$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: /lgbjk1x6KVo8hwwGYGlA3YUmooxP791zOrE8dGMQrA= Subject key identifier: 30:6E:7A:A3:6C:65:09:50:83:CF:7B:8B:0D:7A:A5:E9:CC:39:05:9F Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 6CBD7B240AD8FA42E8E7FBD4F0648448D3261266 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa Signing time: Thu 12 Mar 2026 15:11:01 +0000 ROA not before: Thu 12 Mar 2026 15:06:01 +0000 ROA not after: Thu 11 Mar 2027 15:11:01 +0000 asID: 42831 IP address blocks: 169.40.105.0/24 maxlen: 24 169.40.106.0/24 maxlen: 24 169.40.109.0/24 maxlen: 24 169.40.114.0/24 maxlen: 24 169.40.127.0/24 maxlen: 24 169.40.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bd:7b:24:0a:d8:fa:42:e8:e7:fb:d4:f0:64:84:48:d3:26:12:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 12 15:06:01 2026 GMT Not After : Mar 11 15:11:01 2027 GMT Subject: CN=306E7AA36C65095083CF7B8B0D7AA5E9CC39059F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:4c:d2:51:2b:e8:6d:28:7f:39:91:d6:15: 0b:38:2b:ed:36:0a:3e:7e:61:f5:cc:55:18:41:d8: 80:50:c3:82:46:db:c6:8c:a4:d9:a2:aa:2f:ad:ae: 65:de:3f:bf:c9:42:d9:4a:5c:f9:0c:6d:a4:b7:04: 55:50:0a:a2:c7:b7:64:1d:aa:c4:18:80:4b:f6:25: 8e:33:81:34:2f:4e:e7:da:fc:70:d5:8c:af:07:50: b2:03:7d:81:c4:cd:e4:d9:9e:6a:bc:91:50:df:72: 80:82:0f:0d:c8:af:3b:24:48:fb:ad:79:27:4b:f1: 5c:c6:f2:84:73:dc:88:0d:67:83:bb:a8:a7:02:e6: 73:e3:1d:ed:de:60:f2:d6:09:16:82:7a:40:d0:bf: aa:27:37:73:71:7a:1f:10:26:94:ad:49:a3:b3:93: 34:28:28:fd:fb:6e:4b:30:bb:12:04:5a:9e:95:a2: 7c:cf:ac:a0:d7:60:f0:b3:4e:96:b3:bc:4c:b3:5b: 72:8f:f3:93:5b:71:53:16:06:7f:59:26:41:26:a2: f1:e3:ef:fd:8f:80:f8:34:15:38:a1:f8:f2:bf:71: a6:9b:68:a8:d9:da:ca:ef:90:3e:96:a7:62:6d:7f: d2:08:e9:be:94:73:c9:66:67:86:50:b9:48:54:69: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:7A:A3:6C:65:09:50:83:CF:7B:8B:0D:7A:A5:E9:CC:39:05:9F X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.105.0-169.40.106.255 169.40.109.0/24 169.40.114.0/24 169.40.127.0/24 169.40.134.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:a8:2e:d2:22:24:c1:a4:29:d6:3a:a8:68:12:15:bd:83:98: e7:e5:f7:5f:dd:d4:50:07:b1:b4:10:a0:c3:84:a7:61:86:a3: 44:18:f4:af:ae:50:1c:42:02:3a:f3:27:e9:50:7e:58:d3:8a: 19:9d:92:88:45:99:06:1b:76:a5:5f:13:be:f8:e8:4e:aa:95: 4c:da:46:86:bd:4a:a8:03:28:be:0c:7f:8b:2b:ac:ec:75:8f: c7:97:a8:a0:19:d0:d7:e6:0e:14:2a:cd:cf:6b:5f:eb:dc:29: 11:80:2a:2d:dd:52:22:c4:e3:df:37:9f:8a:8d:ec:b4:6d:42: 32:55:e3:31:09:28:a9:06:cd:b0:55:fe:6c:c3:3f:ad:7e:93: ce:be:76:7f:2c:55:3c:19:b6:81:74:08:d6:50:b5:c2:1e:4d: 5f:cf:86:b9:12:0c:32:6a:8e:2e:0e:90:a5:e1:17:6d:45:20: ba:1d:a1:c6:a3:52:62:bb:f8:33:55:10:c2:59:15:92:b2:86: d4:19:53:ee:25:ae:2a:b2:83:a6:93:1b:7b:3b:09:ae:52:21: 4b:53:a0:eb:37:f3:f7:1f:4c:66:48:67:2d:fa:a6:83:3d:c5: 5c:5c:b9:fb:94:a1:20:85:73:f5:fd:ce:14:7a:bc:06:b6:87: fc:7a:77:63 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUbL17JArY+kLo5/vU8GSESNMmEmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDFaFw0yNzAzMTExNTExMDFaMDMxMTAvBgNV BAMTKDMwNkU3QUEzNkM2NTA5NTA4M0NGN0I4QjBEN0FBNUU5Q0MzOTA1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDan0zSUSvobSh/OZHWFQs4K+02 Cj5+YfXMVRhB2IBQw4JG28aMpNmiqi+trmXeP7/JQtlKXPkMbaS3BFVQCqLHt2Qd qsQYgEv2JY4zgTQvTufa/HDVjK8HULIDfYHEzeTZnmq8kVDfcoCCDw3IrzskSPut eSdL8VzG8oRz3IgNZ4O7qKcC5nPjHe3eYPLWCRaCekDQv6onN3Nxeh8QJpStSaOz kzQoKP37bkswuxIEWp6VonzPrKDXYPCzTpazvEyzW3KP85NbcVMWBn9ZJkEmovHj 7/2PgPg0FTih+PK/caabaKjZ2srvkD6Wp2Jtf9II6b6Uc8lmZ4ZQuUhUaWlnAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUMG56o2xlCVCDz3uLDXql6cw5BZ8wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQyODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACpKGkDBACpKGoDBACp KG0DBACpKHIDBACpKH8DBACpKIYwDQYJKoZIhvcNAQELBQADggEBACqoLtIiJMGk KdY6qGgSFb2DmOfl91/d1FAHsbQQoMOEp2GGo0QY9K+uUBxCAjrzJ+lQfljTihmd kohFmQYbdqVfE7746E6qlUzaRoa9SqgDKL4Mf4srrOx1j8eXqKAZ0NfmDhQqzc9r X+vcKRGAKi3dUiLE4983n4qN7LRtQjJV4zEJKKkGzbBV/mzDP61+k86+dn8sVTwZ toF0CNZQtcIeTV/PhrkSDDJqji4OkKXhF21FILodocajUmK7+DNVEMJZFZKyhtQZ U+4lriqyg6aTG3s7Ca5SIUtToOs38/cfTGZIZy36poM9xVxcufuUoSCFc/X9zhR6 vAa2h/x6d2M= -----END CERTIFICATE-----Generated at Thu Mar 26 07:10:56 2026 by rpki-client