$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402252.roa File: AS402252.roa (raw, json) Hash identifier: 8931q0CwOfTfkpp+ZaNISPUWRe1GSq8TKhKSa+sFiw4= Subject key identifier: DF:D1:27:3A:CA:3A:DA:E7:C2:A4:11:EB:5C:A7:EF:14:AB:1A:6F:63 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 68813D6C209CCFFD864E884D43175C23B60CF27B Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402252.roa Signing time: Sun 30 Aug 2026 04:01:59 +0000 ROA not before: Sun 30 Aug 2026 03:56:59 +0000 ROA not after: Sun 29 Aug 2027 04:01:59 +0000 asID: 402252 IP address blocks: 169.40.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 08:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:81:3d:6c:20:9c:cf:fd:86:4e:88:4d:43:17:5c:23:b6:0c:f2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Aug 30 03:56:59 2026 GMT Not After : Aug 29 04:01:59 2027 GMT Subject: CN=DFD1273ACA3ADAE7C2A411EB5CA7EF14AB1A6F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:97:22:76:91:0e:73:58:06:4e:7b:d9:05: 85:f8:0e:a6:93:cf:8f:06:24:f2:10:99:60:5d:b4: a1:48:6c:67:f6:de:16:9e:22:bf:04:0a:b0:12:44: 45:53:12:b9:af:b5:76:50:df:f1:6b:b7:5a:20:83: 25:c6:a4:e9:73:21:00:78:47:21:fb:49:38:88:9c: ec:5b:88:a5:6e:7c:ee:c0:3b:f3:a5:6d:6c:db:94: 07:d9:3e:18:f8:9c:ea:45:ad:86:b0:bd:13:2f:52: bd:d0:64:f7:d1:df:1f:a7:6e:7c:4a:cf:1e:1d:1d: d7:7f:94:68:c6:68:3a:41:b5:97:70:13:5b:ae:2b: 58:4d:d5:49:e0:bf:69:34:34:9b:d9:3e:6e:f1:88: f1:df:72:92:5b:e8:1c:27:f3:81:59:99:92:75:da: 92:40:11:f4:5d:b3:2b:9d:62:23:34:82:0d:92:1d: 23:75:2b:91:ed:2b:fb:7b:50:bf:15:1f:b8:91:8e: 3e:5e:7c:42:4a:ef:5a:fc:2f:c2:09:3e:bb:0f:86: d7:a6:ef:4a:d2:a0:4b:2f:35:e8:20:79:94:a8:8c: 1a:c2:cb:9e:13:da:a5:23:b7:20:72:ac:aa:43:16: cc:e8:b1:79:1f:b2:ee:f3:05:76:0b:9f:69:3c:d7: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D1:27:3A:CA:3A:DA:E7:C2:A4:11:EB:5C:A7:EF:14:AB:1A:6F:63 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402252.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:21:25:66:6f:4a:ac:3f:a7:4e:02:83:92:2a:ab:e2:38:05: 4c:48:d3:7d:fd:eb:09:21:37:49:0d:b7:bd:b0:0b:57:a4:92: ef:98:37:08:1d:52:1b:99:0b:2a:d2:3f:1a:6f:39:82:f8:11: f4:1c:4c:f9:6f:36:c6:8a:f5:47:6c:c4:e7:7a:b0:8e:2e:5e: c9:54:c2:28:88:ea:3c:b8:01:c8:0e:3c:50:3c:95:89:7e:79: cb:ff:e1:77:49:b9:57:55:31:11:ed:85:ee:7c:93:e8:4c:32: 29:0b:4f:01:ff:e8:5e:67:8d:a8:35:ce:30:21:da:a9:0a:c3: de:dd:27:64:3f:4e:e0:a0:19:47:2e:de:8c:f9:7d:68:7a:2c: cb:86:4d:c5:24:6e:c3:e4:64:48:88:97:f6:8f:60:16:f1:d2: 18:3c:17:51:ac:67:9c:32:ce:9b:54:21:74:fb:ff:1b:31:46: be:b5:4b:cd:60:29:c6:a2:16:61:08:20:26:7c:a1:9b:13:b4: 3c:ae:15:22:55:a2:06:a7:43:63:22:70:9c:7b:c9:e5:7f:b2: 22:28:1f:6c:67:e8:dc:33:e9:a5:03:c5:d7:bd:4b:7b:d6:49: 8f:57:31:9f:ed:8d:e7:ed:c0:c9:ff:da:07:1d:56:31:39:02: 61:68:ff:8c -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUaIE9bCCcz/2GTohNQxdcI7YM8nswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA4MzAwMzU2NTlaFw0yNzA4MjkwNDAxNTlaMDMxMTAvBgNV BAMTKERGRDEyNzNBQ0EzQURBRTdDMkE0MTFFQjVDQTdFRjE0QUIxQTZGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguJcidpEOc1gGTnvZBYX4DqaT z48GJPIQmWBdtKFIbGf23haeIr8ECrASREVTErmvtXZQ3/Frt1oggyXGpOlzIQB4 RyH7STiInOxbiKVufO7AO/OlbWzblAfZPhj4nOpFrYawvRMvUr3QZPfR3x+nbnxK zx4dHdd/lGjGaDpBtZdwE1uuK1hN1Ungv2k0NJvZPm7xiPHfcpJb6Bwn84FZmZJ1 2pJAEfRdsyudYiM0gg2SHSN1K5HtK/t7UL8VH7iRjj5efEJK71r8L8IJPrsPhtem 70rSoEsvNeggeZSojBrCy54T2qUjtyByrKpDFszosXkfsu7zBXYLn2k818b9AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQU39EnOso62ufCpBHrXKfvFKsab2MwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwMjI1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqkowDANBgkqhkiG9w0B AQsFAAOCAQEAOyElZm9KrD+nTgKDkiqr4jgFTEjTff3rCSE3SQ23vbALV6SS75g3 CB1SG5kLKtI/Gm85gvgR9BxM+W82xor1R2zE53qwji5eyVTCKIjqPLgByA48UDyV iX55y//hd0m5V1UxEe2F7nyT6EwyKQtPAf/oXmeNqDXOMCHaqQrD3t0nZD9O4KAZ Ry7ejPl9aHosy4ZNxSRuw+RkSIiX9o9gFvHSGDwXUaxnnDLOm1QhdPv/GzFGvrVL zWApxqIWYQggJnyhmxO0PK4VIlWiBqdDYyJwnHvJ5X+yIigfbGfo3DPppQPF171L e9ZJj1cxn+2N5+3Ayf/aBx1WMTkCYWj/jA== -----END CERTIFICATE-----Generated at Fri Sep 18 14:35:37 2026 by rpki-client