Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218654.roa
File:                     AS218654.roa (raw, json)
Hash identifier:          Pb3Gd75TD1xaGheUWHcFE2Q2nO1Q2RSUcB3tGKjWVds=
Subject key identifier:   59:3C:B8:F7:BA:5C:6C:69:82:F4:23:BB:71:0C:9F:63:F5:3E:B8:26
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       75BB673E95726735EAFB8EFF7554F64B58777C9A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218654.roa
Signing time:             Mon 21 Sep 2026 17:46:16 +0000
ROA not before:           Mon 21 Sep 2026 17:41:16 +0000
ROA not after:            Mon 20 Sep 2027 17:46:16 +0000
asID:                     218654
IP address blocks:        169.40.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:67:3e:95:72:67:35:ea:fb:8e:ff:75:54:f6:4b:58:77:7c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 17:41:16 2026 GMT
            Not After : Sep 20 17:46:16 2027 GMT
        Subject: CN=593CB8F7BA5C6C6982F423BB710C9F63F53EB826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:c0:44:36:84:d1:ec:bc:b2:c0:5f:39:78:
                    b9:98:fa:db:36:da:b9:b7:e5:1d:ba:99:7f:de:50:
                    27:59:13:a4:92:8d:74:9f:4a:3a:7c:6b:5a:87:a1:
                    3e:59:3a:df:1f:8e:85:95:c9:ae:a7:2e:a2:7e:89:
                    c3:93:9a:fe:63:4f:ef:2b:10:05:b4:84:10:4d:34:
                    5f:d3:f1:5d:c2:8d:7f:8b:4c:63:6a:04:03:05:18:
                    46:06:87:1c:9a:35:1f:40:4b:ab:fb:ea:41:38:cc:
                    81:30:3a:75:b5:ea:13:46:90:f1:c8:67:92:53:f1:
                    41:a2:61:5e:9f:e5:bc:06:0d:61:8b:e5:19:97:de:
                    dc:eb:58:fb:ac:56:fd:e7:1d:f8:79:3f:fa:30:96:
                    c0:75:81:66:b9:0a:23:d9:e9:57:de:2f:4e:42:f2:
                    25:b0:0e:e6:30:6f:b2:c1:c5:4e:d2:56:e2:99:fc:
                    d3:a9:ef:55:d9:8f:f9:61:8a:c1:34:4a:c0:c0:4e:
                    79:29:22:e7:a8:57:be:21:b4:41:de:29:c9:1b:1c:
                    b5:b3:d3:39:f2:0e:32:67:63:16:9e:c0:d7:ba:e1:
                    05:89:0b:2b:e4:d2:d1:3a:f0:0c:bf:63:d2:a6:91:
                    cf:21:26:21:65:b4:dc:89:ef:95:fa:73:af:11:87:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:B8:F7:BA:5C:6C:69:82:F4:23:BB:71:0C:9F:63:F5:3E:B8:26
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218654.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:14:43:44:7d:5e:44:1f:4a:59:9f:4a:eb:16:12:c3:33:40:
         c8:97:30:d3:2a:41:48:ce:94:42:2d:22:ee:b8:b2:69:b9:01:
         db:e2:8c:00:8c:bb:6c:77:e7:56:16:c6:bb:bd:56:bd:c2:23:
         c5:56:52:3d:d5:56:df:5c:28:d4:18:5a:41:48:6a:4a:9b:6f:
         c3:3f:b9:00:53:fa:d4:49:bb:af:6b:5a:08:1f:43:94:83:44:
         1b:00:43:f0:2c:94:89:8b:d7:4a:bd:21:ee:ef:35:69:72:cd:
         1c:d8:af:03:c8:41:15:4d:9e:d3:04:37:e6:f8:d6:9f:3e:7e:
         f4:39:d1:61:5e:fb:f2:e6:6e:fb:2c:68:fe:bd:7c:64:38:32:
         03:f6:e7:d3:4a:5a:b5:35:9d:97:31:0b:f3:11:e4:16:1d:77:
         70:a9:c8:1f:64:be:0b:3a:4b:89:84:bb:2b:b2:1d:38:b6:07:
         2f:d9:f8:8e:27:53:41:90:57:b4:75:f0:a3:e1:56:44:b5:67:
         36:cf:a5:63:73:9a:02:9e:35:f3:8a:22:b8:a9:ad:61:44:8c:
         67:43:fd:52:30:c9:15:2f:c6:87:ea:75:fc:09:75:c9:ba:96:
         cc:96:43:46:0d:75:82:36:86:ac:a3:81:d1:48:6e:0b:92:8d:
         93:a7:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:08 2026 by rpki-client