$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa File: AS6079.roa (raw, json) Hash identifier: HkbFzpZ2ICwXrPdKnBeeYq0yFV6EU4j1VxgHI2J/WRo= Subject key identifier: 2B:BC:FA:76:F5:D4:29:0F:04:5E:4C:57:90:B4:A7:01:A5:20:4E:9F Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 20D9E08C799F9A21E227D948347BA137C11B77BC Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa Signing time: Thu 30 Apr 2026 12:23:56 +0000 ROA not before: Thu 30 Apr 2026 12:18:56 +0000 ROA not after: Thu 29 Apr 2027 12:23:56 +0000 asID: 6079 IP address blocks: 169.40.129.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d9:e0:8c:79:9f:9a:21:e2:27:d9:48:34:7b:a1:37:c1:1b:77:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 30 12:18:56 2026 GMT Not After : Apr 29 12:23:56 2027 GMT Subject: CN=2BBCFA76F5D4290F045E4C5790B4A701A5204E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ea:bb:ec:b8:74:0c:9b:e9:ec:32:da:14:60: 3a:71:3e:68:41:2b:03:14:06:a3:c6:ca:13:a5:4c: 67:e2:66:fa:d1:2f:48:f6:4d:b2:2a:f5:48:ad:e1: 22:33:d1:d3:12:d8:99:0a:d9:b9:05:47:12:34:72: 13:78:a5:0f:53:b4:7c:45:da:4d:59:40:36:d4:e1: ac:84:d2:7d:4b:8e:4a:e9:39:6b:c5:26:e4:3a:b5: 45:fa:ca:43:7d:a0:0d:69:c2:a9:72:2d:80:08:62: e7:25:3e:42:b8:dd:3e:6c:e0:43:c0:1b:b0:5d:67: d1:14:c6:87:a5:a0:0c:d8:f3:2e:99:70:b4:64:05: 14:f4:4b:02:75:19:cd:08:6b:ac:a4:cc:c4:4b:59: c4:19:21:df:60:37:7c:97:ac:45:22:f6:86:b0:43: 32:17:a3:0e:a8:69:75:4a:21:c7:3b:c6:a8:44:00: 24:6d:18:5b:76:c6:5e:ab:86:0b:8d:a3:9a:45:6f: 7e:9d:48:f0:a5:c9:db:fd:48:c1:e8:11:e4:51:b6: b2:99:70:12:4e:29:ab:64:3e:0e:ad:fe:d0:45:4f: 71:32:ba:38:fb:5e:2c:86:a9:55:06:f0:db:50:2e: af:60:19:f2:9c:10:46:65:42:b2:b2:e2:98:15:9c: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BC:FA:76:F5:D4:29:0F:04:5E:4C:57:90:B4:A7:01:A5:20:4E:9F X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.129.0/24 169.40.146.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.183.255 169.40.188.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption ad:7f:f7:b6:c1:87:3b:4c:4a:ee:34:fa:69:0b:a8:49:62:02: d6:67:70:37:91:2c:55:60:70:0f:4a:29:f1:58:c2:c8:9d:c7: 50:91:5f:b2:e8:32:3e:aa:fd:b3:1d:4a:71:05:92:f5:26:59: f7:52:7d:64:78:bc:d3:7e:58:6b:83:51:ee:22:e1:bf:98:e8: 0c:a7:a3:6c:bf:b4:44:38:e9:5d:8e:43:ff:31:26:fb:67:ef: bd:28:d2:b3:ea:ef:d6:45:f0:e6:73:ed:c4:0a:34:19:f8:1e: 88:cb:33:11:b1:24:82:af:37:f4:24:fc:66:ce:54:d4:4d:0d: 69:08:84:f4:95:b0:ea:0d:d8:17:d4:c7:79:67:3f:1d:45:c8: 6b:0e:c9:9e:a0:a2:b8:42:e0:49:be:a6:0f:03:cd:14:0e:61: d8:a8:f3:1c:3d:c9:d4:0a:e3:51:85:20:eb:5d:7f:63:d7:57: a7:dc:99:b6:8e:1d:ad:92:9a:15:b5:d1:9f:ab:7e:e3:6f:29: 0c:33:ff:83:35:a7:26:fc:4c:35:d6:6f:6c:96:ec:67:df:92: 52:f0:cf:98:62:f8:34:3e:6c:b1:eb:b9:a9:1c:49:72:b9:09: 9e:bd:22:1e:70:b6:31:47:7f:33:6e:1b:35:92:46:14:86:fd: 51:08:aa:f0 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUINngjHmfmiHiJ9lINHuhN8Ebd7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MzAxMjE4NTZaFw0yNzA0MjkxMjIzNTZaMDMxMTAvBgNV BAMTKDJCQkNGQTc2RjVENDI5MEYwNDVFNEM1NzkwQjRBNzAxQTUyMDRFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26rvsuHQMm+nsMtoUYDpxPmhB KwMUBqPGyhOlTGfiZvrRL0j2TbIq9Uit4SIz0dMS2JkK2bkFRxI0chN4pQ9TtHxF 2k1ZQDbU4ayE0n1LjkrpOWvFJuQ6tUX6ykN9oA1pwqlyLYAIYuclPkK43T5s4EPA G7BdZ9EUxoeloAzY8y6ZcLRkBRT0SwJ1Gc0Ia6ykzMRLWcQZId9gN3yXrEUi9oaw QzIXow6oaXVKIcc7xqhEACRtGFt2xl6rhguNo5pFb36dSPClydv9SMHoEeRRtrKZ cBJOKatkPg6t/tBFT3Eyujj7XiyGqVUG8NtQLq9gGfKcEEZlQrKy4pgVnK6bAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUK7z6dvXUKQ8EXkxXkLSnAaUgTp8wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzYwNzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwUwYIKwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBACpKIEwDAMEAakokgMEAako lAMEAKkomQMEAakonDAMAwQCqSikAwQDqSiwAwQCqSi8AwQEqSjwMA0GCSqGSIb3 DQEBCwUAA4IBAQCtf/e2wYc7TEruNPppC6hJYgLWZ3A3kSxVYHAPSinxWMLIncdQ kV+y6DI+qv2zHUpxBZL1Jln3Un1keLzTflhrg1HuIuG/mOgMp6Nsv7REOOldjkP/ MSb7Z++9KNKz6u/WRfDmc+3ECjQZ+B6IyzMRsSSCrzf0JPxmzlTUTQ1pCIT0lbDq DdgX1Md5Zz8dRchrDsmeoKK4QuBJvqYPA80UDmHYqPMcPcnUCuNRhSDrXX9j11en 3Jm2jh2tkpoVtdGfq37jbykMM/+DNacm/Ew11m9sluxn35JS8M+YYvg0Pmyx67mp HElyuQmevSIecLYxR38zbhs1kkYUhv1RCKrw -----END CERTIFICATE-----Generated at Wed May 13 12:39:10 2026 by rpki-client