24 maxlen: 24 169.40.112.0/24 maxlen: 24 169.40.122.0/24 maxlen: 24 169.40.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6f:8c:9c:32:71:bc:ea:e8:f9:20:aa:a8:84:f1:81:8f:bb:83:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: May 7 10:01:52 2026 GMT Not After : May 6 10:06:52 2027 GMT Subject: CN=990B36142B5686FC402DC0B9F77D1BB13DE39D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:9b:42:c8:d9:0e:e3:6b:bd:c2:5f:d5:89: a4:50:3b:fa:1f:d2:55:b6:ca:db:55:b8:8d:05:f6: d2:af:f3:d1:fd:ae:c2:63:e3:69:5f:ad:78:64:4f: 07:72:38:1a:d2:64:3f:89:4a:7c:a2:4e:86:be:98: ee:14:95:a3:04:27:d3:a6:22:27:89:f0:e6:22:41: 8e:90:d6:6e:85:5f:22:b0:34:90:5b:4a:9d:71:79: 8e:45:93:89:6a:df:2a:3a:b1:b4:74:f4:53:d1:53: 4e:28:a1:ee:d1:5e:dd:97:80:4b:04:e2:13:54:bd: a9:d7:33:e2:ac:fb:b2:76:c7:4b:5a:c8:39:49:21: e5:23:45:c9:b9:27:81:8e:76:62:f1:a3:22:c0:c0: 91:1c:ad:ec:49:15:ee:38:cb:6d:15:e5:bb:77:4f: e1:46:f3:82:6a:d7:b8:5d:c3:08:6a:33:29:35:69: ed:a0:5b:de:7a:b6:bb:42:fb:08:23:2a:e8:88:f3: 7c:5d:d8:70:2b:ea:a9:50:a4:ca:00:58:be:95:8b: 6f:77:be:06:d2:5e:bf:6c:d1:58:56:e3:c9:2b:55: 39:9e:3b:1e:e4:bc:ee:f7:18:95:d2:eb:11:50:30: ae:bc:a1:52:26:52:88:43:aa:60:1f:bb:a9:15:0c: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:36:14:2B:56:86:FC:40:2D:C0:B9:F7:7D:1B:B1:3D:E3:9D:60 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203048.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.38.0/24 169.40.110.0/24 169.40.112.0/24 169.40.122.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:c8:22:30:c5:d2:08:e9:f7:50:b3:c6:43:81:a4:d2:1e:38: 5c:31:d7:d9:f9:f0:0e:4f:b2:1a:e7:03:61:65:aa:16:58:b7: 63:a4:ca:8e:95:82:c2:b0:34:7a:91:b1:52:94:d0:76:4f:95: be:88:c1:23:52:56:08:7a:46:2d:e7:57:06:f0:ff:a4:98:51: 39:61:8b:55:02:b0:0c:ba:50:2b:c3:94:6d:17:03:51:62:e1: 66:1e:28:04:fa:21:cb:44:55:f5:7b:02:d9:16:64:dc:f5:b7: 23:cf:47:69:f4:cb:e6:ea:7b:48:0d:5a:49:31:20:7a:c4:d0: 19:f1:7a:98:f3:4c:78:6c:a2:ed:68:e5:1e:fe:b5:15:66:c9: 63:fb:0a:f0:8b:eb:85:dc:0d:d1:4d:94:f6:bb:5d:dd:09:31: 34:7c:43:05:fa:32:0f:d5:aa:ed:87:dc:99:6c:7c:a8:88:8e: 17:88:a1:89:70:05:39:f2:6e:f5:4b:97:42:25:e1:0b:cc:bd: b8:e0:ea:fb:53:ce:2b:cf:f8:9e:69:e8:3d:c3:10:f6:12:56: dc:d4:31:fe:8d:bc:98:63:11:ee:6b:07:25:da:8d:11:79:56: bc:78:07:b1:99:cd:cd:46:be:f3:ad:53:8e:bb:a0:87:3a:67: 2a:f8:fa:c6 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUCm+MnDJxvOro+SCqqITxgY+7g2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA1MDcxMDAxNTJaFw0yNzA1MDYxMDA2NTJaMDMxMTAvBgNV BAMTKDk5MEIzNjE0MkI1Njg2RkM0MDJEQzBCOUY3N0QxQkIxM0RFMzlENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCptCyNkO42u9wl/ViaRQO/of 0lW2yttVuI0F9tKv89H9rsJj42lfrXhkTwdyOBrSZD+JSnyiToa+mO4UlaMEJ9Om IieJ8OYiQY6Q1m6FXyKwNJBbSp1xeY5Fk4lq3yo6sbR09FPRU04ooe7RXt2XgEsE 4hNUvanXM+Ks+7J2x0tayDlJIeUjRcm5J4GOdmLxoyLAwJEcrexJFe44y20V5bt3 T+FG84Jq17hdwwhqMyk1ae2gW956trtC+wgjKuiI83xd2HAr6qlQpMoAWL6Vi293 vgbSXr9s0VhW48krVTmeOx7kvO73GJXS6xFQMK68oVImUohDqmAfu6kVDN/nAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUmQs2FCtWhvxALcC5930bsT3jnWAwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIwMzA0OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAKkoJgMEAKkobgMEAKko cAMEAakoejANBgkqhkiG9w0BAQsFAAOCAQEAbMgiMMXSCOn3ULPGQ4Gk0h44XDHX 2fnwDk+yGucDYWWqFli3Y6TKjpWCwrA0epGxUpTQdk+VvojBI1JWCHpGLedXBvD/ pJhROWGLVQKwDLpQK8OUbRcDUWLhZh4oBPohy0RV9XsC2RZk3PW3I89HafTL5up7 SA1aSTEgesTQGfF6mPNMeGyi7WjlHv61FWbJY/sK8IvrhdwN0U2U9rtd3QkxNHxD BfoyD9Wq7YfcmWx8qIiOF4ihiXAFOfJu9UuXQiXhC8y9uODq+1POK8/4nmnoPcMQ 9hJW3NQx/o28mGMR7msHJdqNEXlWvHgHsZnNzUa+861TjrughzpnKvj6xg== -----END CERTIFICATE-----Generated at Tue May 12 23:25:34 2026 by rpki-client