$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: fs0Rs6OPe+DB5tJ7PXK7zubzj07CezlI/veZVxmQu0o= Subject key identifier: F0:CF:E5:A0:A2:D5:2A:5A:A8:BE:CB:3A:08:9F:89:08:FA:76:2F:42 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 49968168DD6042155DD7CEE92265EDF8329DC5D4 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Thu 12 Mar 2026 15:11:01 +0000 ROA not before: Thu 12 Mar 2026 15:06:01 +0000 ROA not after: Thu 11 Mar 2027 15:11:01 +0000 asID: 5650 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 13.141.64.0/22 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.200.0/22 maxlen: 22 169.40.204.0/22 maxlen: 22 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:81:68:dd:60:42:15:5d:d7:ce:e9:22:65:ed:f8:32:9d:c5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 12 15:06:01 2026 GMT Not After : Mar 11 15:11:01 2027 GMT Subject: CN=F0CFE5A0A2D52A5AA8BECB3A089F8908FA762F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:ac:40:cc:a4:50:0a:d7:02:58:68:ac:b0: 79:c6:59:db:94:9d:99:fc:b7:b6:65:b3:25:b5:ef: 09:6a:ff:21:1c:ba:89:20:40:b5:d3:1d:fa:54:2b: 3e:a2:44:4f:f3:7c:61:86:84:43:4d:84:79:4a:8f: 64:1f:65:c6:ef:8d:77:d8:f5:84:bb:b0:39:da:15: be:2b:5f:57:6c:9c:24:f9:e8:97:d8:7c:28:40:27: fc:a6:e5:02:54:b3:d0:4b:d1:09:39:92:df:58:02: 61:5c:33:e2:50:c5:1a:ec:5c:ed:06:b7:81:e8:ec: 3d:16:bf:7a:79:3b:20:d1:fd:f4:65:0d:21:de:81: 73:a8:f8:3a:00:c3:2f:5a:c8:3f:79:02:f4:85:98: 0d:93:8a:0a:f4:0d:7c:6e:f9:27:29:ae:60:1b:29: 48:e9:1b:d8:56:e4:ca:51:fe:7a:ae:02:b0:1c:61: 31:cf:6f:b5:e0:a1:10:60:22:f5:67:a5:44:77:96: 16:00:00:eb:07:68:59:40:02:7a:82:2f:d8:58:f0: ca:85:0d:f4:6b:19:b9:92:33:52:b4:98:08:7b:fc: f8:de:ab:a4:db:a6:75:cc:da:2f:b4:5b:51:04:c9: f1:3d:8f:ad:de:a5:29:69:b0:49:4d:37:7c:40:12: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CF:E5:A0:A2:D5:2A:5A:A8:BE:CB:3A:08:9F:89:08:FA:76:2F:42 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 13.141.64.0/22 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.200.0/21 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:6b:47:6d:07:ba:79:60:f0:85:04:76:f7:b5:32:0f:21:af: 04:bb:76:c0:6e:38:89:2c:42:2a:77:ee:13:84:24:58:7b:6d: dd:96:0e:c0:1b:c9:27:03:ad:3d:d0:50:66:e8:56:79:b2:a1: 26:61:6b:32:4d:67:f7:4e:cf:f3:ff:ec:c6:32:02:39:dc:86: 07:c7:8f:ce:c9:0c:ed:f7:00:c8:4c:88:e1:0c:ac:ea:72:ad: d0:fe:15:c0:42:92:77:55:3b:df:35:05:35:4f:79:c8:3c:8e: 03:0e:47:f3:66:88:54:ba:d0:4e:75:f7:45:e8:2f:01:8b:06: c4:85:1f:62:8e:32:62:8d:a5:b4:2a:f1:2d:ac:6d:0c:3e:93: 18:34:66:fe:1d:d9:4e:22:22:70:09:8e:2f:7b:4c:ee:4e:48: ff:78:0f:39:2e:23:f5:b4:d4:f4:19:61:09:11:2a:7c:f9:0d: 34:fe:a5:1b:8d:9f:74:5f:b8:23:20:de:f7:70:1a:d0:8c:b1: 77:ed:9f:5b:ae:02:d2:61:5d:25:af:e6:bc:29:2f:cb:d2:13: 2a:15:4d:77:62:45:3a:79:6d:87:0b:17:26:73:23:ea:4e:e2: 8e:14:29:c2:0e:2b:cf:10:d2:f4:2d:02:41:9f:1c:ec:77:89: 80:57:9a:e1 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUSZaBaN1gQhVd187pImXt+DKdxdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDFaFw0yNzAzMTExNTExMDFaMDMxMTAvBgNV BAMTKEYwQ0ZFNUEwQTJENTJBNUFBOEJFQ0IzQTA4OUY4OTA4RkE3NjJGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqqxAzKRQCtcCWGissHnGWduU nZn8t7ZlsyW17wlq/yEcuokgQLXTHfpUKz6iRE/zfGGGhENNhHlKj2QfZcbvjXfY 9YS7sDnaFb4rX1dsnCT56JfYfChAJ/ym5QJUs9BL0Qk5kt9YAmFcM+JQxRrsXO0G t4Ho7D0Wv3p5OyDR/fRlDSHegXOo+DoAwy9ayD95AvSFmA2Tigr0DXxu+ScprmAb KUjpG9hW5MpR/nquArAcYTHPb7XgoRBgIvVnpUR3lhYAAOsHaFlAAnqCL9hY8MqF DfRrGbmSM1K0mAh7/Pjeq6TbpnXM2i+0W1EEyfE9j63epSlpsElNN3xAErrHAgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQU8M/loKLVKlqovss6CJ+JCPp2L0IwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwZgYIKwYBBQUHAQcBAf8EVzBVMFMEAgABME0wCwMDAA2NAwQCDY0QAwQCDY0o AwQCDY1AAwQAqSiBMAwDBASpKJADBAGpKJQDBAGpKJwwDAMEAqkopAMEBqkogAME A6koyAMEBKko8DANBgkqhkiG9w0BAQsFAAOCAQEAPWtHbQe6eWDwhQR297UyDyGv BLt2wG44iSxCKnfuE4QkWHtt3ZYOwBvJJwOtPdBQZuhWebKhJmFrMk1n907P8//s xjICOdyGB8ePzskM7fcAyEyI4Qys6nKt0P4VwEKSd1U73zUFNU95yDyOAw5H82aI VLrQTnX3RegvAYsGxIUfYo4yYo2ltCrxLaxtDD6TGDRm/h3ZTiIicAmOL3tM7k5I /3gPOS4j9bTU9BlhCREqfPkNNP6lG42fdF+4IyDe93Aa0Iyxd+2fW64C0mFdJa/m vCkvy9ITKhVNd2JFOnlthwsXJnMj6k7ijhQpwg4rzxDS9C0CQZ8c7HeJgFea4Q== -----END CERTIFICATE-----Generated at Thu Mar 26 05:13:35 2026 by rpki-client