$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40352.roa File: AS40352.roa (raw, json) Hash identifier: oZZehR4eqmFu1NxUS7eVgDNZveFntTLgUjPyQy6b9vs= Subject key identifier: 7E:DF:2E:F3:A9:7D:A2:2E:E5:53:AB:A3:E6:16:69:DC:89:BF:E4:84 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 1CC525C9B026DB3EC79AD0B5EC31F61D7EB0EE7C Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40352.roa Signing time: Wed 08 Apr 2026 11:07:23 +0000 ROA not before: Wed 08 Apr 2026 11:02:23 +0000 ROA not after: Wed 07 Apr 2027 11:07:23 +0000 asID: 40352 IP address blocks: 169.40.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 13:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c5:25:c9:b0:26:db:3e:c7:9a:d0:b5:ec:31:f6:1d:7e:b0:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 8 11:02:23 2026 GMT Not After : Apr 7 11:07:23 2027 GMT Subject: CN=7EDF2EF3A97DA22EE553ABA3E61669DC89BFE484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:a9:df:d6:22:d1:db:8c:47:17:99:93:e0: 30:e9:b9:d1:fb:26:38:a0:a8:b3:7b:98:9e:20:6a: d5:4a:c7:b5:3d:ee:8f:62:42:77:a9:5c:66:9c:53: d0:48:40:a2:a3:3a:fe:95:68:f2:61:3a:09:e8:e5: 4a:90:ac:71:c7:ad:11:82:b4:17:da:14:26:cb:1d: ae:eb:14:a7:b1:a1:9f:ff:1b:75:97:41:f9:c6:cf: bb:90:d1:b2:c9:df:82:0a:db:e5:fb:e4:19:98:4e: c4:cf:d7:1e:3c:ea:7a:98:22:ad:b4:4d:a6:be:76: ae:5b:d8:c8:f2:7b:16:bd:02:47:41:c9:b6:66:b4: 12:7c:10:2a:d3:50:a8:f9:de:69:15:f6:59:5e:a3: 0b:55:1a:94:85:24:5c:73:19:d2:6b:d5:1f:a7:17: 89:d0:3c:d2:8f:7f:e1:99:55:63:c9:bb:20:8a:63: b8:a1:e9:1a:89:4e:16:eb:32:b3:b7:c8:1d:47:2a: 6e:a5:65:51:d9:17:d6:98:37:b1:1a:06:23:fd:98: 9b:05:f3:0b:36:b6:8c:b6:fc:75:cd:23:8d:0e:be: 42:c8:70:35:93:32:df:e4:06:1b:ae:9c:c5:10:44: 29:fd:7d:2a:2e:56:6a:56:3e:d5:8e:4e:69:39:f3: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DF:2E:F3:A9:7D:A2:2E:E5:53:AB:A3:E6:16:69:DC:89:BF:E4:84 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS40352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.40.0/24 Signature Algorithm: sha256WithRSAEncryption 50:69:05:a8:fc:cd:52:50:e6:82:8d:9a:dc:22:dc:a8:aa:7a: 4d:f5:29:27:8a:29:55:1a:52:fa:83:f3:30:45:92:84:43:f5: 73:fa:92:27:88:7d:20:e2:01:70:4c:bb:fe:87:aa:cf:87:3b: b4:5f:fe:68:bb:31:0f:65:52:7d:91:99:9c:82:7b:9f:3a:8c: 6f:92:be:a9:11:0d:57:85:68:a9:89:03:30:02:68:a6:99:e1: b1:e5:ee:1d:b8:b4:e0:df:23:66:c7:05:73:5b:a0:a8:19:fe: e2:c9:f6:4c:eb:fc:76:d0:72:56:72:14:6f:0e:39:81:3c:20: 1f:12:4a:92:eb:ad:0e:08:87:52:08:80:a6:4f:81:e1:fc:52: 5d:70:5e:fd:b2:cf:7f:12:f0:3a:f8:65:1c:1b:a4:dd:2f:df: c1:ca:0f:69:c5:45:85:ff:30:92:22:a8:98:30:22:18:10:69: 9d:6c:13:f0:66:4e:3f:6c:83:82:98:6a:6a:d0:62:13:d3:4e: 86:06:da:fe:0c:4b:3c:e8:fa:dc:e5:65:7a:76:58:63:40:d9: f8:3b:c0:00:07:9c:fc:7f:fb:2d:16:de:05:f2:ff:1d:5d:9d: f3:60:25:73:a8:fd:b8:59:9b:4e:74:be:e1:d2:e5:15:5b:87: 6f:a4:0f:25 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUHMUlybAm2z7HmtC17DH2HX6w7nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MDgxMTAyMjNaFw0yNzA0MDcxMTA3MjNaMDMxMTAvBgNV BAMTKDdFREYyRUYzQTk3REEyMkVFNTUzQUJBM0U2MTY2OURDODlCRkU0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtanf1iLR24xHF5mT4DDpudH7 JjigqLN7mJ4gatVKx7U97o9iQnepXGacU9BIQKKjOv6VaPJhOgno5UqQrHHHrRGC tBfaFCbLHa7rFKexoZ//G3WXQfnGz7uQ0bLJ34IK2+X75BmYTsTP1x486nqYIq20 Taa+dq5b2Mjyexa9AkdBybZmtBJ8ECrTUKj53mkV9lleowtVGpSFJFxzGdJr1R+n F4nQPNKPf+GZVWPJuyCKY7ih6RqJThbrMrO3yB1HKm6lZVHZF9aYN7EaBiP9mJsF 8ws2toy2/HXNI40OvkLIcDWTMt/kBhuunMUQRCn9fSouVmpWPtWOTmk585FDAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUft8u86l9oi7lU6uj5hZp3Im/5IQwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwMzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSgoMA0GCSqGSIb3DQEB CwUAA4IBAQBQaQWo/M1SUOaCjZrcItyoqnpN9SkniilVGlL6g/MwRZKEQ/Vz+pIn iH0g4gFwTLv+h6rPhzu0X/5ouzEPZVJ9kZmcgnufOoxvkr6pEQ1XhWipiQMwAmim meGx5e4duLTg3yNmxwVzW6CoGf7iyfZM6/x20HJWchRvDjmBPCAfEkqS660OCIdS CICmT4Hh/FJdcF79ss9/EvA6+GUcG6TdL9/Byg9pxUWF/zCSIqiYMCIYEGmdbBPw Zk4/bIOCmGpq0GIT006GBtr+DEs86Prc5WV6dlhjQNn4O8AAB5z8f/stFt4F8v8d XZ3zYCVzqP24WZtOdL7h0uUVW4dvpA8l -----END CERTIFICATE-----Generated at Sat Apr 11 01:28:38 2026 by rpki-client