$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: LWAJ10PFD8Ucc7dWQsCx0E2WyT9IpyHGuhOi9HK9w88= Subject key identifier: 0B:A3:EC:DB:E3:E8:9C:82:FF:BC:30:99:C5:08:A7:5C:F4:46:FA:5C Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 7685F18E6E936975C55299E92C5AE6ADCB8108FF Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa Signing time: Fri 13 Mar 2026 23:24:19 +0000 ROA not before: Fri 13 Mar 2026 23:19:19 +0000 ROA not after: Fri 12 Mar 2027 23:24:19 +0000 asID: 7029 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 13.141.64.0/22 maxlen: 24 169.40.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 10:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:85:f1:8e:6e:93:69:75:c5:52:99:e9:2c:5a:e6:ad:cb:81:08:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 13 23:19:19 2026 GMT Not After : Mar 12 23:24:19 2027 GMT Subject: CN=0BA3ECDBE3E89C82FFBC3099C508A75CF446FA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:dd:f1:98:48:f5:9c:e1:0a:f7:65:5e:3a: 25:34:08:95:68:0c:06:f2:e0:65:64:80:ba:0f:55: b1:10:2a:56:88:07:7c:9d:05:39:bd:96:b5:57:fa: 41:52:e1:b4:4b:c0:ba:64:3f:2d:6a:53:8b:56:dc: a2:fe:5a:de:74:38:3a:d4:98:42:83:72:1c:98:43: 99:08:9c:d3:d7:c2:7a:d0:e5:e0:f5:99:90:9c:99: 24:2a:41:6f:bd:36:5d:21:68:66:d6:30:0e:3b:bf: f7:2c:e4:7f:e6:fb:f1:84:d8:72:ca:45:6d:b0:cd: 92:93:be:7e:d7:c2:36:f9:64:a0:d8:25:5a:1e:fa: 21:d7:bf:4d:c1:40:87:f7:3e:ea:ef:12:55:29:c5: fd:58:9f:bf:6a:11:18:35:36:c2:1c:bc:4b:c2:c7: 66:6e:fa:8e:39:c0:93:62:13:97:52:24:72:76:87: a3:88:24:9a:77:52:e2:ca:21:61:89:c4:89:df:bc: 76:ec:af:2a:b5:c2:40:2a:6c:fa:29:4e:27:46:8d: d7:11:3a:a5:dc:7c:06:17:9a:d9:37:56:44:40:d4: e7:00:74:9f:d8:02:5f:75:6e:65:8e:6e:81:74:24: 50:5f:cd:18:9f:2c:6a:03:00:f1:3b:11:e0:de:c8: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A3:EC:DB:E3:E8:9C:82:FF:BC:30:99:C5:08:A7:5C:F4:46:FA:5C X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 13.141.64.0/22 169.40.153.0/24 Signature Algorithm: sha256WithRSAEncryption 02:7d:04:92:33:b1:ea:87:56:55:10:81:f5:e1:08:2f:16:b8: 87:f0:9c:d2:60:50:d1:d9:2e:cd:b9:c5:b9:dd:bf:c4:1b:e2: 5a:cf:0a:d1:1f:43:69:30:46:5a:12:a4:6d:9f:dd:65:06:2b: 90:67:be:53:c2:f2:8e:fe:87:5e:f2:d5:56:e1:f7:b2:1a:77: 70:ea:b0:57:f1:7b:38:d7:d5:b1:fb:d4:a9:68:bb:74:c9:7e: 46:77:25:58:57:5c:5e:e1:12:65:61:90:de:b8:9a:84:5b:59: f1:05:38:26:dc:16:a7:c8:11:a3:39:92:cc:47:81:eb:29:49: 00:4b:b3:1e:cc:73:f1:84:aa:25:91:ec:a9:be:eb:fc:ec:63: 3d:ea:79:a9:04:ba:5d:85:5c:59:46:4d:f6:d4:d8:a8:99:e4: 09:1d:54:88:d6:dc:5f:72:99:2a:3e:5c:11:41:8c:45:10:07: 76:2f:15:ba:9e:50:53:94:3b:da:51:68:19:64:00:86:18:fd: 76:79:90:ae:15:fe:28:bd:6c:a2:92:35:a3:3b:c8:21:1f:a9: 42:ae:72:2b:aa:31:4a:88:12:47:55:a7:54:51:1c:38:32:0e: 3b:c6:b8:82:0a:ec:0b:d0:0e:4a:5f:2d:82:d9:dd:f9:38:ad: a9:17:01:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUdoXxjm6TaXXFUpnpLFrmrcuBCP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMTMyMzE5MTlaFw0yNzAzMTIyMzI0MTlaMDMxMTAvBgNV BAMTKDBCQTNFQ0RCRTNFODlDODJGRkJDMzA5OUM1MDhBNzVDRjQ0NkZBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6t3xmEj1nOEK92VeOiU0CJVo DAby4GVkgLoPVbEQKlaIB3ydBTm9lrVX+kFS4bRLwLpkPy1qU4tW3KL+Wt50ODrU mEKDchyYQ5kInNPXwnrQ5eD1mZCcmSQqQW+9Nl0haGbWMA47v/cs5H/m+/GE2HLK RW2wzZKTvn7Xwjb5ZKDYJVoe+iHXv03BQIf3PurvElUpxf1Yn79qERg1NsIcvEvC x2Zu+o45wJNiE5dSJHJ2h6OIJJp3UuLKIWGJxInfvHbsryq1wkAqbPopTidGjdcR OqXcfAYXmtk3VkRA1OcAdJ/YAl91bmWOboF0JFBfzRifLGoDAPE7EeDeyGwLAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUC6Ps2+PonIL/vDCZxQinXPRG+lwwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwOAYIKwYBBQUHAQcBAf8EKTAnMCUEAgABMB8wCwMDAA2NAwQCDY0QAwQCDY0o AwQCDY1AAwQAqSiZMA0GCSqGSIb3DQEBCwUAA4IBAQACfQSSM7Hqh1ZVEIH14Qgv FriH8JzSYFDR2S7NucW53b/EG+JazwrRH0NpMEZaEqRtn91lBiuQZ75TwvKO/ode 8tVW4feyGndw6rBX8Xs419Wx+9SpaLt0yX5GdyVYV1xe4RJlYZDeuJqEW1nxBTgm 3BanyBGjOZLMR4HrKUkAS7MezHPxhKolkeypvuv87GM96nmpBLpdhVxZRk321Nio meQJHVSI1txfcpkqPlwRQYxFEAd2LxW6nlBTlDvaUWgZZACGGP12eZCuFf4ovWyi kjWjO8ghH6lCrnIrqjFKiBJHVadUURw4Mg47xriCCuwL0A5KXy2C2d35OK2pFwFg -----END CERTIFICATE-----Generated at Thu Mar 26 03:52:38 2026 by rpki-client