Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: l9hYua/difdVfZ4/sklkzziXE3PIBGH6lzJoYnyX6r0=
Subject key identifier: A3:AA:6A:11:A4:A6:03:96:FD:42:88:A0:D5:2D:0F:05:94:A2:D4:31
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 4F89CF728CC8EE7750B751289130ECD1EE4B8F55
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Wed 11 Nov 2026 12:56:29 +0000
ROA not before: Wed 11 Nov 2026 12:51:29 +0000
ROA not after: Wed 10 Nov 2027 12:56:29 +0000
asID: 834
IP address blocks: 13.141.1.0/24 maxlen: 24
13.141.5.0/24 maxlen: 24
13.141.7.0/24 maxlen: 24
13.141.9.0/24 maxlen: 24
13.141.11.0/24 maxlen: 24
13.141.13.0/24 maxlen: 24
13.141.15.0/24 maxlen: 24
13.141.22.0/23 maxlen: 24
13.141.26.0/24 maxlen: 24
13.141.32.0/24 maxlen: 24
13.141.35.0/24 maxlen: 24
13.141.36.0/22 maxlen: 24
13.141.52.0/22 maxlen: 24
13.141.62.0/24 maxlen: 24
13.141.64.0/24 maxlen: 24
13.141.69.0/24 maxlen: 24
13.141.76.0/23 maxlen: 24
13.141.121.0/24 maxlen: 24
13.141.123.0/24 maxlen: 24
13.141.127.0/24 maxlen: 24
169.40.60.0/22 maxlen: 24
169.40.72.0/22 maxlen: 24
169.40.135.0/24 maxlen: 24
169.40.160.0/22 maxlen: 24
169.40.192.0/22 maxlen: 24
169.40.208.0/22 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 09:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:89:cf:72:8c:c8:ee:77:50:b7:51:28:91:30:ec:d1:ee:4b:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Nov 11 12:51:29 2026 GMT
Not After : Nov 10 12:56:29 2027 GMT
Subject: CN=A3AA6A11A4A60396FD4288A0D52D0F0594A2D431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:8f:ec:21:63:45:f3:b4:3c:35:0d:a3:8a:
b8:13:f8:0f:17:d8:01:30:64:f7:df:85:8d:54:5b:
6d:a7:0f:a8:2f:eb:8a:5c:fe:c4:3d:f7:4c:88:3d:
ac:47:c8:e0:2f:e3:b8:ba:b9:66:c5:a9:e3:e9:7e:
62:91:b7:c0:74:61:6e:4d:79:d2:9e:7d:ac:fe:5d:
fc:87:28:dc:a7:3e:7c:88:de:fd:0d:28:29:43:ac:
72:d2:68:c2:6f:d7:b7:05:f3:19:38:df:30:0c:50:
86:17:a3:3d:4f:c1:a5:90:1c:d6:fc:a0:8a:7c:3a:
44:83:4f:17:18:2f:12:85:1b:04:4a:ba:d4:91:83:
cd:94:a5:47:42:4a:b6:73:4e:35:5d:be:89:36:44:
a5:ce:4a:a7:38:ce:04:99:41:d6:36:7e:e4:42:52:
57:82:5f:cb:28:b1:99:95:fd:89:99:30:90:b9:5e:
e3:93:f2:17:7b:6a:53:69:66:c4:22:8f:e0:c7:35:
06:36:21:a0:8a:55:8d:55:55:4a:dd:e4:f7:46:d6:
ba:e0:cf:1d:58:9b:25:c0:db:7c:a2:83:91:06:91:
c9:a1:5c:13:b2:d0:5e:e3:86:bc:18:aa:8f:a1:6e:
6e:85:8c:16:54:fa:53:72:c0:81:61:47:bd:2a:16:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:6A:11:A4:A6:03:96:FD:42:88:A0:D5:2D:0F:05:94:A2:D4:31
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.1.0/24
13.141.5.0/24
13.141.7.0/24
13.141.9.0/24
13.141.11.0/24
13.141.13.0/24
13.141.15.0/24
13.141.22.0/23
13.141.26.0/24
13.141.32.0/24
13.141.35.0-13.141.39.255
13.141.52.0/22
13.141.62.0/24
13.141.64.0/24
13.141.69.0/24
13.141.76.0/23
13.141.121.0/24
13.141.123.0/24
13.141.127.0/24
169.40.60.0/22
169.40.72.0/22
169.40.135.0/24
169.40.160.0/22
169.40.192.0/22
169.40.208.0/22
169.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:ec:ce:bb:09:73:1f:19:de:e1:03:e7:c9:73:5d:c5:11:72:
16:63:ba:b0:69:5b:ba:09:f1:83:47:37:66:2e:9b:bb:62:6b:
0e:9a:d5:e5:a0:22:4e:b1:fd:3b:80:35:9f:1e:45:f2:7d:bf:
31:60:94:fc:27:1e:3d:33:5d:aa:f9:f9:12:9d:22:5d:80:8a:
f0:74:0a:c4:1b:5f:ef:98:2d:83:9c:bc:95:a5:65:d1:5d:b8:
2a:84:b9:1b:e2:3e:35:f8:45:4b:df:ff:7c:9c:0c:ee:cf:9c:
56:64:ab:14:39:46:0a:5b:cc:40:4a:62:76:ad:57:65:f5:df:
da:97:14:af:24:f7:fe:9f:69:c5:fd:c4:fb:3f:06:dc:8c:3f:
0f:bb:97:1a:74:f2:f0:4c:5b:6c:d6:a4:ad:ee:83:87:19:fc:
58:89:91:f3:d7:e1:76:16:51:8a:31:25:f5:9d:c4:75:87:d3:
b3:25:63:11:b1:1b:07:c2:a6:d3:03:8f:e0:db:7e:69:d7:3d:
d5:cf:f1:3d:10:2a:f3:16:fd:c9:c7:f4:79:14:cc:1c:26:b3:
e4:92:02:cb:96:16:8b:fe:50:d7:84:d7:32:17:3d:00:47:ee:
a7:b3:27:ff:61:4b:91:de:36:b8:06:f8:1f:87:6f:3c:05:e5:
11:c6:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:22:37 2026 by rpki-client