$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: LFeTBZh+JcGLKPPbJiwU9/KydWpHQw8OTwR/mkmcWdI= Subject key identifier: A4:34:8C:69:8F:49:79:B8:5B:48:42:86:A1:7D:D2:F1:6E:81:42:52 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 6EFAC8E4A11F4E9ED94F9AAD471117A759564921 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa Signing time: Sat 14 Nov 2026 14:42:49 +0000 ROA not before: Sat 14 Nov 2026 14:37:49 +0000 ROA not after: Sat 13 Nov 2027 14:42:49 +0000 asID: 834 IP address blocks: 13.141.1.0/24 maxlen: 24 13.141.5.0/24 maxlen: 24 13.141.15.0/24 maxlen: 24 13.141.18.0/23 maxlen: 24 13.141.22.0/23 maxlen: 24 13.141.26.0/24 maxlen: 24 13.141.32.0/24 maxlen: 24 13.141.35.0/24 maxlen: 24 13.141.36.0/22 maxlen: 24 13.141.42.0/23 maxlen: 24 13.141.52.0/22 maxlen: 24 13.141.62.0/24 maxlen: 24 13.141.64.0/24 maxlen: 24 13.141.69.0/24 maxlen: 24 13.141.76.0/23 maxlen: 24 13.141.121.0/24 maxlen: 24 13.141.123.0/24 maxlen: 24 13.141.127.0/24 maxlen: 24 169.40.60.0/22 maxlen: 24 169.40.72.0/22 maxlen: 24 169.40.135.0/24 maxlen: 24 169.40.160.0/22 maxlen: 24 169.40.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fa:c8:e4:a1:1f:4e:9e:d9:4f:9a:ad:47:11:17:a7:59:56:49:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 14 14:37:49 2026 GMT Not After : Nov 13 14:42:49 2027 GMT Subject: CN=A4348C698F4979B85B484286A17DD2F16E814252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:65:b9:8a:e9:8f:b0:02:e3:eb:5f:60:fa: d3:50:d3:23:95:30:20:38:a3:e5:57:96:18:68:45: 01:f3:51:af:2b:12:d0:f4:8f:1c:2f:e9:50:e2:91: 7b:0d:c1:94:b7:c2:4f:3e:38:82:2f:8d:d0:61:ed: 5a:62:26:01:73:5f:42:ca:73:24:e4:ec:fc:91:81: 58:82:7c:8e:1e:71:1c:6c:c6:a6:5a:9b:7f:20:8a: f9:b7:9e:b1:d4:7b:df:fd:da:99:74:c3:d7:02:c6: b4:c0:45:19:e1:94:d1:e6:54:17:13:3a:ca:aa:bd: 6a:ea:7e:c0:90:af:f7:3f:ab:a2:ba:fa:eb:51:b0: e7:7d:7d:d8:e6:30:88:39:01:26:24:41:a2:5a:15: 0c:4f:3c:9b:3d:79:6c:89:6b:89:9d:a7:16:3d:dc: 29:4b:0a:cf:37:93:10:32:8d:2c:71:d4:7b:d2:e1: 51:e5:99:09:41:81:32:a8:5d:d4:dd:5b:36:12:74: d1:26:8f:bb:9c:f3:9e:65:e8:27:e8:49:33:ad:00: f7:3b:f7:61:a0:94:a5:13:b2:d9:cd:25:b5:f1:04: cd:d8:14:d1:e8:95:02:65:23:18:8f:13:42:d5:f1: 24:95:98:63:8c:9c:df:cc:18:c8:f5:d9:80:ff:84: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:34:8C:69:8F:49:79:B8:5B:48:42:86:A1:7D:D2:F1:6E:81:42:52 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.1.0/24 13.141.5.0/24 13.141.15.0/24 13.141.18.0/23 13.141.22.0/23 13.141.26.0/24 13.141.32.0/24 13.141.35.0-13.141.39.255 