Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 2x+nrPiNMSJ5G5QsReU92FHgFjACascLvOShTV7YYk4=
Subject key identifier: 7C:1D:04:E9:B4:FA:FA:A7:09:33:29:05:E2:46:D5:09:2C:27:8C:72
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 0529A65C7B562BE330A4AEBA424BD5D7D250FA75
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Wed 13 May 2026 06:09:19 +0000
ROA not before: Wed 13 May 2026 06:04:19 +0000
ROA not after: Wed 12 May 2027 06:09:19 +0000
asID: 834
IP address blocks: 13.141.24.0/22 maxlen: 24
13.141.32.0/22 maxlen: 24
13.141.56.0/21 maxlen: 24
13.141.72.0/21 maxlen: 24
13.141.96.0/22 maxlen: 24
13.141.104.0/21 maxlen: 24
13.141.112.0/21 maxlen: 24
169.40.33.0/24 maxlen: 24
169.40.34.0/23 maxlen: 24
169.40.37.0/24 maxlen: 24
169.40.39.0/24 maxlen: 24
169.40.40.0/23 maxlen: 24
169.40.43.0/24 maxlen: 24
169.40.59.0/24 maxlen: 24
169.40.68.0/22 maxlen: 24
169.40.72.0/21 maxlen: 24
169.40.96.0/24 maxlen: 24
169.40.107.0/24 maxlen: 24
169.40.111.0/24 maxlen: 24
169.40.115.0/24 maxlen: 24
169.40.124.0/24 maxlen: 24
169.40.136.0/24 maxlen: 24
169.40.142.0/23 maxlen: 24
169.40.150.0/23 maxlen: 24
169.40.152.0/24 maxlen: 24
169.40.155.0/24 maxlen: 24
169.40.159.0/24 maxlen: 24
169.40.200.0/22 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:29:a6:5c:7b:56:2b:e3:30:a4:ae:ba:42:4b:d5:d7:d2:50:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: May 13 06:04:19 2026 GMT
Not After : May 12 06:09:19 2027 GMT
Subject: CN=7C1D04E9B4FAFAA709332905E246D5092C278C72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:4d:74:89:9b:97:05:7e:9e:8e:e7:f3:d9:
34:dc:88:7a:ee:3f:8e:6c:3e:56:50:39:ef:28:d3:
e5:b3:0d:07:fa:b1:cb:6e:19:dd:c4:f9:5f:ad:80:
18:10:70:0a:a7:ee:59:e4:9e:8b:31:7f:bd:a2:69:
eb:36:52:21:74:f1:c4:08:1c:fb:1e:c1:37:be:c0:
c6:ef:3e:4f:05:be:63:b2:eb:8c:9a:64:c8:96:04:
aa:29:be:0c:9a:63:fc:9f:6b:f8:82:5b:df:8d:05:
d7:8c:7a:c7:c1:f6:fd:44:3f:f9:fe:72:19:30:45:
60:35:c8:fd:14:fb:6f:b3:1f:01:78:7f:20:99:f0:
c8:16:42:ec:97:6f:f3:45:de:a3:d9:a3:60:27:9b:
3c:45:68:b2:af:cf:4a:02:75:65:9d:0e:0c:e5:3b:
51:90:ff:fa:b4:f5:9d:8b:92:5a:30:8d:ce:49:0b:
c7:d2:8f:4b:6d:51:34:11:04:56:45:7c:ee:07:d1:
db:ad:e0:f6:f7:3d:6f:b4:28:6a:0b:55:ec:fc:8c:
bd:47:2f:b5:a3:fd:7b:8d:e0:f6:95:78:9c:a5:e5:
aa:6d:35:d1:97:06:30:18:b3:c3:9c:40:70:90:dd:
05:31:39:c1:55:7d:80:14:0b:3e:2c:fc:34:43:ef:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1D:04:E9:B4:FA:FA:A7:09:33:29:05:E2:46:D5:09:2C:27:8C:72
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.24.0/22
13.141.32.0/22
13.141.56.0/21
13.141.72.0/21
13.141.96.0/22
13.141.104.0-13.141.119.255
169.40.33.0-169.40.35.255
169.40.37.0/24
