Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: vEYCcNB8AV8Tk4DFJgA4kd+4TTZ/ZrvrfMDbRSDZI10=
Subject key identifier: C1:B4:03:0D:3F:56:31:3E:34:80:F8:7B:92:68:69:98:E0:1D:88:AC
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 5BFCEC6637C6DD1F2998BED3B85FAC5AEF342803
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Fri 27 Mar 2026 10:18:03 +0000
ROA not before: Fri 27 Mar 2026 10:13:03 +0000
ROA not after: Fri 26 Mar 2027 10:18:03 +0000
asID: 834
IP address blocks: 13.141.20.0/22 maxlen: 24
13.141.24.0/21 maxlen: 24
13.141.32.0/21 maxlen: 24
13.141.52.0/22 maxlen: 24
13.141.56.0/21 maxlen: 24
13.141.68.0/22 maxlen: 24
13.141.72.0/21 maxlen: 24
13.141.80.0/20 maxlen: 24
13.141.96.0/20 maxlen: 24
13.141.112.0/21 maxlen: 24
13.141.120.0/22 maxlen: 24
169.40.33.0/24 maxlen: 24
169.40.34.0/24 maxlen: 24
169.40.40.0/22 maxlen: 24
169.40.48.0/23 maxlen: 24
169.40.51.0/24 maxlen: 24
169.40.56.0/22 maxlen: 24
169.40.68.0/22 maxlen: 24
169.40.72.0/21 maxlen: 24
169.40.100.0/23 maxlen: 24
169.40.107.0/24 maxlen: 24
169.40.110.0/24 maxlen: 24
169.40.112.0/24 maxlen: 24
169.40.116.0/23 maxlen: 24
169.40.119.0/24 maxlen: 24
169.40.121.0/24 maxlen: 24
169.40.122.0/23 maxlen: 24
169.40.124.0/23 maxlen: 24
169.40.136.0/24 maxlen: 24
169.40.152.0/24 maxlen: 24
169.40.155.0/24 maxlen: 24
169.40.159.0/24 maxlen: 24
169.40.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:fc:ec:66:37:c6:dd:1f:29:98:be:d3:b8:5f:ac:5a:ef:34:28:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Mar 27 10:13:03 2026 GMT
Not After : Mar 26 10:18:03 2027 GMT
Subject: CN=C1B4030D3F56313E3480F87B92686998E01D88AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:0b:06:21:97:f0:2d:2e:69:fd:52:a5:cf:
b9:cc:3d:46:d6:dd:3e:af:e6:df:cb:ef:e3:24:7e:
a1:b0:8a:8e:b2:f3:5a:f4:c7:b4:be:d9:d9:b3:ad:
f4:7f:2e:78:e8:39:d3:5f:64:2f:a1:25:7c:64:70:
56:1f:2d:41:86:f4:e5:34:d8:57:c2:38:5c:b6:d0:
6f:8d:8d:83:94:62:41:91:4d:b2:94:db:39:5a:e3:
98:37:cc:ca:7c:d1:ce:ed:13:da:14:5c:92:ee:43:
7f:77:92:19:78:fe:0a:34:a9:3b:b2:47:34:70:90:
c0:6e:19:50:84:f4:3e:c8:cc:67:c1:02:38:d6:bf:
77:f6:2c:94:b7:4b:e5:64:b3:10:11:6f:cf:47:1f:
5e:3d:b6:f2:d5:8a:17:d4:36:b6:52:99:01:60:98:
3c:55:39:2f:f8:24:86:ab:88:44:85:7a:39:1b:be:
1a:5a:72:99:01:d6:34:63:4d:e3:35:78:5d:07:01:
6b:ca:bf:c4:9d:40:bb:bc:55:68:73:1a:51:d8:b5:
77:eb:74:8a:5d:97:e0:82:ee:9e:33:59:56:d9:8c:
46:ec:f9:ae:16:36:9e:28:8f:94:2d:91:6b:2d:c8:
8d:5c:e1:dc:97:1c:d0:c6:8f:3a:5b:5c:67:21:84:
2b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:03:0D:3F:56:31:3E:34:80:F8:7B:92:68:69:98:E0:1D:88:AC
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.20.0-13.141.39.255
13.141.52.0-13.141.63.255
13.141.68.0-13.141.123.255
169.40.33.0-169.40.34.255
169.40.40.0/22
169.40.48.0/23
169.40.51.0/24
169.40.56.0/22
169.40.68.0-169.40.79.255
169.40.100.0/23
169.40.107.0/24
169.40.110.0/24
169.40.112.0/24
169.40.116.0/23
169.40.119.0/24
169.40.121.0-169.40.125.255
169.40.136.0/24
169.40.152.0/24
169.40.155.0/24
169.40.159.0-169.40.163.255
Signature Algorithm: sha256WithRSAEncryption
5a:28:9d:72:44:14:ac:50:64:fc:a3:d7:4c:44:f3:a4:5d:54:
d4:00:3a:29:b9:b6:59:96:5e:4a:32:b1:7f:4c:14:3c:4b:38:
f8:9b:cb:33:57:73:4d:9e:7b:d9:38:92:58:75:eb:83:79:f4:
be:6a:e5:1d:c4:20:76:c4:88:cb:06:95:9b:29:03:ac:09:91:
cb:67:3a:78:3d:51:8d:8c:e3:0b:ae:84:b8:e3:d1:07:06:6b:
70:9d:23:c8:6d:a1:4c:91:6e:e5:d7:c5:b6:49:1d:50:70:fa:
5c:36:51:d8:3f:57:ce:a8:15:0a:90:60:95:3c:4b:4e:63:ed:
ba:d3:ef:57:88:6d:ba:48:45:0a:75:e3:bc:76:1c:a0:b8:01:
ac:8d:7b:cb:96:f8:60:61:a3:83:f8:4c:5c:c5:f1:82:09:cf:
c7:5e:5b:52:11:cb:0f:12:c9:3c:82:3e:f7:3a:2a:5a:cf:e3:
77:23:1b:f6:80:5c:24:cb:f1:bf:73:9f:7b:b5:f3:15:9b:00:
f4:fc:1d:6c:88:37:ff:be:90:81:51:8b:a3:9c:49:17:0c:2b:
d2:0e:fa:92:d0:05:c4:7c:ff:a1:5c:a9:bd:24:a4:0a:c6:90:
ff:ed:b2:ff:68:1b:6b:69:fb:a6:25:85:51:20:47:11:6c:68:
31:46:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 23:50:28 2026 by rpki-client