13.141.42.0/23 13.141.52.0/22 13.141.62.0/24 13.141.64.0/24 13.141.69.0/24 13.141.76.0/23 13.141.121.0/24 13.141.123.0/24 13.141.127.0/24 169.40.60.0/22 169.40.72.0/22 169.40.135.0/24 169.40.160.0/22 169.40.224.0/20 Signature Algorithm: sha256WithRSAEncryption 42:06:ad:b5:eb:e9:be:15:6a:1c:da:d1:b0:b1:df:5b:3c:c3: b7:04:f7:ed:0d:9d:5d:f6:69:d2:5b:c2:c0:97:c3:67:9e:af: 7b:5f:bf:f6:96:ab:ec:92:fd:2d:6e:94:28:e3:28:55:23:77: 59:b5:fe:91:1f:94:16:67:13:a4:73:64:0f:41:ee:d2:96:97: e7:c2:8b:df:5d:0c:ca:ed:03:16:fe:b8:f0:db:ee:34:10:a6: 40:21:ea:6d:cd:9d:12:b7:28:9c:4b:10:e3:e4:4d:f9:e9:93: a9:b3:aa:a7:8f:5b:39:7c:fd:07:f4:07:84:3f:54:e5:b1:6e: 03:63:21:3c:bf:31:ca:18:d7:8c:bc:c9:70:0f:5f:c2:52:d0: 89:e8:4d:78:96:3a:2d:6c:7d:d7:47:d1:ec:f2:7e:7a:83:5b: e9:a6:5e:96:a9:17:7d:8b:ac:08:c7:44:11:54:9e:81:56:8c: e7:c2:c7:73:7c:19:3f:da:38:95:e7:5e:25:ac:a5:8f:87:d5: 0f:e9:3b:4a:0b:7c:34:ca:77:23:e7:35:db:21:fe:31:15:e7: 85:65:83:d6:eb:ae:c1:77:3e:d2:44:19:ab:55:67:cb:7f:17: 8f:11:62:d4:e5:4a:3b:80:b7:a9:d3:37:e1:c7:09:79:98:d7: dc:81:cb:f0 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUbvrI5KEfTp7ZT5qtRxEXp1lWSSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjExMTQxNDM3NDlaFw0yNzExMTMxNDQyNDlaMDMxMTAvBgNV BAMTKEE0MzQ4QzY5OEY0OTc5Qjg1QjQ4NDI4NkExN0REMkYxNkU4MTQyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6GW5iumPsALj619g+tNQ0yOV MCA4o+VXlhhoRQHzUa8rEtD0jxwv6VDikXsNwZS3wk8+OIIvjdBh7VpiJgFzX0LK cyTk7PyRgViCfI4ecRxsxqZam38givm3nrHUe9/92pl0w9cCxrTARRnhlNHmVBcT OsqqvWrqfsCQr/c/q6K6+utRsOd9fdjmMIg5ASYkQaJaFQxPPJs9eWyJa4mdpxY9 3ClLCs83kxAyjSxx1HvS4VHlmQlBgTKoXdTdWzYSdNEmj7uc855l6CfoSTOtAPc7 92GglKUTstnNJbXxBM3YFNHolQJlIxiPE0LV8SSVmGOMnN/MGMj12YD/hA93AgMB AAGjggK3MIICszAdBgNVHQ4EFgQUpDSMaY9JebhbSEKGoX3S8W6BQlIwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjCBqQYIKwYBBQUHAQcBAf8EgZkwgZYwgZMEAgABMIGMAwQADY0BAwQADY0FAwQA DY0PAwQBDY0SAwQBDY0WAwQADY0aAwQADY0gMAwDBAANjSMDBAMNjSADBAENjSoD BAINjTQDBAANjT4DBAANjUADBAANjUUDBAENjUwDBAANjXkDBAANjXsDBAANjX8D BAKpKDwDBAKpKEgDBACpKIcDBAKpKKADBASpKOAwDQYJKoZIhvcNAQELBQADggEB AEIGrbXr6b4Vahza0bCx31s8w7cE9+0NnV32adJbwsCXw2eer3tfv/aWq+yS/S1u lCjjKFUjd1m1/pEflBZnE6RzZA9B7tKWl+fCi99dDMrtAxb+uPDb7jQQpkAh6m3N nRK3KJxLEOPkTfnpk6mzqqePWzl8/Qf0B4Q/VOWxbgNjITy/McoY14y8yXAPX8JS 0InoTXiWOi1sfddH0ezyfnqDW+mmXpapF32LrAjHRBFUnoFWjOfCx3N8GT/aOJXn XiWspY+H1Q/pO0oLfDTKdyPnNdsh/jEV54Vlg9brrsF3PtJEGatVZ8t/F48RYtTl SjuAt6nTN+HHCXmY19yBy/A= -----END CERTIFICATE-----Generated at Sun Nov 15 02:46:15 2026 by rpki-client