$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: RCwikLvQjLruOfdf8mbsg0e3djslAw8ainOei60KlTM= Subject key identifier: 66:B7:E7:A0:94:13:5C:C4:35:A5:53:DD:A5:AA:3F:77:CC:38:A5:1A Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 12859F9F93C2E9386F85B0A7CD421BEB16989E26 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa Signing time: Tue 12 May 2026 16:22:23 +0000 ROA not before: Tue 12 May 2026 16:17:23 +0000 ROA not after: Tue 11 May 2027 16:22:23 +0000 asID: 7029 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 13.141.128.0/17 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.188.0/22 maxlen: 24 169.40.204.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 12:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:85:9f:9f:93:c2:e9:38:6f:85:b0:a7:cd:42:1b:eb:16:98:9e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: May 12 16:17:23 2026 GMT Not After : May 11 16:22:23 2027 GMT Subject: CN=66B7E7A094135CC435A553DDA5AA3F77CC38A51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:61:89:7c:4e:1c:ed:a8:44:97:f2:ff:aa: 18:ab:3c:17:89:5a:e6:d7:da:0b:74:44:99:fb:90: 03:2c:f9:d6:02:65:ca:05:20:f5:fd:aa:0e:ba:4f: e2:17:38:3b:c8:cd:13:ad:d6:42:6e:9e:61:f5:51: 88:f6:1f:7e:7b:cb:fb:2c:ef:9d:f0:ed:de:6d:1c: a2:cd:87:b4:3b:22:e9:e3:19:6d:c7:18:95:10:16: 51:57:91:f2:21:af:da:ab:f5:10:28:15:fb:0d:04: bc:40:83:12:d5:cf:aa:cb:03:31:c4:e4:36:24:2c: 1f:4c:81:50:6f:f5:5f:91:0d:62:2f:fd:6a:5e:b0: f3:7b:5f:e5:ff:ad:5f:c3:fa:2f:29:ab:9f:58:ad: 49:53:a9:58:d4:84:a4:af:49:d0:05:01:70:dd:1f: e7:27:ea:26:26:9e:dc:6e:74:32:f0:c4:33:f5:87: 08:1a:b1:69:dd:c8:c4:0f:2f:9d:07:36:42:e7:cf: da:11:78:94:34:a9:9a:7e:69:e3:17:31:29:51:1c: 07:18:c9:e0:c4:2c:06:94:a6:f9:47:ae:e9:2b:19: 23:d7:88:89:6c:37:d5:68:cf:bb:0c:76:6c:5e:cb: d0:84:90:d2:cb:88:80:54:13:b0:34:80:c8:56:50: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:E7:A0:94:13:5C:C4:35:A5:53:DD:A5:AA:3F:77:CC:38:A5:1A X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 13.141.128.0/17 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.183.255 169.40.188.0/22 169.40.204.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 08:52:3a:fd:85:72:ee:8b:88:36:76:77:94:e6:9b:0d:e4:d4: 88:ff:aa:5a:43:d9:7d:82:92:18:23:50:43:26:6c:11:c1:23: 27:f7:32:01:d3:ef:d7:88:a3:05:c3:d2:ca:c2:b8:98:ae:68: af:08:58:ff:fd:40:4d:b5:4e:43:b8:ad:56:66:2d:ee:6b:34: 7e:82:52:92:77:08:08:aa:ae:72:b8:88:7f:9b:12:8c:30:7d: 26:5c:50:78:f2:4a:76:57:ad:09:7d:05:af:1d:6b:e7:17:d1: 22:00:12:23:23:86:c9:e8:a4:df:25:7f:d6:2c:45:50:26:76: 27:d5:b3:fd:92:58:87:6b:ed:aa:cf:14:c7:75:24:11:d9:f8: 37:f2:e6:00:a2:77:a6:0f:eb:bd:ee:60:01:fc:89:74:4c:8e: 36:98:9f:4b:16:58:ad:f0:cd:3b:fe:42:56:1b:b3:80:f9:1e: a1:09:31:aa:bc:ba:75:94:d7:3c:76:bc:5f:b7:6a:09:67:b9: 38:d3:7b:2c:77:d4:34:bd:f7:85:f1:32:df:a8:3a:3b:d0:b2: fb:62:f3:da:dc:9a:fa:b9:14:7e:72:4c:10:bb:bc:cd:81:80: 33:90:8a:7e:4c:47:db:65:55:44:0d:88:37:42:49:bb:4e:25: 38:bb:03:b3 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIUEoWfn5PC6ThvhbCnzUIb6xaYniYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA1MTIxNjE3MjNaFw0yNzA1MTExNjIyMjNaMDMxMTAvBgNV BAMTKDY2QjdFN0EwOTQxMzVDQzQzNUE1NTNEREE1QUEzRjc3Q0MzOEE1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbs2GJfE4c7ahEl/L/qhirPBeJ WubX2gt0RJn7kAMs+dYCZcoFIPX9qg66T+IXODvIzROt1kJunmH1UYj2H357y/ss 753w7d5tHKLNh7Q7IunjGW3HGJUQFlFXkfIhr9qr9RAoFfsNBLxAgxLVz6rLAzHE 5DYkLB9MgVBv9V+RDWIv/WpesPN7X+X/rV/D+i8pq59YrUlTqVjUhKSvSdAFAXDd H+cn6iYmntxudDLwxDP1hwgasWndyMQPL50HNkLnz9oReJQ0qZp+aeMXMSlRHAcY yeDELAaUpvlHrukrGSPXiIlsN9Voz7sMdmxey9CEkNLLiIBUE7A0gMhWUEKXAgMB AAGjggKAMIICfDAdBgNVHQ4EFgQUZrfnoJQTXMQ1pVPdpao/d8w4pRowHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwcgYIKwYBBQUHAQcBAf8EYzBhMF8EAgABMFkwCwMDAA2NAwQCDY0QAwQCDY0o AwQHDY2AAwQAqSiBMAwDBASpKJADBAGpKJQDBACpKJkDBAGpKJwwDAMEAqkopAME A6kosAMEAqkovAMEAqkozAMEBKko8DANBgkqhkiG9w0BAQsFAAOCAQEACFI6/YVy 7ouINnZ3lOabDeTUiP+qWkPZfYKSGCNQQyZsEcEjJ/cyAdPv14ijBcPSysK4mK5o rwhY//1ATbVOQ7itVmYt7ms0foJSkncICKqucriIf5sSjDB9JlxQePJKdletCX0F rx1r5xfRIgASIyOGyeik3yV/1ixFUCZ2J9Wz/ZJYh2vtqs8Ux3UkEdn4N/LmAKJ3 pg/rve5gAfyJdEyONpifSxZYrfDNO/5CVhuzgPkeoQkxqry6dZTXPHa8X7dqCWe5 ONN7LHfUNL33hfEy36g6O9Cy+2Lz2tya+rkUfnJMELu8zYGAM5CKfkxH22VVRA2I N0JJu04lOLsDsw== -----END CERTIFICATE-----Generated at Tue May 12 22:36:58 2026 by rpki-client