$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: KuDr5wcul4upC989i5NfA2M6rpbZ3nCfx6w05I265Ks= Subject key identifier: DB:EE:8F:FA:98:08:32:DF:9A:30:FE:78:1E:91:C4:4B:6F:F5:18:A4 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 554BB2C0A438EE85AA0CC6A5836097BB01662A79 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS21859.roa Signing time: Tue 03 Nov 2026 14:13:19 +0000 ROA not before: Tue 03 Nov 2026 14:08:19 +0000 ROA not after: Tue 02 Nov 2027 14:13:19 +0000 asID: 21859 IP address blocks: 169.40.50.0/24 maxlen: 24 169.40.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 15:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4b:b2:c0:a4:38:ee:85:aa:0c:c6:a5:83:60:97:bb:01:66:2a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 3 14:08:19 2026 GMT Not After : Nov 2 14:13:19 2027 GMT Subject: CN=DBEE8FFA980832DF9A30FE781E91C44B6FF518A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:e4:06:fe:62:71:f5:57:95:e4:75:28:e3: cc:3c:81:27:ed:8b:6b:62:91:89:ee:5f:54:8a:84: f3:ce:59:b2:b7:83:49:4c:48:9d:12:8f:5b:82:38: 81:f5:a4:eb:2c:f0:9d:1d:04:de:c6:80:6e:67:8e: b2:1e:ef:5a:f8:47:85:32:5f:88:71:f6:26:95:33: 84:11:15:38:0e:79:21:68:8f:0e:32:1c:23:ae:d9: 77:93:bd:6b:40:0d:cf:f0:0f:c4:33:fd:01:da:d8: 91:2b:21:59:02:99:57:0a:11:ff:2a:8e:fd:36:f7: ab:db:a2:50:e4:e8:40:cf:a2:2d:28:0a:80:f3:1d: a9:4f:88:5b:d3:f8:8b:f3:40:75:df:c3:99:c8:61: 6f:da:08:de:ed:05:3e:be:b5:c2:5d:8a:e5:11:18: bb:c8:2a:80:53:e2:76:3b:f0:6f:1b:11:44:33:eb: d3:2f:ba:e4:3e:0f:ba:77:eb:b7:fd:f1:59:22:22: 94:4c:ce:e5:66:17:7d:c0:09:5d:68:e4:f8:b7:38: 06:3e:0f:7d:17:1b:ba:ad:97:f7:a3:de:4b:3f:72: 64:83:71:c9:ba:9d:62:0e:42:aa:c5:90:82:d7:6a: 35:2c:fd:2e:81:58:2a:eb:fb:0b:be:e6:5a:38:d5: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:8F:FA:98:08:32:DF:9A:30:FE:78:1E:91:C4:4B:6F:F5:18:A4 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.50.0/24 169.40.115.0/24 Signature Algorithm: sha256WithRSAEncryption 75:4f:5d:24:da:7b:9b:07:c5:26:30:54:3f:93:d2:31:bb:be: c1:ec:76:db:22:b5:80:bf:20:a3:f8:eb:a5:a6:c5:da:ed:12: 99:74:81:9d:1c:5e:a6:54:ff:c4:c9:8d:7e:4a:2c:f0:9a:15: 79:d3:71:ee:6a:f3:48:73:8e:c0:d9:54:90:44:ec:3f:5e:18: d2:ec:b0:d8:2a:76:ee:ae:06:54:d6:27:22:51:95:74:43:ed: 8e:98:1d:8d:20:fc:29:a7:c7:cd:ed:df:35:1d:a5:38:39:7b: d2:c3:9f:ec:0e:16:c2:63:50:d9:ed:55:c4:29:04:c5:bd:ea: 70:2b:27:4e:00:bb:1a:47:c2:4d:d9:1f:11:28:1b:8b:fb:92: d5:ba:ed:3d:d5:c3:e5:8b:19:08:cd:ef:f4:23:03:b8:18:43: 7f:6c:a8:4f:46:fe:ec:41:76:a9:ef:06:67:07:ba:f1:ee:27: 8a:04:3e:7d:7f:4a:0f:3f:9b:9e:0a:73:56:a0:9e:79:9d:88: 84:ba:d9:0d:a6:ae:00:0a:22:9a:2d:3e:08:f5:16:17:79:7e: 9d:a0:84:05:36:00:43:6b:4d:5f:00:8c:e2:f8:7f:cd:c8:6c: cf:ca:62:fb:25:be:ad:d1:3d:08:a6:9c:f3:4e:c2:87:fa:2f: 69:b9:15:cf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVUuywKQ47oWqDMalg2CXuwFmKnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjExMDMxNDA4MTlaFw0yNzExMDIxNDEzMTlaMDMxMTAvBgNV BAMTKERCRUU4RkZBOTgwODMyREY5QTMwRkU3ODFFOTFDNDRCNkZGNTE4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28+QG/mJx9VeV5HUo48w8gSft i2tikYnuX1SKhPPOWbK3g0lMSJ0Sj1uCOIH1pOss8J0dBN7GgG5njrIe71r4R4Uy X4hx9iaVM4QRFTgOeSFojw4yHCOu2XeTvWtADc/wD8Qz/QHa2JErIVkCmVcKEf8q jv0296vbolDk6EDPoi0oCoDzHalPiFvT+IvzQHXfw5nIYW/aCN7tBT6+tcJdiuUR GLvIKoBT4nY78G8bEUQz69MvuuQ+D7p367f98VkiIpRMzuVmF33ACV1o5Pi3OAY+ D30XG7qtl/ej3ks/cmSDccm6nWIOQqrFkILXajUs/S6BWCrr+wu+5lo41UzHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2+6P+pgIMt+aMP54HpHES2/1GKQwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqSgyAwQAqShzMA0GCSqG SIb3DQEBCwUAA4IBAQB1T10k2nubB8UmMFQ/k9Ixu77B7HbbIrWAvyCj+OulpsXa 7RKZdIGdHF6mVP/EyY1+SizwmhV503HuavNIc47A2VSQROw/XhjS7LDYKnburgZU 1iciUZV0Q+2OmB2NIPwpp8fN7d81HaU4OXvSw5/sDhbCY1DZ7VXEKQTFvepwKydO ALsaR8JN2R8RKBuL+5LVuu091cPlixkIze/0IwO4GEN/bKhPRv7sQXap7wZnB7rx 7ieKBD59f0oPP5ueCnNWoJ55nYiEutkNpq4ACiKaLT4I9RYXeX6doIQFNgBDa01f AIzi+H/NyGzPymL7Jb6t0T0IppzzTsKH+i9puRXP -----END CERTIFICATE-----Generated at Wed Nov 11 09:03:48 2026 by rpki-client