$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: +/Pd2hWruCSQMA+Z9HC454cpNjp/8GnaDdkDe8pciOA= Subject key identifier: 82:72:DC:55:AB:84:31:6D:0F:72:1F:8F:46:E4:64:BB:5A:3D:1B:C6 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 573AF9D5DE1FBDCB82B24FEB5C17AD0F3196C618 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa Signing time: Thu 19 Mar 2026 18:20:32 +0000 ROA not before: Thu 19 Mar 2026 18:15:32 +0000 ROA not after: Thu 18 Mar 2027 18:20:32 +0000 asID: 214432 IP address blocks: 169.40.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3a:f9:d5:de:1f:bd:cb:82:b2:4f:eb:5c:17:ad:0f:31:96:c6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 19 18:15:32 2026 GMT Not After : Mar 18 18:20:32 2027 GMT Subject: CN=8272DC55AB84316D0F721F8F46E464BB5A3D1BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:27:84:aa:87:b4:67:b2:03:57:00:dd:44: e4:73:2b:e5:9c:4d:e4:39:86:fe:31:0a:de:bd:e7: 4e:d7:5f:55:66:21:a5:62:c5:de:a1:41:0a:77:7f: 3e:4e:a6:56:4d:ee:fd:33:d5:7d:d3:4d:22:c1:8f: 55:64:ab:c8:31:a3:64:be:14:78:93:dd:7d:1f:71: 28:d0:92:52:f3:25:09:af:94:1e:63:56:5e:eb:15: 9c:f7:9b:75:d6:ae:90:21:80:04:fc:28:40:8c:60: a2:fb:dd:23:51:85:9a:52:3b:8d:2d:e5:ef:6c:59: 51:e9:e9:80:88:3a:bd:dd:dd:45:0e:98:38:17:d5: f4:11:ce:ee:4b:2a:75:f7:cf:94:20:2b:30:62:f6: 81:ad:30:3c:ce:3e:96:e1:4a:0c:9c:7f:cb:0c:98: c3:69:9f:e0:29:47:88:0c:4c:3e:ee:d6:a3:6e:44: 0a:53:62:23:4e:5b:f2:fb:2b:be:1e:59:25:79:e6: b7:10:ca:68:6d:80:0a:c1:61:e4:32:f0:3e:75:f2: 8c:45:77:52:e3:ad:29:94:e3:7c:63:c6:77:b2:88: 99:ce:89:54:e9:c6:c0:a3:d9:24:7a:23:8b:b7:de: 29:88:70:e3:a0:80:b0:d1:46:70:26:50:08:ef:9a: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:DC:55:AB:84:31:6D:0F:72:1F:8F:46:E4:64:BB:5A:3D:1B:C6 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.143.0/24 Signature Algorithm: sha256WithRSAEncryption 53:85:b1:39:6d:04:ff:4c:62:d8:8e:14:16:88:fe:ea:30:ac: 96:12:ef:51:1e:7b:72:71:4b:0c:d5:51:95:79:b9:b3:5b:e0: cf:2f:20:e5:ed:3e:57:59:b8:cc:fd:e0:a6:66:7a:cc:61:52: 5e:6c:8d:45:af:c4:4e:ca:be:78:12:98:b5:f7:cf:05:e0:b5: 18:25:3a:0e:15:6c:57:21:16:b3:bc:cb:25:0c:a7:54:02:4c: 87:95:b8:65:89:f5:af:a0:85:fe:21:ed:33:ca:58:12:0e:12: e3:28:9f:4b:72:be:02:8f:14:c5:d9:b7:33:35:62:1e:8a:03: 3f:71:d4:04:ab:59:0a:9e:a7:04:2c:ef:a6:84:ce:11:35:42: f9:48:45:bc:d0:bb:e2:d9:ff:40:1e:dd:95:e9:61:35:29:bb: 0b:78:70:39:70:cc:e4:34:15:4d:19:8b:fc:9e:6e:eb:2f:9f: 80:6d:68:99:8b:7a:2f:e5:3c:04:61:a0:e2:13:23:7b:b6:72: 7b:53:75:19:14:13:0d:2c:fc:a1:8e:24:58:ae:0b:5d:43:63: 5c:a1:b9:eb:17:7a:d8:af:29:50:d2:2d:5f:4a:2b:fa:88:26: 9a:b9:93:ca:b8:53:91:40:fd:83:46:2d:dd:80:f4:ec:a1:9f: 38:cc:28:c2 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUVzr51d4fvcuCsk/rXBetDzGWxhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTkxODE1MzJaFw0yNzAzMTgxODIwMzJaMDMxMTAvBgNV BAMTKDgyNzJEQzU1QUI4NDMxNkQwRjcyMUY4RjQ2RTQ2NEJCNUEzRDFCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzieEqoe0Z7IDVwDdRORzK+Wc TeQ5hv4xCt69507XX1VmIaVixd6hQQp3fz5OplZN7v0z1X3TTSLBj1Vkq8gxo2S+ FHiT3X0fcSjQklLzJQmvlB5jVl7rFZz3m3XWrpAhgAT8KECMYKL73SNRhZpSO40t 5e9sWVHp6YCIOr3d3UUOmDgX1fQRzu5LKnX3z5QgKzBi9oGtMDzOPpbhSgycf8sM mMNpn+ApR4gMTD7u1qNuRApTYiNOW/L7K74eWSV55rcQymhtgArBYeQy8D518oxF d1LjrSmU43xjxneyiJnOiVTpxsCj2SR6I4u33imIcOOggLDRRnAmUAjvmttJAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUgnLcVauEMW0Pch+PRuRku1o9G8YwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIxNDQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkojzANBgkqhkiG9w0B AQsFAAOCAQEAU4WxOW0E/0xi2I4UFoj+6jCslhLvUR57cnFLDNVRlXm5s1vgzy8g 5e0+V1m4zP3gpmZ6zGFSXmyNRa/ETsq+eBKYtffPBeC1GCU6DhVsVyEWs7zLJQyn VAJMh5W4ZYn1r6CF/iHtM8pYEg4S4yifS3K+Ao8Uxdm3MzViHooDP3HUBKtZCp6n BCzvpoTOETVC+UhFvNC74tn/QB7dlelhNSm7C3hwOXDM5DQVTRmL/J5u6y+fgG1o mYt6L+U8BGGg4hMje7Zye1N1GRQTDSz8oY4kWK4LXUNjXKG56xd62K8pUNItX0or +ogmmrmTyrhTkUD9g0Yt3YD07KGfOMwowg== -----END CERTIFICATE-----Generated at Thu Mar 26 03:52:39 2026 by rpki-client