Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa
File:                     AS396073.roa (raw, json)
Hash identifier:          dglBr+DgPxkMl/hepx4FOH3gf/UOxHhS47Xn6jtKIkM=
Subject key identifier:   F7:BF:6D:71:8B:71:37:76:35:B5:E9:98:3B:25:50:7A:C3:17:6D:C2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       0ACE647C231FABA1D0D5229FB39087654F24AFDC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa
Signing time:             Fri 16 Oct 2026 16:49:37 +0000
ROA not before:           Fri 16 Oct 2026 16:44:37 +0000
ROA not after:            Fri 15 Oct 2027 16:49:37 +0000
asID:                     396073
IP address blocks:        86.38.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 01:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ce:64:7c:23:1f:ab:a1:d0:d5:22:9f:b3:90:87:65:4f:24:af:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 16 16:44:37 2026 GMT
            Not After : Oct 15 16:49:37 2027 GMT
        Subject: CN=F7BF6D718B71377635B5E9983B25507AC3176DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:68:25:74:55:70:46:de:d0:96:c2:f6:cc:
                    db:63:37:cf:63:ae:c9:2f:c9:47:85:02:ed:57:75:
                    5b:a9:0d:83:ab:d6:ba:06:6b:94:e0:72:32:b1:c4:
                    a9:6d:ff:44:ba:04:db:9b:47:67:7d:e9:62:f8:6a:
                    ef:a0:8a:3a:56:99:8c:91:f0:6c:68:fc:c0:bf:16:
                    02:07:11:53:13:0d:71:d5:1d:43:a8:32:0e:bf:ce:
                    c3:a9:e9:8b:37:2a:9d:aa:46:e7:78:96:71:dd:7e:
                    2e:3e:a2:d6:c4:32:92:5f:1b:63:d5:63:38:57:00:
                    20:9d:6a:c7:b3:c9:c4:10:b9:0d:12:59:be:2f:cb:
                    8f:c9:77:58:0b:43:9b:aa:a5:2c:56:a3:2b:97:14:
                    b7:4b:33:0b:3e:68:40:f5:66:82:55:99:62:c6:8d:
                    9b:9a:87:84:f8:ea:b5:bf:c1:67:f5:93:3a:47:e0:
                    ac:49:f4:cc:89:66:3d:cf:20:23:8f:1d:ef:80:ce:
                    05:0e:91:b5:a7:8b:27:1d:ae:9b:c5:1f:42:a1:ee:
                    e8:a9:9d:26:1a:ce:fe:f4:2b:9f:84:11:5b:32:bc:
                    8f:a0:b6:c1:61:79:a6:8b:3b:de:59:7d:6b:c1:b2:
                    2e:9d:fd:b7:8a:32:32:24:37:0c:d7:70:98:e3:d2:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BF:6D:71:8B:71:37:76:35:B5:E9:98:3B:25:50:7A:C3:17:6D:C2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:79:a7:5f:26:ce:09:05:9d:cc:cc:9b:2c:d5:a7:74:a4:
         49:a6:be:f3:ec:79:fe:80:7f:58:1d:c8:c2:c1:f3:cb:18:c4:
         98:c8:a0:6e:cc:93:38:8f:41:9a:5f:c6:a1:cc:6c:b5:d7:b6:
         eb:da:71:bb:c0:75:71:0c:97:1c:5c:f9:3c:59:30:57:7f:d2:
         ad:ab:27:32:e4:42:51:7e:1d:3d:3b:28:2a:e3:cf:11:12:c6:
         c1:b6:fc:7f:66:e5:d7:41:6b:81:d7:62:5d:d7:a9:a7:50:d7:
         7e:cd:73:41:92:af:b4:61:1e:cc:5d:c2:47:c4:92:45:74:30:
         85:e8:57:67:8e:10:f6:8d:db:90:24:00:96:cd:9f:05:90:e3:
         65:be:46:29:00:67:b8:6e:4d:f8:ad:0d:45:6e:81:e5:c9:30:
         ea:3c:8d:0c:38:29:6e:24:b5:2d:b1:44:4f:02:76:17:30:64:
         6c:14:05:c2:12:e9:11:45:95:f3:b0:12:5d:f1:25:fe:d5:e4:
         3e:65:0e:59:bb:db:e2:52:b9:eb:16:f8:21:fa:8b:19:14:7c:
         2b:fe:8e:e7:8d:d1:6e:e8:6c:e7:b4:9d:23:41:fa:f0:c9:67:
         74:c2:f7:c3:d6:dd:86:57:42:d3:68:a4:32:35:24:94:35:0a:
         70:c4:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:32:20 2026 by rpki-client