
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
File: AS20326.roa (raw, json)
Hash identifier: WfqW9xTbF/F8gGniwNy1xZHDyv6G8hrb4P9vtGs7F4k=
Subject key identifier: D7:51:FD:1C:1B:AC:FE:7D:05:B8:BB:1E:CD:AE:AA:D2:4C:51:A5:9E
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 1F1CF40B66204D0AF4BAE9046837EC201A3B8CF9
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
Signing time: Tue 25 Aug 2026 01:54:38 +0000
ROA not before: Tue 25 Aug 2026 01:49:38 +0000
ROA not after: Tue 24 Aug 2027 01:54:38 +0000
asID: 20326
IP address blocks: 169.40.196.0/22 maxlen: 24
169.40.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 15:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1c:f4:0b:66:20:4d:0a:f4:ba:e9:04:68:37:ec:20:1a:3b:8c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Aug 25 01:49:38 2026 GMT
Not After : Aug 24 01:54:38 2027 GMT
Subject: CN=D751FD1C1BACFE7D05B8BB1ECDAEAAD24C51A59E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:e9:47:63:35:e0:dd:25:b2:ed:6a:19:2a:
8c:21:06:e8:03:a1:91:83:3d:d1:bc:40:43:9a:95:
d1:87:7c:66:2f:d3:40:73:cb:35:97:5f:28:03:b3:
ea:d8:57:6c:64:4d:3b:d4:e0:f3:f5:17:1e:c9:b2:
03:21:f1:df:4f:fd:33:22:a8:d1:6c:03:0a:71:a7:
26:a2:3a:16:0f:2d:cf:61:07:29:3d:1e:15:26:f2:
31:b6:ab:b8:b8:1f:6c:36:01:f7:70:42:e2:e6:79:
3d:43:bc:71:f2:15:ca:a0:1a:1d:a5:e3:a7:c2:31:
cb:cc:5a:79:7e:97:fd:81:f6:8c:c8:bb:95:ad:af:
76:ba:6d:22:4d:83:62:5c:70:55:23:05:a0:c5:74:
8e:36:e4:f5:dd:e9:99:93:ac:20:32:26:a2:e1:ff:
37:58:24:0f:ba:bf:48:1f:25:8b:5b:e7:e8:e2:2b:
d3:2a:ac:71:67:96:37:f9:79:71:7d:22:98:cd:8a:
9d:77:df:71:23:9d:04:12:88:8b:31:57:58:2c:c0:
6c:48:2d:87:5c:1e:a8:6d:4a:eb:79:cb:9b:da:1c:
82:80:02:91:94:18:53:ec:06:73:5e:01:30:14:7e:
24:49:28:2f:72:8d:55:c4:24:41:e7:ad:eb:1f:77:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:51:FD:1C:1B:AC:FE:7D:05:B8:BB:1E:CD:AE:AA:D2:4C:51:A5:9E
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.196.0-169.40.203.255
Signature Algorithm: sha256WithRSAEncryption
36:79:4d:7b:9f:fc:8f:f2:a8:e8:d4:1b:29:d5:76:a4:c4:03:
08:31:06:37:5a:50:73:7e:0e:66:37:b4:05:9a:b8:b4:ba:1d:
e6:10:da:05:f7:0a:3d:5c:72:11:7b:2d:d3:dc:d4:84:91:6d:
d8:fa:e7:d4:01:b6:b0:f9:55:12:7f:6b:d4:1f:87:aa:5d:b5:
21:0d:36:8f:0d:18:1e:09:19:03:ae:8d:30:f0:ff:4d:82:1a:
50:53:8e:b0:9a:79:0b:54:3a:83:16:33:01:0d:63:3d:8f:69:
0d:ce:93:5e:88:bd:d2:82:a5:06:a9:38:88:30:25:cd:63:08:
fb:b1:fd:00:36:53:65:b7:6f:86:dd:0a:3c:67:34:65:83:82:
9d:49:0d:f8:b0:0a:cd:cd:7b:5c:98:72:8b:7c:9d:9e:a5:22:
2d:24:40:4f:3b:45:2b:8e:6b:d7:ec:de:db:0f:df:21:2a:d3:
8c:8c:c6:42:52:eb:67:4b:7e:f5:d7:87:60:71:99:bf:5f:6b:
5b:02:4a:d2:de:9f:e8:81:19:09:43:11:81:0a:15:69:2c:2f:
34:f4:8f:f3:ec:ef:21:f3:e1:db:89:6a:a5:7f:87:19:a1:fa:
ef:06:ff:aa:07:e6:69:4e:e9:03:f5:d0:02:9e:2c:be:07:26:
e6:58:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:54:12 2026 by rpki-client