$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16125.roa File: AS16125.roa (raw, json) Hash identifier: PtDjKyz3s9P4hauNVHeBIbBe03/tlzfI1pXzdTRuEzI= Subject key identifier: 2D:F6:14:A3:5B:C8:D8:2D:2B:0D:A0:CB:47:80:E0:B6:F8:C7:89:F0 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 625A9B709BFE3D2073F4B5C88AFB09048D2C3D6D Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16125.roa Signing time: Mon 05 Oct 2026 14:16:34 +0000 ROA not before: Mon 05 Oct 2026 14:11:34 +0000 ROA not after: Mon 04 Oct 2027 14:16:34 +0000 asID: 16125 IP address blocks: 169.40.44.0/24 maxlen: 24 169.40.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 07:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5a:9b:70:9b:fe:3d:20:73:f4:b5:c8:8a:fb:09:04:8d:2c:3d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 5 14:11:34 2026 GMT Not After : Oct 4 14:16:34 2027 GMT Subject: CN=2DF614A35BC8D82D2B0DA0CB4780E0B6F8C789F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:ed:07:c8:0a:86:8d:7e:a8:28:22:6d:97: ed:7b:36:6e:f6:f3:d4:b3:75:20:fa:22:d5:6d:87: 38:42:5c:66:55:f2:52:78:55:88:6b:5e:b7:52:61: fd:c1:3c:c0:31:ef:90:fc:d9:d1:73:e8:3b:ec:fc: 30:a2:c5:03:1c:71:dd:8d:05:ff:f9:36:4e:15:1a: f1:f4:97:f1:26:31:37:ab:51:01:53:90:de:ec:4b: 13:3c:9a:21:64:ab:52:98:dc:eb:85:a5:88:0a:b2: 5b:43:3d:d2:e2:73:b9:ff:8c:00:bf:4f:88:3d:35: f7:92:44:e8:69:2e:08:84:1f:d0:89:ea:67:d8:3a: 0a:69:b9:34:8c:98:72:76:bd:2a:5a:42:57:68:a4: a3:77:9b:48:c7:75:0d:30:ca:82:46:4e:81:d8:f2: 91:12:29:c8:d6:20:0f:75:3c:de:38:e5:ec:50:27: d1:30:17:d8:ac:7a:1e:d6:2c:06:6a:46:84:09:44: 10:1c:28:f2:69:58:ae:11:c0:e2:f6:77:59:89:01: 0c:39:5f:12:87:a5:96:24:5d:43:4e:47:7d:a4:fb: 35:ec:c1:33:4e:02:60:4c:c1:4b:0f:ba:25:e0:fb: 45:33:c3:26:f4:63:02:91:91:4f:da:61:cf:a4:bc: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F6:14:A3:5B:C8:D8:2D:2B:0D:A0:CB:47:80:E0:B6:F8:C7:89:F0 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16125.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.44.0/24 169.40.52.0/24 Signature Algorithm: sha256WithRSAEncryption 16:55:cc:f6:9b:86:1b:ee:8c:6e:82:cf:00:03:c1:76:da:40: 17:79:0a:87:c6:5f:72:d7:97:05:ce:15:9a:9d:ae:98:78:5f: 77:95:fa:30:69:f3:2f:90:25:bb:69:aa:fd:94:f5:98:00:87: fe:35:7a:be:02:3a:3b:e3:53:e8:85:e9:15:19:b3:b6:9b:f3: d8:88:d8:a0:42:88:c1:a3:5d:1f:1f:c3:67:82:a4:2c:84:b1: 4c:6c:57:8c:48:33:46:99:16:e0:5d:08:e9:5b:a9:c5:43:3a: 94:48:81:53:2f:9d:9c:8f:c3:bb:70:48:31:a2:06:4b:23:51: 9c:39:7c:00:6a:bc:bd:56:10:a7:e7:2d:42:95:78:d4:99:01: 9f:31:58:3d:00:f0:6a:93:1d:d7:0c:f7:48:00:78:f1:47:1d: 15:2a:28:5c:43:6c:2f:e2:12:25:cc:95:d5:13:bf:b0:df:e3: 66:8e:f9:07:8b:40:f1:90:ee:2f:b8:6e:c4:b4:2b:de:d3:26: bd:db:a8:51:99:c7:f7:0b:c0:cd:b1:1c:d7:ba:41:11:07:e2: 91:b0:d6:8f:63:45:d0:1b:13:01:14:8b:be:57:bc:ad:60:3d: ce:83:55:47:57:20:80:cd:90:72:64:fa:f0:06:03:03:f3:47: 41:2e:0b:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYlqbcJv+PSBz9LXIivsJBI0sPW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMDUxNDExMzRaFw0yNzEwMDQxNDE2MzRaMDMxMTAvBgNV BAMTKDJERjYxNEEzNUJDOEQ4MkQyQjBEQTBDQjQ3ODBFMEI2RjhDNzg5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeu0HyAqGjX6oKCJtl+17Nm72 89SzdSD6ItVthzhCXGZV8lJ4VYhrXrdSYf3BPMAx75D82dFz6Dvs/DCixQMccd2N Bf/5Nk4VGvH0l/EmMTerUQFTkN7sSxM8miFkq1KY3OuFpYgKsltDPdLic7n/jAC/ T4g9NfeSROhpLgiEH9CJ6mfYOgppuTSMmHJ2vSpaQldopKN3m0jHdQ0wyoJGToHY 8pESKcjWIA91PN445exQJ9EwF9iseh7WLAZqRoQJRBAcKPJpWK4RwOL2d1mJAQw5 XxKHpZYkXUNOR32k+zXswTNOAmBMwUsPuiXg+0Uzwyb0YwKRkU/aYc+kvJjzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULfYUo1vI2C0rDaDLR4DgtvjHifAwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzE2MTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqSgsAwQAqSg0MA0GCSqG SIb3DQEBCwUAA4IBAQAWVcz2m4Yb7oxugs8AA8F22kAXeQqHxl9y15cFzhWana6Y eF93lfowafMvkCW7aar9lPWYAIf+NXq+Ajo741PohekVGbO2m/PYiNigQojBo10f H8NngqQshLFMbFeMSDNGmRbgXQjpW6nFQzqUSIFTL52cj8O7cEgxogZLI1GcOXwA ary9VhCn5y1ClXjUmQGfMVg9APBqkx3XDPdIAHjxRx0VKihcQ2wv4hIlzJXVE7+w 3+NmjvkHi0DxkO4vuG7EtCve0ya926hRmcf3C8DNsRzXukERB+KRsNaPY0XQGxMB FIu+V7ytYD3Og1VHVyCAzZByZPrwBgMD80dBLgsy -----END CERTIFICATE-----Generated at Tue Oct 20 22:18:17 2026 by rpki-client