$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: KLzQhg0OOF4zVDRzO7+rbVXtNZpg+DajEsiaaPYAS8Q= Subject key identifier: 34:19:3D:E4:3A:97:39:D1:1F:B9:F9:BA:EA:C5:D0:3A:B7:1F:BA:CE Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 17F4703F355331CED32A3D8490EF4233EB3B0599 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa Signing time: Tue 22 Sep 2026 13:25:37 +0000 ROA not before: Tue 22 Sep 2026 13:20:37 +0000 ROA not after: Tue 21 Sep 2027 13:25:37 +0000 asID: 9304 IP address blocks: 13.141.20.0/22 maxlen: 24 13.141.58.0/23 maxlen: 24 169.40.34.0/23 maxlen: 24 169.40.38.0/23 maxlen: 24 169.40.48.0/23 maxlen: 24 169.40.58.0/23 maxlen: 24 169.40.96.0/24 maxlen: 24 169.40.102.0/23 maxlen: 23 169.40.107.0/24 maxlen: 24 169.40.112.0/24 maxlen: 24 169.40.122.0/24 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 21:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f4:70:3f:35:53:31:ce:d3:2a:3d:84:90:ef:42:33:eb:3b:05:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 22 13:20:37 2026 GMT Not After : Sep 21 13:25:37 2027 GMT Subject: CN=34193DE43A9739D11FB9F9BAEAC5D03AB71FBACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:0e:df:e6:29:5d:88:c3:9e:bd:d3:50:58: b7:f3:da:0a:af:1b:ec:d1:71:6c:2a:e6:d5:2f:5a: 2d:4a:20:8a:9b:9a:b4:22:af:55:78:fe:8e:58:04: 6f:07:9e:f5:7b:8d:02:9c:dc:1b:f0:f5:bc:53:18: 2b:3b:5d:f8:df:bb:25:8b:09:81:59:64:04:52:e7: e5:be:e9:47:71:8c:b9:85:30:55:c2:c6:ae:cb:e0: 78:bc:7f:d5:4c:36:88:74:11:5b:fc:0a:14:f3:d3: 59:01:2d:f1:da:37:d4:7a:dd:c2:3e:20:18:62:32: 60:ba:c0:0d:78:df:87:67:bf:18:49:62:c3:d8:b8: 69:7f:67:17:20:ad:5d:01:32:5c:82:e2:98:b3:ae: a7:2c:41:0c:9a:4e:67:cd:e5:0b:c9:60:2f:2c:1e: 83:e8:30:d3:35:66:1a:f9:77:da:55:30:43:cc:18: d9:23:9e:dc:88:88:79:c2:31:88:bd:6c:61:65:9c: a0:02:a3:48:7c:4d:af:f7:48:a0:c3:6e:3a:ab:77: 44:37:aa:0f:eb:d9:ab:74:61:60:56:51:8f:9e:41: 1d:f7:93:ec:b5:12:12:e6:1e:e6:7b:72:1a:95:6f: 70:06:be:3f:3a:71:f1:a8:de:08:5e:fd:f9:aa:e5: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:19:3D:E4:3A:97:39:D1:1F:B9:F9:BA:EA:C5:D0:3A:B7:1F:BA:CE X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.20.0/22 13.141.58.0/23 169.40.34.0/23 169.40.38.0/23 169.40.48.0/23 169.40.58.0/23 169.40.96.0/24 169.40.102.0/23 169.40.107.0/24 169.40.112.0/24 169.40.122.0/24 169.40.153.0/24 169.40.208.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:42:31:e5:29:8f:63:97:f1:ee:cb:a3:cb:8b:34:cf:69:c5: b4:d1:f0:a3:cd:ce:41:ff:d1:dc:c5:b1:31:38:c8:ae:71:de: d7:80:41:41:fc:e3:3e:4d:f1:fa:89:31:8d:fb:ed:7f:27:06: 68:a6:c4:c8:e1:17:b7:d4:fc:0c:22:91:f4:f7:12:0e:93:1d: 24:be:67:79:00:c3:c5:ae:e3:bb:b6:dc:f1:d6:69:76:47:54: e5:e1:6a:bf:78:5b:4f:ce:33:42:b4:54:15:fb:08:b4:e6:e2: 6a:1f:d3:fe:c9:50:4a:69:bd:46:5b:a9:7a:09:f6:e4:d9:1d: d2:d8:cf:18:b4:23:19:d8:5d:37:e8:52:a4:03:2e:5d:02:99: 23:b4:0e:a6:ec:9d:b6:60:fe:9b:7b:c3:17:95:9a:b8:f7:80: 62:af:74:cd:9f:bf:bf:f9:79:cc:62:ca:84:96:fd:bf:b5:29: 6f:6f:bc:55:9a:aa:0a:c6:33:c4:87:e3:41:60:3a:27:ef:6a: 55:f4:96:c1:a9:1b:01:d0:68:1b:30:e6:7a:1a:32:39:53:22: 36:25:81:ce:93:bf:94:46:89:aa:13:f2:19:fa:f4:ff:b4:2a: 00:be:e5:f8:8e:08:49:2f:78:d0:c9:b1:ed:c8:6b:67:df:3e: 9e:09:2b:f1 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUF/RwPzVTMc7TKj2EkO9CM+s7BZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MjIxMzIwMzdaFw0yNzA5MjExMzI1MzdaMDMxMTAvBgNV BAMTKDM0MTkzREU0M0E5NzM5RDExRkI5RjlCQUVBQzVEMDNBQjcxRkJBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZCg7f5ildiMOevdNQWLfz2gqv G+zRcWwq5tUvWi1KIIqbmrQir1V4/o5YBG8HnvV7jQKc3Bvw9bxTGCs7XfjfuyWL CYFZZARS5+W+6UdxjLmFMFXCxq7L4Hi8f9VMNoh0EVv8ChTz01kBLfHaN9R63cI+ IBhiMmC6wA1434dnvxhJYsPYuGl/ZxcgrV0BMlyC4pizrqcsQQyaTmfN5QvJYC8s HoPoMNM1Zhr5d9pVMEPMGNkjntyIiHnCMYi9bGFlnKACo0h8Ta/3SKDDbjqrd0Q3 qg/r2at0YWBWUY+eQR33k+y1EhLmHuZ7chqVb3AGvj86cfGo3ghe/fmq5VbhAgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQUNBk95DqXOdEfufm66sXQOrcfus4wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4DBAINjRQDBAENjToDBAGpKCID BAGpKCYDBAGpKDADBAGpKDoDBACpKGADBAGpKGYDBACpKGsDBACpKHADBACpKHoD BACpKJkDBAKpKNAwDQYJKoZIhvcNAQELBQADggEBAFtCMeUpj2OX8e7Lo8uLNM9p xbTR8KPNzkH/0dzFsTE4yK5x3teAQUH84z5N8fqJMY377X8nBmimxMjhF7fU/Awi kfT3Eg6THSS+Z3kAw8Wu47u23PHWaXZHVOXhar94W0/OM0K0VBX7CLTm4mof0/7J UEppvUZbqXoJ9uTZHdLYzxi0IxnYXTfoUqQDLl0CmSO0DqbsnbZg/pt7wxeVmrj3 gGKvdM2fv7/5ecxiyoSW/b+1KW9vvFWaqgrGM8SH40FgOifvalX0lsGpGwHQaBsw 5noaMjlTIjYlgc6Tv5RGiaoT8hn69P+0KgC+5fiOCEkveNDJse3Ia2ffPp4JK/E= -----END CERTIFICATE-----Generated at Thu Sep 24 08:30:45 2026 by rpki-client