$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402203.roa File: AS402203.roa (raw, json) Hash identifier: s52GfZ4czwuIz5RwdR7QB5gr8Dn8vbuTyORkXSQdj/k= Subject key identifier: AC:67:22:15:6B:E0:23:DA:3C:0E:FB:A2:4A:8A:24:FF:B2:2A:92:74 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 625D92ED26DDFC7987BD713DE3C0BBA55F921922 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402203.roa Signing time: Mon 23 Mar 2026 05:54:52 +0000 ROA not before: Mon 23 Mar 2026 05:49:52 +0000 ROA not after: Mon 22 Mar 2027 05:54:52 +0000 asID: 402203 IP address blocks: 169.40.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5d:92:ed:26:dd:fc:79:87:bd:71:3d:e3:c0:bb:a5:5f:92:19:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 23 05:49:52 2026 GMT Not After : Mar 22 05:54:52 2027 GMT Subject: CN=AC6722156BE023DA3C0EFBA24A8A24FFB22A9274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:37:1c:11:07:3a:6d:a2:7c:25:11:ae:b0: 4d:48:61:f5:66:ca:3a:70:c9:81:3d:13:5c:1e:b5: 9d:59:27:77:af:ba:80:96:eb:73:77:d8:d5:0f:88: 0d:fd:b2:d2:d4:6e:4a:c5:36:c3:e4:57:47:a8:ba: 12:d5:99:b8:29:99:61:77:5a:0c:e3:bd:71:d9:93: 20:24:e6:cc:27:ca:17:52:34:92:3b:f6:8c:33:75: 1f:67:24:a3:01:46:e5:20:59:d2:c6:68:7a:c8:1d: 48:1d:6d:c0:1e:fb:b9:66:b4:70:24:5f:cd:cd:e2: bc:e9:6d:24:4a:c6:19:d4:c0:9d:99:af:d4:9c:b6: 5f:d2:5c:46:4c:36:d1:79:ec:d4:a7:8a:77:dc:9e: fb:ef:94:0d:08:61:e8:81:0d:75:14:c3:78:f1:8d: 28:bc:6a:3e:a8:3a:bc:65:53:c9:8c:d5:e7:0c:73: 16:fd:cd:a9:10:8b:e2:8b:ad:1d:54:19:97:4e:b9: 49:39:a0:3e:3f:55:67:4f:0f:3a:9c:a2:1f:e2:64: 16:51:7a:c1:b3:c9:13:f2:bc:21:22:95:74:cd:3e: 7e:ef:ac:ec:2f:a6:21:c2:56:a0:ea:a4:35:42:5a: 94:ce:8c:a6:97:e5:fa:30:9f:f5:b2:0a:38:8d:5d: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:67:22:15:6B:E0:23:DA:3C:0E:FB:A2:4A:8A:24:FF:B2:2A:92:74 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.37.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a4:c7:e8:0b:ab:28:72:c9:4d:e1:83:ee:3f:ce:2e:f8:bb: 37:e8:5e:da:17:57:23:3a:a1:70:34:4b:c6:8b:cd:3c:23:f8: 73:f3:0d:a8:0f:4a:17:22:c6:4a:b1:44:f9:84:1c:9d:49:2d: 71:42:db:b4:24:5d:d1:a0:79:dc:c3:a2:2d:96:49:5a:81:7e: 7d:13:d3:1f:45:ac:2e:09:ae:98:4d:a1:c3:c4:23:fb:cd:bc: 8c:4e:3a:07:b1:05:d5:68:bc:07:7a:a8:d5:df:ca:cc:f9:0b: a8:c2:c4:b9:40:40:65:07:37:12:fa:a0:4c:ab:7e:f9:80:35: c3:1a:3b:61:5e:26:7e:fa:84:62:05:a3:8b:1a:60:8d:3d:27: fb:5c:04:34:1a:2e:be:76:bf:a4:cd:97:bf:1a:42:29:02:89: cb:33:8e:15:cd:7f:0d:f2:d7:44:f8:59:86:8c:1d:40:ef:88: ad:54:c7:f6:0e:c1:fe:8f:78:df:7c:b0:7b:60:72:0a:8e:10: f0:9e:35:23:5f:73:6a:b1:de:b6:34:eb:d8:94:02:59:81:55: ec:ec:43:0a:f7:bb:e3:3d:dc:2b:c5:ad:7d:20:7e:61:3e:79: 06:80:9f:25:93:7b:61:c6:ff:0c:49:8e:86:be:d8:e3:ea:bc: cf:3c:7e:f7 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUYl2S7Sbd/HmHvXE948C7pV+SGSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMjMwNTQ5NTJaFw0yNzAzMjIwNTU0NTJaMDMxMTAvBgNV BAMTKEFDNjcyMjE1NkJFMDIzREEzQzBFRkJBMjRBOEEyNEZGQjIyQTkyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkDccEQc6baJ8JRGusE1IYfVm yjpwyYE9E1wetZ1ZJ3evuoCW63N32NUPiA39stLUbkrFNsPkV0eouhLVmbgpmWF3 WgzjvXHZkyAk5swnyhdSNJI79owzdR9nJKMBRuUgWdLGaHrIHUgdbcAe+7lmtHAk X83N4rzpbSRKxhnUwJ2Zr9Sctl/SXEZMNtF57NSninfcnvvvlA0IYeiBDXUUw3jx jSi8aj6oOrxlU8mM1ecMcxb9zakQi+KLrR1UGZdOuUk5oD4/VWdPDzqcoh/iZBZR esGzyRPyvCEilXTNPn7vrOwvpiHCVqDqpDVCWpTOjKaX5fown/WyCjiNXfx7AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUrGciFWvgI9o8DvuiSook/7IqknQwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwMjIwMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoJTANBgkqhkiG9w0B AQsFAAOCAQEAcKTH6AurKHLJTeGD7j/OLvi7N+he2hdXIzqhcDRLxovNPCP4c/MN qA9KFyLGSrFE+YQcnUktcULbtCRd0aB53MOiLZZJWoF+fRPTH0WsLgmumE2hw8Qj +828jE46B7EF1Wi8B3qo1d/KzPkLqMLEuUBAZQc3EvqgTKt++YA1wxo7YV4mfvqE YgWjixpgjT0n+1wENBouvna/pM2XvxpCKQKJyzOOFc1/DfLXRPhZhowdQO+IrVTH 9g7B/o9433ywe2ByCo4Q8J41I19zarHetjTr2JQCWYFV7OxDCve74z3cK8WtfSB+ YT55BoCfJZN7Ycb/DEmOhr7Y4+q8zzx+9w== -----END CERTIFICATE-----Generated at Thu Mar 26 14:04:37 2026 by rpki-client