$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: I6jRhswwcKXIze0/EeUtejNwmHA5OtYGFACrWCO1y+4= Subject key identifier: 86:9F:DB:FE:6B:95:CC:63:2A:E0:FD:BC:77:68:14:25:64:B5:D5:E0 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 1EEB5ADFBBF6D5319AC2481963758C7105FA8F03 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40676.roa Signing time: Sun 22 Mar 2026 23:19:57 +0000 ROA not before: Sun 22 Mar 2026 23:14:57 +0000 ROA not after: Sun 21 Mar 2027 23:19:57 +0000 asID: 40676 IP address blocks: 169.40.111.0/24 maxlen: 24 169.40.128.0/24 maxlen: 24 169.40.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:eb:5a:df:bb:f6:d5:31:9a:c2:48:19:63:75:8c:71:05:fa:8f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 22 23:14:57 2026 GMT Not After : Mar 21 23:19:57 2027 GMT Subject: CN=869FDBFE6B95CC632AE0FDBC7768142564B5D5E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:ea:e5:28:28:78:0e:a8:7c:3a:66:59:29: 39:de:ad:6c:b4:94:43:a1:b5:7c:89:0a:e5:b0:00: ea:51:fc:6d:c5:7d:43:1a:c9:10:8a:97:d6:6a:cf: 3d:91:99:9e:3b:88:5c:01:4c:72:af:6a:87:79:a1: 2f:9a:3c:b7:b9:9f:a2:db:ef:36:61:ec:34:0a:f8: 44:d3:28:98:5e:60:f0:14:e0:0d:51:12:38:41:9d: c1:04:4b:ea:45:eb:b9:ce:89:d0:26:3b:a8:18:2f: d1:21:02:1a:14:28:bb:71:38:ea:82:44:e8:c2:e2: 3f:9e:03:9d:d9:02:ca:a9:06:45:63:3d:a1:be:c8: 1e:57:af:0a:44:ea:cb:14:66:c2:c1:fc:28:74:4e: 0c:22:d5:d9:76:40:b7:7d:19:01:2d:ca:26:20:2c: ae:a7:f8:9c:ca:cd:04:d8:7f:52:e8:f9:d1:b6:cc: 2d:92:c5:e1:d4:a1:f9:b0:06:a0:fa:6b:8f:af:dc: cb:94:4a:49:8d:ee:16:80:2c:33:50:8d:42:9b:67: 38:9e:16:1d:41:ea:e3:a4:2d:94:8a:88:c6:1a:c6: 53:23:dc:5a:51:59:63:6e:a0:1d:81:d6:31:3c:86: 83:1b:fb:e9:16:06:07:5c:6f:bd:c6:f2:4d:4e:42: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:DB:FE:6B:95:CC:63:2A:E0:FD:BC:77:68:14:25:64:B5:D5:E0 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.111.0/24 169.40.128.0/24 169.40.151.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f2:eb:44:66:95:25:db:42:cc:18:c7:f3:03:14:af:59:fa: f1:df:92:df:8d:bd:bb:fe:52:64:7b:47:cb:c3:11:1d:f9:26: 9a:b4:f3:bf:36:e4:86:3e:8a:6d:3a:b7:c0:66:99:fb:33:dc: 05:37:57:68:83:e8:71:65:94:32:2a:f5:e2:46:ad:0f:35:a9: d2:77:e9:aa:53:9f:5d:aa:9a:e1:3f:47:f2:a6:6d:36:4b:b8: e3:81:77:0d:eb:a5:81:66:0e:a4:90:a5:ef:bb:84:62:4a:35: a2:b1:3e:cf:83:58:5b:54:a2:16:42:1e:fc:d2:93:31:1f:ed: 57:e0:bc:8e:19:77:59:9a:43:1b:72:64:0c:53:68:cd:1f:95: 3b:22:eb:d3:0a:d9:ab:71:1b:53:ad:91:55:27:ee:41:59:28: 12:b3:c7:19:a6:0f:32:f6:0d:59:96:43:64:e0:77:0f:e1:8b: 0c:3f:9e:67:7d:7e:97:cd:aa:c1:29:a5:bb:ac:a3:1a:75:7e: d2:58:fd:55:60:84:24:7e:28:1b:8a:6f:30:1e:16:b8:a1:7f: 69:ce:eb:a6:98:eb:2e:a9:39:e0:22:32:77:b7:a6:ed:29:30: 05:1b:12:98:f0:bf:27:23:35:da:ca:b5:eb:47:d7:11:09:26: 02:39:ea:ef -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUHuta37v21TGawkgZY3WMcQX6jwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMjIyMzE0NTdaFw0yNzAzMjEyMzE5NTdaMDMxMTAvBgNV BAMTKDg2OUZEQkZFNkI5NUNDNjMyQUUwRkRCQzc3NjgxNDI1NjRCNUQ1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhOrlKCh4Dqh8OmZZKTnerWy0 lEOhtXyJCuWwAOpR/G3FfUMayRCKl9Zqzz2RmZ47iFwBTHKvaod5oS+aPLe5n6Lb 7zZh7DQK+ETTKJheYPAU4A1REjhBncEES+pF67nOidAmO6gYL9EhAhoUKLtxOOqC ROjC4j+eA53ZAsqpBkVjPaG+yB5XrwpE6ssUZsLB/Ch0Tgwi1dl2QLd9GQEtyiYg LK6n+JzKzQTYf1Lo+dG2zC2SxeHUofmwBqD6a4+v3MuUSkmN7haALDNQjUKbZzie Fh1B6uOkLZSKiMYaxlMj3FpRWWNuoB2B1jE8hoMb++kWBgdcb73G8k1OQkpfAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUhp/b/muVzGMq4P28d2gUJWS11eAwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqShvAwQAqSiAAwQAqSiX MA0GCSqGSIb3DQEBCwUAA4IBAQAr8utEZpUl20LMGMfzAxSvWfrx35Lfjb27/lJk e0fLwxEd+SaatPO/NuSGPoptOrfAZpn7M9wFN1dog+hxZZQyKvXiRq0PNanSd+mq U59dqprhP0fypm02S7jjgXcN66WBZg6kkKXvu4RiSjWisT7Pg1hbVKIWQh780pMx H+1X4LyOGXdZmkMbcmQMU2jNH5U7IuvTCtmrcRtTrZFVJ+5BWSgSs8cZpg8y9g1Z lkNk4HcP4YsMP55nfX6XzarBKaW7rKMadX7SWP1VYIQkfigbim8wHha4oX9pzuum mOsuqTngIjJ3t6btKTAFGxKY8L8nIzXayrXrR9cRCSYCOerv -----END CERTIFICATE-----Generated at Thu Mar 26 03:52:37 2026 by rpki-client