$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: OmCJ/3DG6CYjCo5j35oWHKgWrAGXctGA2fQ9WSZns78= Subject key identifier: 24:BA:E5:0D:4E:EC:61:6C:18:A4:92:D3:48:BB:E9:C2:E5:DA:3A:B1 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 5740DF9FCEF9BFA8004552E22120CC2CAB2073A4 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa Signing time: Fri 06 Nov 2026 18:26:43 +0000 ROA not before: Fri 06 Nov 2026 18:21:43 +0000 ROA not after: Fri 05 Nov 2027 18:26:43 +0000 asID: 9009 IP address blocks: 169.40.130.0/23 maxlen: 24 169.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 09:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:40:df:9f:ce:f9:bf:a8:00:45:52:e2:21:20:cc:2c:ab:20:73:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 6 18:21:43 2026 GMT Not After : Nov 5 18:26:43 2027 GMT Subject: CN=24BAE50D4EEC616C18A492D348BBE9C2E5DA3AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:75:b0:83:e4:b9:ff:57:f3:5f:f9:78:bd: 11:ae:dc:29:74:69:8b:2e:97:8b:da:f3:a4:32:32: e5:a1:63:ce:00:a5:5e:63:03:6c:e3:a6:4f:39:ef: 0d:7f:2e:22:a1:a0:db:51:26:b5:3f:b3:cd:87:aa: 33:b9:3e:f4:14:f9:ad:f0:66:0f:70:81:42:fd:b3: 95:87:e6:96:f2:21:46:f2:75:bc:12:f5:86:3a:c2: 88:8a:ca:63:77:c7:da:21:4c:00:0c:76:bf:2d:cb: 32:3c:e9:b6:02:4c:78:29:97:5d:6b:98:c7:e9:db: 0d:8d:b6:5a:65:2a:cb:c5:ef:a6:f7:59:83:07:f2: 2c:6a:95:0f:2c:20:87:94:5a:ca:c3:00:b9:d7:c5: 4c:f6:2a:41:09:78:e7:5b:fe:03:19:97:b9:f3:4d: cc:fa:13:1a:4c:a8:fd:3d:14:13:82:62:98:ca:68: 9d:8a:fd:de:63:ce:54:c4:43:d5:4b:80:ec:b4:be: 01:7c:33:e2:0a:a7:b0:70:aa:52:52:2d:f8:53:aa: 43:de:b6:ff:03:a7:46:57:77:b9:61:44:25:d1:48: 2c:99:7c:85:8a:3d:7b:28:cb:f1:22:1c:f7:39:02: 28:84:ae:27:86:c7:0e:1e:8a:b2:d8:da:da:e5:86: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BA:E5:0D:4E:EC:61:6C:18:A4:92:D3:48:BB:E9:C2:E5:DA:3A:B1 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.130.0/23 169.40.154.0/24 Signature Algorithm: sha256WithRSAEncryption 95:9a:2a:fd:86:0f:ed:ae:9e:11:ab:39:73:a0:37:81:28:81: f8:70:87:d3:51:59:af:b0:a4:2c:d7:91:2b:8e:ab:89:ee:12: 58:58:53:92:2a:11:7e:64:f0:66:c8:55:9f:39:48:9f:42:68: d2:4b:fc:d5:cc:a6:3f:d7:a4:b0:26:66:3f:de:ca:af:39:a9: 84:ce:66:f9:ba:72:64:0c:08:78:6a:08:9a:1d:09:4f:75:c2: 2b:1a:bb:e2:24:e6:07:c9:8f:7a:d2:6f:ed:01:94:83:c2:ea: 4b:fb:7e:be:ee:ce:de:4f:a0:34:57:36:ab:d5:a5:1e:89:98: 35:ca:23:12:0e:22:20:d1:1f:73:19:46:fb:5d:62:6a:24:a9: 3b:2e:1b:ea:ea:ad:2c:3f:72:87:df:1a:db:2a:ec:0c:eb:d0: 28:8f:fd:4b:98:c3:d2:b9:b5:04:a3:01:9b:61:56:1d:2d:dc: 88:71:0c:50:20:a2:24:f3:e7:5c:42:e3:25:57:df:1e:9b:7e: ce:4e:5e:7b:85:b5:3a:75:27:8a:b9:d6:16:2e:82:ca:20:5c: 5d:af:a5:8d:93:10:55:22:33:67:9a:fb:4f:28:78:01:c0:60: 66:08:14:10:ad:3b:ad:d9:1b:aa:6f:fc:8c:43:91:a0:99:9b: ee:c6:79:b5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUV0Dfn875v6gARVLiISDMLKsgc6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjExMDYxODIxNDNaFw0yNzExMDUxODI2NDNaMDMxMTAvBgNV BAMTKDI0QkFFNTBENEVFQzYxNkMxOEE0OTJEMzQ4QkJFOUMyRTVEQTNBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkq3Wwg+S5/1fzX/l4vRGu3Cl0 aYsul4va86QyMuWhY84ApV5jA2zjpk857w1/LiKhoNtRJrU/s82HqjO5PvQU+a3w Zg9wgUL9s5WH5pbyIUbydbwS9YY6woiKymN3x9ohTAAMdr8tyzI86bYCTHgpl11r mMfp2w2NtlplKsvF76b3WYMH8ixqlQ8sIIeUWsrDALnXxUz2KkEJeOdb/gMZl7nz Tcz6ExpMqP09FBOCYpjKaJ2K/d5jzlTEQ9VLgOy0vgF8M+IKp7BwqlJSLfhTqkPe tv8Dp0ZXd7lhRCXRSCyZfIWKPXsoy/EiHPc5AiiErieGxw4eirLY2trlhhRvAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUJLrlDU7sYWwYpJLTSLvpwuXaOrEwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGpKIIDBACpKJowDQYJKoZI hvcNAQELBQADggEBAJWaKv2GD+2unhGrOXOgN4Eogfhwh9NRWa+wpCzXkSuOq4nu ElhYU5IqEX5k8GbIVZ85SJ9CaNJL/NXMpj/XpLAmZj/eyq85qYTOZvm6cmQMCHhq CJodCU91wisau+Ik5gfJj3rSb+0BlIPC6kv7fr7uzt5PoDRXNqvVpR6JmDXKIxIO IiDRH3MZRvtdYmokqTsuG+rqrSw/coffGtsq7Azr0CiP/UuYw9K5tQSjAZthVh0t 3IhxDFAgoiTz51xC4yVX3x6bfs5OXnuFtTp1J4q51hYugsogXF2vpY2TEFUiM2ea +08oeAHAYGYIFBCtO63ZG6pv/IxDkaCZm+7GebU= -----END CERTIFICATE-----Generated at Wed Nov 11 19:59:17 2026 by rpki-client