$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: pIiv5Y3mzqKPsF/cr4Fl+K0DLlCK0DyBG24T1hj+OD8= Subject key identifier: 91:6B:31:71:04:D5:9E:28:CC:38:61:75:C8:A7:15:64:94:39:4B:98 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 5E795F4E85FD6DF484AF4BB519F6F3D6419F0E25 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Wed 14 Oct 2026 07:54:51 +0000 ROA not before: Wed 14 Oct 2026 07:49:51 +0000 ROA not after: Wed 13 Oct 2027 07:54:51 +0000 asID: 5650 IP address blocks: 13.141.0.0/20 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 07:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:79:5f:4e:85:fd:6d:f4:84:af:4b:b5:19:f6:f3:d6:41:9f:0e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 14 07:49:51 2026 GMT Not After : Oct 13 07:54:51 2027 GMT Subject: CN=916B317104D59E28CC386175C8A7156494394B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:c2:c9:9e:2c:5d:a1:ce:1c:1c:27:b6:4f: f2:12:aa:b2:69:90:8b:11:d4:82:77:73:21:cd:44: fe:a3:e0:9f:53:a7:b1:bf:1f:7e:16:82:fc:ed:25: ca:d6:d4:53:85:47:fa:d7:92:01:31:cb:01:ad:3a: e6:53:11:00:02:55:b3:72:de:8e:16:ec:67:fa:e5: fc:a8:82:4c:3a:3f:ef:d6:3a:6c:e9:fa:e2:24:27: 65:f5:36:db:92:82:95:0c:e1:e2:f7:d6:f8:7a:7f: 90:54:ac:37:d0:01:d2:2e:91:5a:a3:b6:41:76:a4: 50:cc:f3:10:68:4f:03:4b:d0:b7:ca:c0:66:31:f4: 4c:79:c4:6b:42:15:97:d5:01:3f:1d:49:0d:5c:2a: e8:9b:0f:63:d5:fe:2f:a0:fd:2a:34:cf:3c:43:6e: 2a:25:92:fa:5a:08:da:0d:4a:89:f1:1c:c1:f3:a4: c0:51:4c:0c:9c:1f:b1:f4:94:0a:e4:c5:ab:91:d0: 94:08:82:0c:10:6c:ba:1c:f9:1d:0a:32:d8:f6:f1: 62:de:34:8f:67:9b:d6:da:bb:b0:7c:21:96:88:53: eb:6c:5a:8b:f9:73:c3:86:b2:ee:9d:13:bf:eb:ee: a4:9a:17:df:9a:38:b9:cc:dc:b1:88:1b:01:0c:43: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6B:31:71:04:D5:9E:28:CC:38:61:75:C8:A7:15:64:94:39:4B:98 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0/20 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:63:53:1c:40:1b:be:8e:ab:10:9b:a8:f1:6e:41:6a:49:0e: 80:24:a8:b6:5f:97:df:80:4a:78:b3:9a:eb:6b:4e:7a:24:39: fd:a4:f3:78:65:a3:cb:27:af:c7:85:8e:0e:f4:b1:4d:69:99: 10:95:53:f5:93:e8:7f:5d:85:cf:cd:e2:4d:bf:06:45:be:be: 7d:ad:8b:bf:68:0a:ff:c8:f8:08:8c:e2:bb:89:a8:e9:0e:69: 69:de:a4:7d:64:7b:cb:60:5e:c7:b5:35:f8:20:f1:a6:c6:8b: 8c:59:f2:e9:b0:b9:cf:de:e5:74:52:14:c7:4d:93:c2:4a:ca: 67:d7:b8:a0:f5:21:b1:b3:f5:0c:95:c5:02:78:2d:94:8f:18: 88:40:d1:3e:13:b5:49:ea:63:18:a4:83:18:bf:2f:68:1d:d0: 1e:10:f2:e4:d3:dd:9b:86:04:a4:e2:ef:84:c7:57:69:e3:0a: 3b:d5:d7:42:7d:04:bd:3e:1e:ff:b8:39:5a:74:ac:fb:79:a8: 45:05:09:a6:e8:54:42:35:37:50:f1:a3:90:85:f2:54:f2:b1: cf:17:29:d1:89:33:19:0c:ba:5b:05:b3:89:99:8c:ed:03:e0: 65:2b:6c:7d:c4:f1:21:e7:7b:d4:e8:fa:4e:a4:6e:22:96:9e: 21:c1:68:90 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUXnlfToX9bfSEr0u1Gfbz1kGfDiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMTQwNzQ5NTFaFw0yNzEwMTMwNzU0NTFaMDMxMTAvBgNV BAMTKDkxNkIzMTcxMDRENTlFMjhDQzM4NjE3NUM4QTcxNTY0OTQzOTRCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdicLJnixdoc4cHCe2T/ISqrJp kIsR1IJ3cyHNRP6j4J9Tp7G/H34WgvztJcrW1FOFR/rXkgExywGtOuZTEQACVbNy 3o4W7Gf65fyogkw6P+/WOmzp+uIkJ2X1NtuSgpUM4eL31vh6f5BUrDfQAdIukVqj tkF2pFDM8xBoTwNL0LfKwGYx9Ex5xGtCFZfVAT8dSQ1cKuibD2PV/i+g/So0zzxD biolkvpaCNoNSonxHMHzpMBRTAycH7H0lArkxauR0JQIggwQbLoc+R0KMtj28WLe NI9nm9bau7B8IZaIU+tsWov5c8OGsu6dE7/r7qSaF9+aOLnM3LGIGwEMQ03HAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUkWsxcQTVnijMOGF1yKcVZJQ5S5gwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwUwYIKwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBAQNjQADBACpKIEwDAMEBKko kAMEAakolAMEAKkomQMEAakonDAMAwQCqSikAwQGqSiAAwQEqSjwMA0GCSqGSIb3 DQEBCwUAA4IBAQBeY1McQBu+jqsQm6jxbkFqSQ6AJKi2X5ffgEp4s5rra056JDn9 pPN4ZaPLJ6/HhY4O9LFNaZkQlVP1k+h/XYXPzeJNvwZFvr59rYu/aAr/yPgIjOK7 iajpDmlp3qR9ZHvLYF7HtTX4IPGmxouMWfLpsLnP3uV0UhTHTZPCSspn17ig9SGx s/UMlcUCeC2UjxiIQNE+E7VJ6mMYpIMYvy9oHdAeEPLk092bhgSk4u+Ex1dp4wo7 1ddCfQS9Ph7/uDladKz7eahFBQmm6FRCNTdQ8aOQhfJU8rHPFynRiTMZDLpbBbOJ mYztA+BlK2x9xPEh53vU6PpOpG4ilp4hwWiQ -----END CERTIFICATE-----Generated at Tue Oct 20 22:30:57 2026 by rpki-client