169.40.39.0-169.40.41.255
169.40.43.0/24
169.40.59.0/24
169.40.68.0-169.40.79.255
169.40.96.0/24
169.40.107.0/24
169.40.111.0/24
169.40.115.0/24
169.40.124.0/24
169.40.136.0/24
169.40.142.0/23
169.40.150.0-169.40.152.255
169.40.155.0/24
169.40.159.0/24
169.40.200.0/22
169.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:3f:ff:a1:49:3f:bd:91:c7:04:3b:e7:da:fb:d8:44:0f:41:
8f:25:56:1d:13:17:16:2f:df:40:c9:d3:7b:c7:f8:c8:51:f3:
3d:15:df:9e:78:a8:2f:bc:a8:55:58:63:76:72:f0:61:02:23:
63:35:00:9f:c5:c5:d4:34:d8:be:04:3c:23:ae:b9:b8:40:71:
1d:e0:ff:9a:f4:ff:cc:e2:7a:ba:94:7a:bd:7f:5c:7b:05:bf:
e2:5e:31:3c:d1:a2:76:f6:18:f9:38:f0:55:92:e3:0a:bc:cb:
74:37:9c:01:b9:be:0f:ba:bf:7e:23:db:28:24:da:a4:57:de:
ff:ae:62:6f:38:d4:ee:82:06:2b:ad:0c:f8:57:30:af:f3:3e:
ff:02:55:53:bc:2d:ea:3a:86:f8:09:26:db:7b:06:ac:21:d8:
71:1d:56:8f:50:72:7c:be:d6:54:4b:2b:b5:91:3e:83:76:08:
29:fd:e6:53:12:38:ae:9d:84:7b:bf:7b:46:ee:d8:8e:a1:01:
84:db:31:dd:19:f5:7c:9f:a4:82:39:a4:1f:81:94:60:24:d9:
c1:f3:c9:84:db:97:5e:74:00:94:df:69:35:c0:9a:46:29:cc:
77:f0:4f:d8:b8:80:a1:99:2e:cb:1a:6f:53:80:10:29:e8:4f:
98:c4:00:95
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIUBSmmXHtWK+MwpK66QkvV19JQ+nUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA1MTMwNjA0MTlaFw0yNzA1MTIwNjA5MTlaMDMxMTAvBgNV
BAMTKDdDMUQwNEU5QjRGQUZBQTcwOTMzMjkwNUUyNDZENTA5MkMyNzhDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfk10iZuXBX6ejufz2TTciHru
P45sPlZQOe8o0+WzDQf6sctuGd3E+V+tgBgQcAqn7lnknosxf72iaes2UiF08cQI
HPsewTe+wMbvPk8FvmOy64yaZMiWBKopvgyaY/yfa/iCW9+NBdeMesfB9v1EP/n+
chkwRWA1yP0U+2+zHwF4fyCZ8MgWQuyXb/NF3qPZo2AnmzxFaLKvz0oCdWWdDgzl
O1GQ//q09Z2Lklowjc5JC8fSj0ttUTQRBFZFfO4H0dut4Pb3PW+0KGoLVez8jL1H
L7Wj/XuN4PaVeJyl5aptNdGXBjAYs8OcQHCQ3QUxOcFVfYAUCz4s/DRD76YhAgMB
AAGjggLjMIIC3zAdBgNVHQ4EFgQUfB0E6bT6+qcJMykF4kbVCSwnjHIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjCB1QYIKwYBBQUHAQcBAf8EgcUwgcIwgb8EAgABMIG4AwQCDY0YAwQCDY0gAwQD
DY04AwQDDY1IAwQCDY1gMAwDBAMNjWgDBAMNjXAwDAMEAKkoIQMEAqkoIAMEAKko
JTAMAwQAqSgnAwQBqSgoAwQAqSgrAwQAqSg7MAwDBAKpKEQDBASpKEADBACpKGAD
BACpKGsDBACpKG8DBACpKHMDBACpKHwDBACpKIgDBAGpKI4wDAMEAakolgMEAKko
mAMEAKkomwMEAKkonwMEAqkoyAMEBKko4DANBgkqhkiG9w0BAQsFAAOCAQEAcD//
oUk/vZHHBDvn2vvYRA9BjyVWHRMXFi/fQMnTe8f4yFHzPRXfnnioL7yoVVhjdnLw
YQIjYzUAn8XF1DTYvgQ8I665uEBxHeD/mvT/zOJ6upR6vX9cewW/4l4xPNGidvYY
+TjwVZLjCrzLdDecAbm+D7q/fiPbKCTapFfe/65ibzjU7oIGK60M+Fcwr/M+/wJV
U7wt6jqG+Akm23sGrCHYcR1Wj1ByfL7WVEsrtZE+g3YIKf3mUxI4rp2Ee797Ru7Y
jqEBhNsx3Rn1fJ+kgjmkH4GUYCTZwfPJhNuXXnQAlN9pNcCaRinMd/BP2LiAoZku
yxpvU4AQKehPmMQAlQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:25:21 2026 by rpki-client