$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS3214.roa File: AS3214.roa (raw, json) Hash identifier: +CnZihCC9fZdFa2k+7lmhGfcmYitIu3rXfgmo6PiBTA= Subject key identifier: 4B:E3:94:32:45:A2:70:29:49:7A:91:F7:23:BF:A1:58:00:D1:B5:3E Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 582E590D40DC8AAED8EFB0576A9FF5D83DA7F5E8 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS3214.roa Signing time: Mon 11 May 2026 01:55:54 +0000 ROA not before: Mon 11 May 2026 01:50:54 +0000 ROA not after: Mon 10 May 2027 01:55:54 +0000 asID: 3214 IP address blocks: 169.40.56.0/24 maxlen: 24 169.40.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2e:59:0d:40:dc:8a:ae:d8:ef:b0:57:6a:9f:f5:d8:3d:a7:f5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: May 11 01:50:54 2026 GMT Not After : May 10 01:55:54 2027 GMT Subject: CN=4BE3943245A27029497A91F723BFA15800D1B53E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:f0:5a:5f:3d:63:f1:74:49:ff:2c:0d:ea: 26:ee:7a:7a:d4:e5:65:52:f0:75:c2:19:15:9a:c2: 35:39:29:d5:03:07:e3:9b:05:5c:e3:bf:b8:70:13: ab:94:68:ca:1d:dd:ff:33:89:31:8c:30:4e:88:69: a5:17:9c:d1:fd:8d:e6:a9:7d:fd:15:47:5b:86:77: 10:91:c9:47:4c:17:8d:14:24:5b:5a:8b:e1:c7:ea: d2:cc:4c:ff:c6:58:a6:56:42:02:57:ca:2a:ea:d9: fa:dd:b1:32:ee:cb:c1:f3:4e:e0:9b:06:2e:b3:c2: fe:53:be:9a:7b:13:2e:dc:96:25:dc:44:91:72:a3: 0b:c0:5c:6c:16:25:a4:45:c1:d2:25:4b:01:d2:04: f2:22:61:db:34:d1:3b:73:82:a5:18:e4:c9:2e:81: 08:e3:13:63:60:f4:9e:71:9c:8c:30:46:f7:f1:9e: 57:1c:e3:b1:f0:56:fc:56:cb:10:99:53:87:b6:f4: 22:4c:9f:d2:7e:7d:39:5b:b6:27:40:3d:8d:f6:da: fd:e8:8b:52:24:41:e2:85:89:d2:45:6f:81:22:68: 7f:d2:96:88:b6:68:ab:83:08:5e:fd:44:96:cf:8f: 26:a1:52:aa:00:22:39:63:c7:ce:f0:5e:32:c4:90: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E3:94:32:45:A2:70:29:49:7A:91:F7:23:BF:A1:58:00:D1:B5:3E X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS3214.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.56.0/24 169.40.117.0/24 Signature Algorithm: sha256WithRSAEncryption 34:aa:bc:ad:0c:5a:3f:0a:fa:25:5e:d3:ce:2e:03:d9:a9:e7: 24:48:04:e1:f5:46:15:9d:56:f9:65:69:b8:7f:0f:26:83:4c: c0:62:01:f4:bb:a8:79:2c:5a:a3:3a:0f:40:03:0c:cd:d4:be: 8c:6d:66:94:68:05:db:4d:c6:94:f8:71:e6:81:54:41:bf:ef: 8d:13:1c:3b:25:46:72:d6:26:e9:91:5c:77:89:6a:22:06:ec: 56:3f:82:ee:a0:16:70:f1:02:ed:8d:f9:ec:0a:07:35:6b:19: 94:70:09:71:11:d3:7d:06:b0:a2:0f:22:d9:1e:31:ac:b3:7b: 99:d6:b6:f4:e8:a0:5d:bc:9b:3b:b0:02:0e:f8:12:26:48:d2: d0:51:aa:53:42:43:b5:5a:62:ff:11:6e:4a:86:8a:3e:ac:7f: ea:be:72:0c:69:c9:06:07:a4:78:6d:cd:bf:19:f0:7f:6a:58: f9:67:cf:2f:fc:ba:c5:d6:94:d7:3c:56:f8:39:8b:a3:6b:20: 75:44:02:99:b0:91:a4:e9:47:be:44:be:a6:c9:71:fb:32:9e: 9b:62:ee:22:30:b1:84:32:8e:5c:34:07:1c:f5:8f:ae:c6:d3: f6:84:c4:6f:64:77:f6:27:27:98:b1:8d:8e:e0:0a:9b:5b:a0: 96:18:70:6e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUWC5ZDUDciq7Y77BXap/12D2n9egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA1MTEwMTUwNTRaFw0yNzA1MTAwMTU1NTRaMDMxMTAvBgNV BAMTKDRCRTM5NDMyNDVBMjcwMjk0OTdBOTFGNzIzQkZBMTU4MDBEMUI1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fvBaXz1j8XRJ/ywN6ibuenrU 5WVS8HXCGRWawjU5KdUDB+ObBVzjv7hwE6uUaMod3f8ziTGMME6IaaUXnNH9jeap ff0VR1uGdxCRyUdMF40UJFtai+HH6tLMTP/GWKZWQgJXyirq2frdsTLuy8HzTuCb Bi6zwv5Tvpp7Ey7cliXcRJFyowvAXGwWJaRFwdIlSwHSBPIiYds00TtzgqUY5Mku gQjjE2Ng9J5xnIwwRvfxnlcc47HwVvxWyxCZU4e29CJMn9J+fTlbtidAPY322v3o i1IkQeKFidJFb4EiaH/Sloi2aKuDCF79RJbPjyahUqoAIjljx87wXjLEkA1ZAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUS+OUMkWicClJepH3I7+hWADRtT4wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzMyMTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACpKDgDBACpKHUwDQYJKoZI hvcNAQELBQADggEBADSqvK0MWj8K+iVe084uA9mp5yRIBOH1RhWdVvllabh/DyaD TMBiAfS7qHksWqM6D0ADDM3UvoxtZpRoBdtNxpT4ceaBVEG/740THDslRnLWJumR XHeJaiIG7FY/gu6gFnDxAu2N+ewKBzVrGZRwCXER030GsKIPItkeMayze5nWtvTo oF28mzuwAg74EiZI0tBRqlNCQ7VaYv8RbkqGij6sf+q+cgxpyQYHpHhtzb8Z8H9q WPlnzy/8usXWlNc8Vvg5i6NrIHVEApmwkaTpR75EvqbJcfsynpti7iIwsYQyjlw0 Bxz1j67G0/aExG9kd/YnJ5ixjY7gCptboJYYcG4= -----END CERTIFICATE-----Generated at Wed May 13 12:39:09 2026 by rpki-client