$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: u8wasAv5ynsHi31N6vWCGKZJowcaMhJMuH9A3lQLwhc= Subject key identifier: CA:C6:AE:16:C7:BC:48:45:D7:A3:88:3F:75:66:84:8E:4F:58:18:5A Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 3902B9E07A4E8EDAE343F4B45EE27B2725BDE5EF Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Fri 17 Apr 2026 15:47:58 +0000 ROA not before: Fri 17 Apr 2026 15:42:58 +0000 ROA not after: Fri 16 Apr 2027 15:47:58 +0000 asID: 5650 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.204.0/22 maxlen: 22 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:02:b9:e0:7a:4e:8e:da:e3:43:f4:b4:5e:e2:7b:27:25:bd:e5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 17 15:42:58 2026 GMT Not After : Apr 16 15:47:58 2027 GMT Subject: CN=CAC6AE16C7BC4845D7A3883F7566848E4F58185A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:06:cf:8e:19:ae:1f:bc:a8:40:74:33:bb: 7c:e5:4d:fe:d5:56:25:d7:46:57:5a:a1:d7:48:89: a8:e7:5f:2c:0c:24:50:22:4f:39:19:1e:b6:41:1a: ef:10:44:b4:40:48:56:ac:2d:fa:26:b4:e7:0e:08: 2f:c9:30:6c:fd:45:54:98:c3:67:99:10:af:cd:95: 67:e5:70:d7:66:37:5d:98:8a:bf:4b:4d:2a:f4:fa: f0:c2:bf:d9:54:89:3d:7c:28:9c:6e:08:11:cf:62: b5:63:84:12:dc:83:76:45:b9:f0:6e:cc:ca:20:8f: dc:2a:10:a4:42:54:4b:65:74:1b:86:81:af:9e:6b: d3:b4:66:f0:56:dc:2f:1e:ad:ec:e1:3a:14:64:cc: 01:8d:51:84:b8:b9:47:bb:15:63:fa:d3:f6:64:e0: 74:d9:f4:ee:4a:33:ef:3f:f0:31:b4:41:3c:e4:fd: 9c:d5:74:bc:17:37:62:80:43:d0:85:6f:e1:46:9e: 03:e9:86:66:ef:16:ef:cc:29:84:75:3a:80:04:e2: dd:09:dc:f1:e1:b0:2a:95:52:81:0d:1b:ff:46:9a: 29:e8:51:9e:3e:26:ce:66:82:a6:bc:f7:31:d1:f3: ba:69:71:3a:69:2b:2f:d0:87:a2:90:31:dd:09:5d: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:AE:16:C7:BC:48:45:D7:A3:88:3F:75:66:84:8E:4F:58:18:5A X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.204.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 68:42:c5:bf:35:ca:33:e7:4a:12:04:3e:cc:b2:f6:2e:55:e8: 87:99:da:5e:3d:f7:66:16:df:89:e1:e4:d7:a7:01:32:70:3c: 0e:59:c9:db:c0:fb:6d:08:98:b0:9e:5a:9e:f5:e5:86:a8:df: be:40:7c:c4:d9:c9:d7:79:7c:20:bd:c7:c8:33:77:10:c5:8f: f0:63:e3:d0:91:bc:ca:97:ea:1d:b3:91:d4:a2:90:15:35:0e: 52:ac:8a:c3:78:cc:e8:ee:8a:6b:5f:4b:e2:50:a4:54:ee:cc: 30:83:e5:d1:35:4f:c9:57:91:65:62:d6:50:b0:3c:22:88:36: 65:8b:3c:45:7b:57:d8:f5:12:6f:af:c3:80:59:dd:a4:99:33: 7a:b6:03:67:34:80:62:07:13:77:d3:ea:f9:d6:0c:f4:49:eb: 3c:4f:0a:34:55:cb:3a:fa:75:29:7c:24:84:81:a1:bb:7e:ee: 72:c9:ee:28:60:2c:76:ad:13:73:b7:9a:c3:31:41:2d:7a:89: 03:52:dc:aa:f3:da:ca:31:45:5b:11:5e:ca:4d:18:45:98:cc: cd:6d:3f:41:b9:6d:3d:50:53:fc:f1:18:54:bc:08:72:dc:99: dc:4b:45:4f:52:42:cc:e8:66:4e:5b:27:92:b3:be:94:3d:a5: d6:6e:68:ef -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUOQK54HpOjtrjQ/S0XuJ7JyW95e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MTcxNTQyNThaFw0yNzA0MTYxNTQ3NThaMDMxMTAvBgNV BAMTKENBQzZBRTE2QzdCQzQ4NDVEN0EzODgzRjc1NjY4NDhFNEY1ODE4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC40wbPjhmuH7yoQHQzu3zlTf7V ViXXRldaoddIiajnXywMJFAiTzkZHrZBGu8QRLRASFasLfomtOcOCC/JMGz9RVSY w2eZEK/NlWflcNdmN12Yir9LTSr0+vDCv9lUiT18KJxuCBHPYrVjhBLcg3ZFufBu zMogj9wqEKRCVEtldBuGga+ea9O0ZvBW3C8erezhOhRkzAGNUYS4uUe7FWP60/Zk 4HTZ9O5KM+8/8DG0QTzk/ZzVdLwXN2KAQ9CFb+FGngPphmbvFu/MKYR1OoAE4t0J 3PHhsCqVUoENG/9GminoUZ4+Js5mgqa89zHR87ppcTppKy/Qh6KQMd0JXco3AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUysauFse8SEXXo4g/dWaEjk9YGFowHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwZgYIKwYBBQUHAQcBAf8EVzBVMFMEAgABME0wCwMDAA2NAwQCDY0QAwQCDY0o AwQAqSiBMAwDBASpKJADBAGpKJQDBACpKJkDBAGpKJwwDAMEAqkopAMEBqkogAME AqkozAMEBKko8DANBgkqhkiG9w0BAQsFAAOCAQEAaELFvzXKM+dKEgQ+zLL2LlXo h5naXj33ZhbfieHk16cBMnA8DlnJ28D7bQiYsJ5anvXlhqjfvkB8xNnJ13l8IL3H yDN3EMWP8GPj0JG8ypfqHbOR1KKQFTUOUqyKw3jM6O6Ka19L4lCkVO7MMIPl0TVP yVeRZWLWULA8Iog2ZYs8RXtX2PUSb6/DgFndpJkzerYDZzSAYgcTd9Pq+dYM9Enr PE8KNFXLOvp1KXwkhIGhu37ucsnuKGAsdq0Tc7eawzFBLXqJA1LcqvPayjFFWxFe yk0YRZjMzW0/QbltPVBT/PEYVLwIctyZ3EtFT1JCzOhmTlsnkrO+lD2l1m5o7w== -----END CERTIFICATE-----Generated at Tue May 12 22:25:11 2026 by rpki-client