Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205502.roa
File:                     AS205502.roa (raw, json)
Hash identifier:          uxQzt9VtLoKmmNDUv/ZS3FpNWFTAJ5Y6J6rIecLcFVE=
Subject key identifier:   A1:F5:2A:B1:00:C6:80:F3:35:F4:99:7F:9C:6A:74:21:A1:F3:3F:AC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6D8C2D516ED6AA4F8906B3908B09DAAC21D28026
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205502.roa
Signing time:             Fri 08 May 2026 14:12:47 +0000
ROA not before:           Fri 08 May 2026 14:07:47 +0000
ROA not after:            Fri 07 May 2027 14:12:47 +0000
asID:                     205502
IP address blocks:        169.40.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8c:2d:51:6e:d6:aa:4f:89:06:b3:90:8b:09:da:ac:21:d2:80:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May  8 14:07:47 2026 GMT
            Not After : May  7 14:12:47 2027 GMT
        Subject: CN=A1F52AB100C680F335F4997F9C6A7421A1F33FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:b6:84:e7:95:f4:aa:b6:02:ba:fb:94:71:
                    e5:6f:98:ce:83:72:14:d9:88:99:76:ee:a8:46:7f:
                    3a:fb:6b:96:7a:c8:9e:8c:0d:27:0e:43:21:01:0e:
                    fd:2f:82:c7:c2:dd:0b:c7:26:20:8b:93:a2:a9:a6:
                    bf:35:53:b4:f0:95:70:90:81:15:63:50:a6:03:e3:
                    10:f5:48:ad:db:cb:8b:32:f3:15:fd:12:65:e9:d7:
                    18:01:fa:ba:74:c5:ee:83:b2:81:79:b4:7c:47:3a:
                    64:14:1d:84:b9:e1:09:10:17:89:84:2d:4a:d1:7e:
                    e1:af:8b:bf:14:70:49:d1:73:bb:62:5d:da:dd:04:
                    30:72:27:fb:6a:dc:3c:d8:4d:24:87:47:b5:a3:0b:
                    7b:90:5c:f3:8a:f1:dd:7a:e4:5a:65:c2:f2:63:ca:
                    70:a9:88:93:56:eb:45:ee:81:1b:b7:4f:c5:c6:c9:
                    51:e2:40:ae:75:07:3e:b6:17:85:86:f5:4e:cd:8b:
                    7b:a4:11:78:d1:f2:14:6b:ef:f5:fa:9e:34:b9:a2:
                    88:67:82:3f:93:02:eb:03:3f:ae:88:96:5a:18:3c:
                    ab:66:2c:4e:eb:e7:49:a8:63:df:bf:bf:0e:0b:2c:
                    4d:54:26:fa:57:39:0d:22:d2:59:1b:6e:a7:80:e1:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:2A:B1:00:C6:80:F3:35:F4:99:7F:9C:6A:74:21:A1:F3:3F:AC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205502.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:b2:08:a0:5b:ec:af:c8:69:36:e4:b0:97:45:4d:07:eb:
         be:64:e5:95:91:8c:af:73:8e:04:56:25:d4:e5:c6:1e:fc:bf:
         7b:30:75:37:08:07:7f:4d:3a:17:f0:6d:58:fe:ad:4d:e2:80:
         f9:de:0b:88:ad:6b:b8:e9:c9:92:55:17:9b:51:7d:ed:9c:b5:
         b2:a8:14:87:39:1e:1f:e6:93:36:45:a4:35:c5:69:cc:3d:0f:
         fb:62:18:48:30:a9:1b:e4:9f:a5:36:96:6e:12:9e:e5:f2:e8:
         38:01:52:95:c8:80:72:a0:46:14:de:8d:d0:c5:a4:d1:8b:6c:
         d2:d1:be:f2:f2:3a:df:0b:66:53:5e:b4:f4:35:40:1f:95:25:
         f0:92:4d:7e:78:a6:fe:88:5f:7f:3f:c3:84:26:bb:80:57:01:
         ab:bf:e9:8b:c9:50:91:c7:9e:0b:be:8c:1c:1a:4a:ef:07:e9:
         1d:69:7d:65:be:69:bf:ed:6e:44:78:70:ff:0f:bc:55:33:c0:
         b6:d8:fd:e5:98:34:fe:ad:c1:0e:a0:05:c6:c7:4b:cf:2e:53:
         9c:d2:6b:55:9d:29:33:ae:db:90:21:94:79:5b:ca:53:ff:35:
         c7:6a:ea:bf:c4:0e:c4:a2:2e:bd:d3:2c:27:2b:6f:95:3c:34:
         59:c1:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:08 2026 by rpki-client