
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS153568.roa
File: AS153568.roa (raw, json)
Hash identifier: TyDydM+f8vbQqylkhEHTAj0x/btmvIDTarFpQhqMFLU=
Subject key identifier: 25:14:18:18:6A:AD:78:8B:7E:A7:56:71:D1:76:25:39:DE:0C:8E:24
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 6C13676F2D004CDCDDDA43099B174C4C3C587F05
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS153568.roa
Signing time: Fri 22 May 2026 02:06:20 +0000
ROA not before: Fri 22 May 2026 02:01:20 +0000
ROA not after: Fri 21 May 2027 02:06:20 +0000
asID: 153568
IP address blocks: 169.40.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:13:67:6f:2d:00:4c:dc:dd:da:43:09:9b:17:4c:4c:3c:58:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: May 22 02:01:20 2026 GMT
Not After : May 21 02:06:20 2027 GMT
Subject: CN=251418186AAD788B7EA75671D1762539DE0C8E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:a6:be:0c:6b:74:7f:39:c6:06:d6:16:34:
56:63:fa:8c:2c:a3:bd:8d:77:4a:a0:eb:6d:aa:ec:
39:46:2c:93:93:b9:8a:c5:f7:b4:9f:2a:b6:5a:9f:
6a:4b:49:77:b2:25:01:82:47:12:48:1a:60:1c:e3:
df:b3:f2:b6:77:a6:a4:0f:5d:b0:0e:98:0f:1f:9d:
c7:ad:af:12:67:94:28:24:67:80:c7:cc:03:1b:1d:
f7:de:80:02:cc:98:07:25:c3:7b:e2:42:ce:3d:46:
ed:fb:e3:02:ea:e7:f0:aa:5d:b8:a2:e7:0d:ab:d2:
c0:2f:d1:e8:bc:54:31:7a:5a:5a:c8:42:1f:d9:80:
ef:d1:55:4c:54:b3:e8:b9:d2:21:05:56:61:81:d2:
51:70:ce:0d:3f:e5:7e:df:8f:ad:b3:6e:5c:bb:4e:
35:0e:89:22:d4:79:10:f7:31:8a:07:8a:00:42:da:
18:32:ba:b0:3e:1b:70:54:e3:dd:d5:48:bc:6c:10:
a8:a9:46:d8:ee:f3:a2:74:d2:35:cd:aa:42:e6:2f:
00:67:5d:57:a7:7b:99:64:52:45:f9:98:5e:82:99:
95:47:f0:ac:d9:67:89:1b:2f:4c:45:fe:b4:f4:88:
c6:c8:1d:6b:46:1b:87:90:50:45:20:76:b4:20:32:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:18:18:6A:AD:78:8B:7E:A7:56:71:D1:76:25:39:DE:0C:8E:24
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS153568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.43.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a9:48:bb:a3:af:3d:13:b2:05:27:92:81:2b:9c:05:ef:fa:
8a:f1:19:8d:4d:ad:f1:cc:34:84:03:19:b8:43:40:a5:20:61:
31:76:e5:ba:cc:3e:d1:26:64:d8:c6:fe:00:e6:30:aa:fc:78:
f5:7b:4a:6e:65:1b:4a:fb:a2:a5:5d:ec:c5:d0:c5:0f:76:e0:
40:3f:42:0e:34:81:c5:ce:29:6a:7d:13:c8:7c:49:a9:4e:6f:
7a:c0:bf:c4:eb:d6:da:29:a4:a9:2a:2b:0d:33:8c:cd:01:6a:
85:2e:53:e9:88:f5:d7:a2:dc:c7:c6:6b:93:e6:ba:5d:b3:44:
e7:5c:37:d5:6d:5d:0c:c3:ab:b3:45:20:6e:4d:07:66:02:17:
e4:3c:bb:52:ff:74:fd:89:ba:47:6f:3d:39:48:a9:15:b0:e6:
d3:d0:57:29:1a:cf:8f:7a:d3:a5:d3:b8:97:6e:63:ea:44:60:
b8:c7:d7:c1:2f:b7:87:94:f6:1c:50:d5:ff:63:28:67:a5:6c:
9f:61:d5:02:74:5d:ed:33:32:b3:64:65:a9:0a:46:b7:06:ad:
52:b8:e7:95:e5:de:fb:d6:b6:3b:64:0a:b2:4e:4c:b7:c0:61:
af:7e:57:e7:4d:a8:5d:bd:10:26:3e:e8:25:1c:bd:ce:41:c4:
a7:f9:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 08:34:15 2026 by rpki-client