
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: wyAIVTDEukdWWAtVeaFIA18fFIJGdOAkLJQB5m4nUOk=
Subject key identifier: 18:CD:12:35:A5:D5:D5:65:48:CB:55:13:15:29:F3:8A:DE:18:6D:A1
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 7951581B625D99C68054FABFA816829CD01957C4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
Signing time: Mon 21 Sep 2026 11:01:19 +0000
ROA not before: Mon 21 Sep 2026 10:56:19 +0000
ROA not after: Mon 20 Sep 2027 11:01:19 +0000
asID: 9009
IP address blocks: 169.40.128.0/24 maxlen: 24
169.40.130.0/23 maxlen: 24
169.40.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:51:58:1b:62:5d:99:c6:80:54:fa:bf:a8:16:82:9c:d0:19:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Sep 21 10:56:19 2026 GMT
Not After : Sep 20 11:01:19 2027 GMT
Subject: CN=18CD1235A5D5D56548CB55131529F38ADE186DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:3a:df:eb:9d:32:b2:e9:84:27:0f:e2:28:
0c:61:39:6b:0b:cd:21:da:bd:7d:cf:a5:64:16:01:
d6:a8:cb:a0:59:4a:46:a2:eb:00:53:94:0d:8b:6c:
e6:b8:ea:5c:c0:d1:e1:58:41:2a:86:ca:6a:07:10:
75:93:e6:ff:d6:a5:6b:1a:7d:dd:57:1c:91:71:a8:
d8:39:83:5f:7b:eb:db:fd:36:3d:31:1b:f5:c8:4e:
43:a4:84:d4:33:66:66:d2:be:29:d2:11:6f:c9:6a:
31:47:c8:6f:d9:dd:7e:a8:8b:e1:2a:2d:50:dd:36:
4c:a2:e7:03:0a:06:e5:61:cb:5f:cf:0d:62:44:f7:
be:4c:d1:8c:ba:27:f2:a8:06:7d:45:6e:46:b4:c4:
35:5b:6f:8e:55:5e:5c:0e:20:a7:60:89:8d:54:32:
69:b3:da:77:8d:90:2b:56:3c:a9:d0:25:ae:13:55:
49:39:b6:1d:d8:ac:17:8d:32:c5:92:43:b4:6e:8d:
b2:af:5e:1b:e0:e6:f9:c1:2b:ee:f3:e6:e2:51:21:
f2:35:ce:9f:a0:28:a2:04:9c:37:aa:96:dd:ab:cd:
00:62:24:bd:c6:0e:5c:48:67:93:d0:31:a1:1c:e0:
3a:d8:50:52:40:45:8b:84:57:7a:84:b9:52:7f:ed:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:12:35:A5:D5:D5:65:48:CB:55:13:15:29:F3:8A:DE:18:6D:A1
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.128.0/24
169.40.130.0/23
169.40.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7b:c1:34:a9:0f:d5:12:af:30:a6:ba:54:61:13:bd:f9:aa:
71:19:15:7e:cc:35:be:69:be:36:4b:02:9e:59:32:98:bc:fe:
48:4e:26:ea:dc:1e:bb:d1:9e:9b:5b:61:6d:98:76:d1:42:91:
ad:c6:f2:2d:b1:55:f4:64:35:17:48:54:b2:4a:bb:60:a0:fb:
c0:09:3c:65:e8:af:6f:88:de:56:58:76:7e:a7:67:17:19:fa:
5a:d1:23:37:74:9d:14:77:5c:0f:23:5d:88:aa:6d:0b:12:be:
b4:fc:dd:bd:05:99:42:e0:88:6a:9f:83:9a:a2:df:45:bd:54:
8a:8b:4e:a0:89:46:ed:cf:0c:63:f2:ef:1e:38:f6:db:8f:fd:
6b:e9:18:88:8c:65:88:2b:47:9a:be:aa:51:b6:09:01:ce:a2:
7f:41:c0:46:7d:2b:82:57:48:43:48:71:8f:84:f7:61:77:46:
f3:31:26:c4:33:c8:e2:40:70:db:e9:b5:23:87:bc:19:b1:11:
02:a9:ec:d3:f8:4f:f2:53:cc:16:1b:d0:f5:33:23:4f:d1:55:
44:19:08:cc:88:c9:31:b0:45:51:0c:ee:ef:76:92:c9:47:23:
a7:88:37:6d:d4:11:71:6d:7d:18:93:ec:01:5a:92:17:90:59:
fa:1b:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:20:34 2026 by rpki-client