$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa File: AS212980.roa (raw, json) Hash identifier: UTz6QIEujW5bKs2L+Bau8LtL5USpPJNFMccDZLiZ6tQ= Subject key identifier: 42:12:19:97:88:3D:DE:3A:AB:FA:B5:E4:21:94:96:22:5E:7A:75:98 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 3038406EEDDF525C0FCF2DA9A6582E2F05088534 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa Signing time: Thu 30 Apr 2026 20:47:04 +0000 ROA not before: Thu 30 Apr 2026 20:42:04 +0000 ROA not after: Thu 29 Apr 2027 20:47:04 +0000 asID: 212980 IP address blocks: 169.40.64.0/22 maxlen: 24 169.40.212.0/22 maxlen: 22 169.40.216.0/22 maxlen: 22 169.40.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:38:40:6e:ed:df:52:5c:0f:cf:2d:a9:a6:58:2e:2f:05:08:85:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 30 20:42:04 2026 GMT Not After : Apr 29 20:47:04 2027 GMT Subject: CN=42121997883DDE3AABFAB5E4219496225E7A7598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:80:5e:16:70:4c:c3:77:77:d7:db:3f:91: d7:74:a8:4e:f7:61:a1:79:2e:94:ce:f3:56:66:02: 31:cb:ef:03:55:87:e1:8d:1a:38:82:6f:2f:c6:24: 42:74:1f:97:8e:db:33:ac:70:3f:0c:f1:4b:cf:95: a8:0f:15:e0:38:b0:78:7b:45:0a:ae:31:df:1e:a6: c8:f1:7d:83:11:36:9c:19:fb:61:6e:ed:b3:12:ac: 80:d0:50:23:ac:b4:7c:ad:bd:2f:31:99:5f:de:c7: c3:d9:36:78:29:a6:a7:ac:28:4e:dc:4d:06:a5:2f: 1b:a6:66:af:33:6f:65:5a:ea:ac:82:50:dd:5a:a1: 5f:d2:70:20:a2:65:90:4e:aa:b5:c2:51:ff:f2:55: 56:92:19:06:86:44:63:b7:a0:bd:f0:5f:83:25:3f: b5:63:81:4d:fd:51:ca:a9:ba:5d:5b:c6:ce:a6:44: 4e:29:92:34:94:c6:de:d4:f1:10:31:6e:6e:c4:5b: db:5c:4b:ee:d9:d5:e5:9c:06:36:db:b5:ae:9a:1d: b7:a3:af:90:e0:a3:f6:30:35:3e:86:6a:e8:c7:53: cf:ce:ac:0b:19:11:d2:77:7d:97:56:22:ba:f8:e9: 4e:ef:f2:d3:22:0b:c2:0b:70:70:59:54:b1:eb:d6: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:19:97:88:3D:DE:3A:AB:FA:B5:E4:21:94:96:22:5E:7A:75:98 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.64.0/22 169.40.212.0-169.40.223.255 Signature Algorithm: sha256WithRSAEncryption 31:1f:4d:af:94:ed:cc:0b:82:d2:be:cf:85:d2:81:2d:38:db: 85:71:23:da:91:2e:24:de:e7:4b:90:b5:5f:30:56:41:56:e3: 2b:29:35:dc:a4:b2:b3:ea:6b:77:46:e1:16:19:f2:03:68:91: 61:98:76:f1:7e:f9:88:5d:b5:a6:7f:bd:86:da:8c:6c:94:0b: 85:96:ad:ca:b9:86:f5:9f:cf:20:55:34:7f:a6:fd:bd:29:65: 82:48:86:bd:3c:78:72:51:3c:33:80:46:f0:5a:94:ea:68:ea: 03:5b:7d:f3:92:df:5d:c8:9c:e9:1e:74:93:81:37:4e:b5:1d: 49:75:82:46:24:d6:f4:2a:c1:0d:95:dd:45:9a:d1:3e:49:92: c4:76:f5:0f:47:9b:f3:35:db:b2:71:af:6e:da:66:4a:de:51: 04:3d:15:86:de:75:a9:1c:9d:7c:6d:25:1b:0d:3e:cd:fc:df: 6d:cc:41:0c:f1:28:e3:f7:8e:5d:a1:49:b6:be:3d:df:af:b2: 10:40:b8:1b:45:3a:6d:27:68:1e:97:bb:c8:f1:7d:10:79:ca: 84:bb:66:e8:1a:46:07:6b:d0:22:52:bc:10:82:c7:dc:ae:b7: cc:87:e0:12:db:2f:fd:31:31:ec:56:2c:2b:7f:98:63:2c:9f: 8d:bc:b2:23 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMDhAbu3fUlwPzy2pplguLwUIhTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MzAyMDQyMDRaFw0yNzA0MjkyMDQ3MDRaMDMxMTAvBgNV BAMTKDQyMTIxOTk3ODgzRERFM0FBQkZBQjVFNDIxOTQ5NjIyNUU3QTc1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ioBeFnBMw3d319s/kdd0qE73 YaF5LpTO81ZmAjHL7wNVh+GNGjiCby/GJEJ0H5eO2zOscD8M8UvPlagPFeA4sHh7 RQquMd8epsjxfYMRNpwZ+2Fu7bMSrIDQUCOstHytvS8xmV/ex8PZNngppqesKE7c TQalLxumZq8zb2Va6qyCUN1aoV/ScCCiZZBOqrXCUf/yVVaSGQaGRGO3oL3wX4Ml P7VjgU39Ucqpul1bxs6mRE4pkjSUxt7U8RAxbm7EW9tcS+7Z1eWcBjbbta6aHbej r5Dgo/YwNT6GaujHU8/OrAsZEdJ3fZdWIrr46U7v8tMiC8ILcHBZVLHr1jRnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQhIZl4g93jqr+rXkIZSWIl56dZgwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIxMjk4MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAqkoQDAMAwQCqSjUAwQF qSjAMA0GCSqGSIb3DQEBCwUAA4IBAQAxH02vlO3MC4LSvs+F0oEtONuFcSPakS4k 3udLkLVfMFZBVuMrKTXcpLKz6mt3RuEWGfIDaJFhmHbxfvmIXbWmf72G2oxslAuF lq3KuYb1n88gVTR/pv29KWWCSIa9PHhyUTwzgEbwWpTqaOoDW33zkt9dyJzpHnST gTdOtR1JdYJGJNb0KsENld1FmtE+SZLEdvUPR5vzNduyca9u2mZK3lEEPRWG3nWp HJ18bSUbDT7N/N9tzEEM8Sjj945doUm2vj3fr7IQQLgbRTptJ2gel7vI8X0QecqE u2boGkYHa9AiUrwQgsfcrrfMh+AS2y/9MTHsViwrf5hjLJ+NvLIj -----END CERTIFICATE-----Generated at Wed May 13 00:38:51 2026 by rpki-client