$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: 5e9BSWNJRqxVGF17qo23uL7ZXGALft9lNgysTjs7GQs= Subject key identifier: 03:9E:EC:86:B0:69:EC:63:06:03:B9:DD:41:62:88:28:A1:AC:40:35 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 149A3E96C1F0F6AE03AC0DB544755DB4E368A61A Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa Signing time: Mon 12 Oct 2026 00:05:39 +0000 ROA not before: Mon 12 Oct 2026 00:00:39 +0000 ROA not after: Mon 11 Oct 2027 00:05:39 +0000 asID: 7029 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.64.0/19 maxlen: 24 13.141.80.0/20 maxlen: 24 13.141.96.0/20 maxlen: 24 13.141.128.0/17 maxlen: 24 13.141.156.0/22 maxlen: 24 13.141.160.0/19 maxlen: 24 13.141.192.0/18 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Oct 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9a:3e:96:c1:f0:f6:ae:03:ac:0d:b5:44:75:5d:b4:e3:68:a6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 12 00:00:39 2026 GMT Not After : Oct 11 00:05:39 2027 GMT Subject: CN=039EEC86B069EC630603B9DD41628828A1AC4035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:28:a7:1f:04:e2:c2:c4:29:75:50:a2:39: 9d:cb:da:f7:f3:c5:85:70:0f:a5:77:6d:7e:6e:1a: fb:da:a5:1d:cf:4e:87:1f:8f:60:b6:db:8c:20:ce: 7b:6e:5a:82:83:08:6e:1d:f5:e4:0b:c9:48:6d:9e: 81:20:c3:63:85:72:b1:88:ad:7d:fe:67:b1:a0:90: 6f:b5:ce:b3:2c:3b:fb:34:3e:54:26:2b:30:42:9d: 67:d5:d5:03:34:f8:25:cb:d1:e8:6a:73:c2:ed:27: 99:65:0b:ff:bc:90:ae:61:fe:78:04:57:50:e1:1f: 53:ac:0a:e4:1c:75:7a:67:ee:bb:6a:5c:b5:ae:21: a6:9e:ac:05:e8:fe:ce:0a:9c:fb:27:c1:6c:2b:14: 2d:39:7a:38:5d:7a:d9:0a:87:3f:5b:1d:27:1a:f4: 28:ea:3b:fb:80:17:8f:40:ce:30:c4:bb:41:5d:3b: 67:16:63:4d:01:0f:0f:62:58:75:1c:30:ba:f3:a8: a6:af:19:c0:4f:fe:39:6b:8f:48:e2:4b:9d:2d:d5: ff:9d:52:d6:23:e2:7e:66:23:9f:43:db:b0:c1:85: 19:a6:9c:15:e5:1c:49:01:e6:60:75:e9:98:27:76: ca:4d:4f:a3:87:20:7a:d3:9b:5e:cf:ca:a3:da:b6: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:EC:86:B0:69:EC:63:06:03:B9:DD:41:62:88:28:A1:AC:40:35 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0/20 13.141.64.0-13.141.111.255 13.141.128.0/17 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.183.255 169.40.188.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 7a:01:cd:11:a4:5d:c4:c1:07:6a:9a:4b:97:cb:50:3d:e0:12: 2b:02:db:70:cc:34:d7:2a:0e:90:88:64:f1:55:a3:e5:4f:37: 25:6a:f5:fa:c9:44:a7:1b:84:43:74:26:3c:ed:0b:ed:b3:75: 9a:55:bc:b3:be:af:3d:3a:7f:9c:91:96:b9:ec:59:af:71:40: e6:9b:c7:57:08:38:30:e9:0a:63:9b:20:bb:cf:6f:97:2c:ed: e8:2d:73:7a:92:5f:a5:14:e8:40:c5:cd:67:f4:da:8f:74:f9: 52:99:3c:49:4d:76:27:69:51:26:05:9d:ad:94:b1:be:7a:b8: 9e:da:c5:5e:3d:6e:65:f2:2b:76:69:98:67:67:a1:69:8e:66: b2:1e:15:d3:0a:ff:dd:bd:ad:6a:3d:f6:d7:55:66:a4:18:1e: 79:f3:cb:97:f6:2b:9e:80:29:5f:e1:e0:4c:dc:76:01:cc:26: e2:ac:0b:5e:8c:f2:ec:95:e8:0b:3a:ac:d2:1e:6f:b4:5a:df: 1e:c2:29:00:92:4a:c4:89:c4:cb:da:d3:cd:e5:6f:88:73:fb: 22:56:57:d2:13:8a:2d:1c:35:05:46:01:2e:7f:ad:9b:c5:45: 84:5d:c1:59:83:f7:60:59:06:1f:fb:9f:79:cc:3d:c0:65:b6: 48:9e:44:17 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUFJo+lsHw9q4DrA21RHVdtONophowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMTIwMDAwMzlaFw0yNzEwMTEwMDA1MzlaMDMxMTAvBgNV BAMTKDAzOUVFQzg2QjA2OUVDNjMwNjAzQjlERDQxNjI4ODI4QTFBQzQwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyiinHwTiwsQpdVCiOZ3L2vfz xYVwD6V3bX5uGvvapR3PTocfj2C224wgzntuWoKDCG4d9eQLyUhtnoEgw2OFcrGI rX3+Z7GgkG+1zrMsO/s0PlQmKzBCnWfV1QM0+CXL0ehqc8LtJ5llC/+8kK5h/ngE V1DhH1OsCuQcdXpn7rtqXLWuIaaerAXo/s4KnPsnwWwrFC05ejhdetkKhz9bHSca 9CjqO/uAF49AzjDEu0FdO2cWY00BDw9iWHUcMLrzqKavGcBP/jlrj0jiS50t1f+d UtYj4n5mI59D27DBhRmmnBXlHEkB5mB16ZgndspNT6OHIHrTm17PyqPattDjAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUA57shrBp7GMGA7ndQWKIKKGsQDUwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwbQYIKwYBBQUHAQcBAf8EXjBcMFoEAgABMFQDBAQNjQAwDAMEBg2NQAMEBA2N YAMEBw2NgAMEAKkogTAMAwQEqSiQAwQBqSiUAwQAqSiZAwQBqSicMAwDBAKpKKQD BAOpKLADBAKpKLwDBASpKPAwDQYJKoZIhvcNAQELBQADggEBAHoBzRGkXcTBB2qa S5fLUD3gEisC23DMNNcqDpCIZPFVo+VPNyVq9frJRKcbhEN0JjztC+2zdZpVvLO+ rz06f5yRlrnsWa9xQOabx1cIODDpCmObILvPb5cs7egtc3qSX6UU6EDFzWf02o90 +VKZPElNdidpUSYFna2Usb56uJ7axV49bmXyK3ZpmGdnoWmOZrIeFdMK/929rWo9 9tdVZqQYHnnzy5f2K56AKV/h4EzcdgHMJuKsC16M8uyV6As6rNIeb7Ra3x7CKQCS SsSJxMva083lb4hz+yJWV9ITii0cNQVGAS5/rZvFRYRdwVmD92BZBh/7n3nMPcBl tkieRBc= -----END CERTIFICATE-----Generated at Sat Oct 17 05:57:51 2026 by rpki-client