$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: 9afo2fNCPEY6SV0t1ctI6TsIh63bDEfIYN7m6xW2jPw= Subject key identifier: 38:E4:D3:EF:B5:F2:3F:A2:43:42:07:C6:BC:3B:51:47:95:CC:61:1E Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 1BA26485B46A88C481F5BB2E21AC3ED14E3FEAF5 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Fri 23 Oct 2026 00:00:46 +0000 ROA not before: Thu 22 Oct 2026 23:55:46 +0000 ROA not after: Fri 22 Oct 2027 00:00:46 +0000 asID: 5650 IP address blocks: 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a2:64:85:b4:6a:88:c4:81:f5:bb:2e:21:ac:3e:d1:4e:3f:ea:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 22 23:55:46 2026 GMT Not After : Oct 22 00:00:46 2027 GMT Subject: CN=38E4D3EFB5F23FA2434207C6BC3B514795CC611E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:d9:9c:08:ff:94:6b:b6:9b:a2:d3:bf:16: cb:90:44:f7:a6:1f:9b:ab:a2:d1:dc:4d:9d:da:01: ca:15:6c:e9:26:8a:51:57:d0:f1:c0:78:3f:55:91: 05:64:4d:84:d1:32:08:b5:9f:37:e9:68:88:de:bb: 5c:60:60:98:12:00:8b:9c:33:c1:b6:93:69:ad:95: 50:9a:0d:7c:8e:2d:82:6c:fd:92:f1:92:75:75:26: 40:d1:54:a1:76:89:6e:aa:83:1e:ea:31:ab:d0:0a: d4:31:1a:eb:b2:64:46:d3:77:dd:74:84:88:68:9e: 8d:ea:89:a6:91:8f:b9:74:f7:25:c2:a1:8c:9f:88: d5:db:16:cf:10:f6:e5:17:1a:23:20:d7:79:85:34: fc:74:99:69:c9:f5:ff:2a:9b:2f:3e:21:cf:32:70: 21:75:ed:fd:25:0b:71:fb:5d:18:e9:57:e4:08:41: 5d:e3:e2:a5:45:d5:40:f8:d3:f7:9f:77:9d:9b:83: 63:fa:6c:e2:b9:39:46:14:c9:2e:fd:4d:6e:59:cc: 70:ef:b9:be:c7:f2:2a:9f:39:31:bc:b0:4c:bc:00: 3c:97:9e:d1:15:69:cd:ff:f5:8a:ca:e6:db:2f:03: 73:1f:27:11:f7:d4:33:0d:b1:bb:19:b1:02:e0:e1: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E4:D3:EF:B5:F2:3F:A2:43:42:07:C6:BC:3B:51:47:95:CC:61:1E X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 77:f3:a0:cd:21:d7:af:f8:53:a3:1f:f3:00:ca:28:da:0b:fc: 22:82:be:39:0b:30:cb:46:dd:17:ea:5e:dd:b0:fe:41:20:af: 49:e7:90:49:97:09:fc:2c:7d:83:ca:ae:4e:43:03:c1:2b:92: a1:fb:52:96:9b:c3:c3:cd:9d:71:89:d2:1a:e6:d7:bf:5f:4e: 05:ef:a8:7d:45:2c:05:15:6e:36:a7:fa:70:66:a5:4e:b7:f6: 48:b6:59:7c:d2:42:b4:ed:d1:cd:c9:1a:7a:ca:46:c0:3e:e7: 33:14:68:3a:54:2b:e8:d7:9f:42:35:19:dd:45:d3:04:be:62: 36:85:70:75:f6:58:c2:54:00:8c:82:de:2d:63:5c:92:32:5c: 7a:b5:47:e9:03:97:0d:e2:2b:c1:47:8b:ef:6b:8f:89:9f:0f: 32:43:e8:4f:21:91:9d:80:2f:1d:25:47:1c:04:94:45:81:0a: 6c:c2:da:a4:bc:58:14:c6:39:cd:f5:cd:a9:b5:e8:d5:44:57: 93:b0:e8:c9:a9:f9:4c:24:f1:15:27:f6:8a:71:c6:c6:ce:ea: b4:48:60:4d:03:0d:1c:2d:b2:98:2e:20:d1:d1:d4:e4:02:24: 77:45:ba:de:76:7c:b1:c2:88:1e:8d:02:12:28:38:30:2a:03: 4a:08:86:e3 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUG6JkhbRqiMSB9bsuIaw+0U4/6vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMjIyMzU1NDZaFw0yNzEwMjIwMDAwNDZaMDMxMTAvBgNV BAMTKDM4RTREM0VGQjVGMjNGQTI0MzQyMDdDNkJDM0I1MTQ3OTVDQzYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvytmcCP+Ua7abotO/FsuQRPem H5urotHcTZ3aAcoVbOkmilFX0PHAeD9VkQVkTYTRMgi1nzfpaIjeu1xgYJgSAIuc M8G2k2mtlVCaDXyOLYJs/ZLxknV1JkDRVKF2iW6qgx7qMavQCtQxGuuyZEbTd910 hIhono3qiaaRj7l09yXCoYyfiNXbFs8Q9uUXGiMg13mFNPx0mWnJ9f8qmy8+Ic8y cCF17f0lC3H7XRjpV+QIQV3j4qVF1UD40/efd52bg2P6bOK5OUYUyS79TW5ZzHDv ub7H8iqfOTG8sEy8ADyXntEVac3/9YrK5tsvA3MfJxH31DMNsbsZsQLg4QExAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUOOTT77XyP6JDQgfGvDtRR5XMYR4wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwTQYIKwYBBQUHAQcBAf8EPjA8MDoEAgABMDQDBACpKIEwDAMEBKkokAMEAako lAMEAKkomQMEAakonDAMAwQCqSikAwQGqSiAAwQEqSjwMA0GCSqGSIb3DQEBCwUA A4IBAQB386DNIdev+FOjH/MAyijaC/wigr45CzDLRt0X6l7dsP5BIK9J55BJlwn8 LH2Dyq5OQwPBK5Kh+1KWm8PDzZ1xidIa5te/X04F76h9RSwFFW42p/pwZqVOt/ZI tll80kK07dHNyRp6ykbAPuczFGg6VCvo159CNRndRdMEvmI2hXB19ljCVACMgt4t Y1ySMlx6tUfpA5cN4ivBR4vva4+Jnw8yQ+hPIZGdgC8dJUccBJRFgQpswtqkvFgU xjnN9c2ptejVRFeTsOjJqflMJPEVJ/aKccbGzuq0SGBNAw0cLbKYLiDR0dTkAiR3 RbrednyxwogejQISKDgwKgNKCIbj -----END CERTIFICATE-----Generated at Sat Nov 14 21:06:19 2026 by rpki-client