
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: zU0NXAbv6MMXgPmZLwy78ZncVG2Rlu2jTfDRq0LAD8s=
Subject key identifier: 2B:83:A9:83:B9:44:92:51:20:72:23:25:98:8F:4D:74:86:63:DC:18
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 46E234F7B8161FB1813D28AD17EF54673347EEF5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
Signing time: Thu 12 Mar 2026 15:11:01 +0000
ROA not before: Thu 12 Mar 2026 15:06:01 +0000
ROA not after: Thu 11 Mar 2027 15:11:01 +0000
asID: 9009
IP address blocks: 169.40.130.0/23 maxlen: 24
169.40.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e2:34:f7:b8:16:1f:b1:81:3d:28:ad:17:ef:54:67:33:47:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Mar 12 15:06:01 2026 GMT
Not After : Mar 11 15:11:01 2027 GMT
Subject: CN=2B83A983B944925120722325988F4D748663DC18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:4a:70:b4:9f:90:13:26:83:62:aa:79:71:
c5:2e:c7:84:a4:3f:69:51:22:e2:13:f1:04:5b:33:
97:8e:4f:3b:56:cd:43:eb:65:cd:f4:aa:aa:f5:0c:
62:9c:81:8b:2c:2a:a8:7a:76:c7:5f:4b:c0:03:8a:
82:2d:3b:07:7d:e4:9c:4f:4a:dd:8a:25:a5:c2:93:
84:dc:fd:34:7f:34:d9:bc:e6:5e:22:30:03:95:e1:
18:88:c9:0a:6e:a1:42:66:e8:d4:e6:c1:c9:f6:3c:
51:05:ab:c0:20:a0:84:03:1b:03:13:9b:97:70:98:
44:37:f7:03:9e:ae:3b:f6:33:3c:bc:26:3e:8c:ae:
98:99:5c:98:4c:7f:87:b0:a4:ec:1f:88:63:f9:e7:
b7:7b:40:8e:10:1c:12:43:a6:2f:5d:ad:e2:20:21:
71:03:8f:46:b3:e6:fc:88:d5:96:57:3e:7f:d3:c5:
56:29:b7:b0:43:d5:47:9f:02:fe:38:39:78:9f:df:
00:ac:43:38:2d:33:57:37:cb:d5:ba:a1:6c:d8:f4:
1f:47:c9:93:06:16:71:39:ab:8f:f7:cc:6d:e0:54:
23:19:f7:be:46:64:87:ff:4b:61:40:e3:52:a9:cf:
47:9e:16:3b:10:1a:85:98:bf:93:2e:01:24:60:d4:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:83:A9:83:B9:44:92:51:20:72:23:25:98:8F:4D:74:86:63:DC:18
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.130.0/23
169.40.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d4:a5:88:af:97:f4:1a:61:99:48:e7:70:31:2b:0c:07:4b:
7b:a8:f3:ac:94:1a:99:64:a2:0a:77:4a:32:9e:a9:5a:ab:bc:
ca:49:13:4e:24:82:77:b0:e8:1f:6b:cb:63:e3:f0:45:2c:f2:
67:47:24:7c:17:31:39:a7:78:2d:a2:3a:17:a3:17:1d:47:b9:
15:99:ba:13:e2:f5:96:61:c5:99:a8:a9:4f:83:61:d9:3d:9e:
6a:06:dc:c2:45:00:59:d1:9a:fb:68:c4:b2:ce:f1:e5:3b:e5:
fa:83:30:cf:a4:ac:70:18:ed:d5:f9:d0:8e:c5:7e:c7:f6:5f:
07:00:72:bb:3d:dc:7f:73:a7:ff:b0:ba:d8:a6:70:ca:be:37:
66:10:e9:15:f8:dd:e1:68:37:c8:0f:94:8b:a6:a2:33:c8:04:
55:94:ef:39:04:23:42:0b:73:96:11:64:9c:22:e3:dd:1b:4f:
6f:c9:07:86:ef:08:bf:12:b4:68:33:c5:20:e3:64:42:0f:f9:
5f:fa:25:3e:e4:5a:3c:6a:ad:de:bc:5c:a6:0d:9c:fb:56:32:
d5:86:84:ea:e9:80:60:32:ac:36:cf:6f:54:15:10:62:aa:2f:
82:6c:44:71:f0:45:f7:c6:a5:17:5c:63:94:93:33:08:30:c6:
7e:3a:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:30:02 2026 by rpki-client