$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: tP2yEb6kAlgBZiVtg5sA15SbCkRUF5P1rEj1xWv0ALQ= Subject key identifier: 7C:A7:B4:03:12:09:CA:1E:0B:F2:C2:8B:DC:51:D9:F6:47:DD:C4:10 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 4274C1BA2799B2D30A2DF9ACA50C2EBE33FBBB59 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa Signing time: Fri 25 Sep 2026 20:21:40 +0000 ROA not before: Fri 25 Sep 2026 20:16:40 +0000 ROA not after: Fri 24 Sep 2027 20:21:40 +0000 asID: 834 IP address blocks: 13.141.26.0/24 maxlen: 24 13.141.69.0/24 maxlen: 24 169.40.34.0/23 maxlen: 24 169.40.38.0/23 maxlen: 24 169.40.43.0/24 maxlen: 24 169.40.44.0/24 maxlen: 24 169.40.48.0/23 maxlen: 24 169.40.58.0/23 maxlen: 24 169.40.68.0/22 maxlen: 24 169.40.72.0/21 maxlen: 24 169.40.151.0/24 maxlen: 24 169.40.196.0/22 maxlen: 24 169.40.204.0/22 maxlen: 24 169.40.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:74:c1:ba:27:99:b2:d3:0a:2d:f9:ac:a5:0c:2e:be:33:fb:bb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 25 20:16:40 2026 GMT Not After : Sep 24 20:21:40 2027 GMT Subject: CN=7CA7B4031209CA1E0BF2C28BDC51D9F647DDC410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:b1:06:5e:86:c3:35:7a:7e:94:b2:24:63: 2a:a0:93:34:f1:1e:40:93:ec:98:8c:cc:e5:03:cb: c3:13:a5:16:56:f1:5b:f2:1d:78:78:12:e0:82:67: 3b:25:8f:81:d1:34:4e:16:05:ef:c4:f6:1e:24:85: 20:00:9c:f2:e4:48:0b:3a:06:49:f2:9c:d1:f5:b7: b5:6c:12:0d:13:e9:61:1c:a6:ad:52:f6:68:f3:9f: 25:e1:31:98:51:77:b7:9e:3f:02:b4:e8:d5:de:70: 34:ad:6d:2c:2b:96:70:0f:c5:69:f8:30:98:6a:3f: 7d:a0:fc:63:9c:82:d1:b5:b4:e9:69:fe:0b:b8:19: 50:5a:84:07:4e:3f:14:27:77:e6:93:9a:2c:b8:d9: 76:36:f2:0d:bf:b8:51:62:86:58:28:4a:f0:ca:4b: a5:e6:33:eb:d8:62:96:2c:7d:f9:cf:44:39:23:a8: d1:9e:b9:ce:ab:8e:2e:c0:d3:7a:bf:13:2b:21:12: fe:24:ae:34:4f:f9:c1:66:35:5a:56:cd:78:72:04: ad:d6:1d:dc:e5:9a:78:1c:f9:34:44:28:6b:15:fb: 01:8f:43:4b:49:09:3d:d2:92:a3:f9:ca:b7:3e:a2: 42:eb:b6:4e:b8:b2:0d:d7:a4:87:b7:c9:37:58:68: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A7:B4:03:12:09:CA:1E:0B:F2:C2:8B:DC:51:D9:F6:47:DD:C4:10 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.26.0/24 13.141.69.0/24 169.40.34.0/23 169.40.38.0/23 169.40.43.0-169.40.44.255 169.40.48.0/23 169.40.58.0/23 169.40.68.0-169.40.79.255 169.40.151.0/24 169.40.196.0/22 169.40.204.0/22 169.40.224.0/20 Signature Algorithm: sha256WithRSAEncryption 59:fc:fb:ca:69:61:76:9b:cc:d2:1a:14:82:25:20:d1:32:b9: 0b:fe:bd:af:94:31:59:48:8e:d4:96:11:a0:06:99:98:92:6e: b5:37:5d:32:8d:8b:01:cb:cd:65:3f:9b:14:ea:cd:18:f2:41: f8:99:5f:2a:33:3c:27:6b:dc:26:0e:d0:71:85:5a:06:df:fa: b3:39:be:8b:05:36:bf:c3:20:bf:65:3c:4f:98:be:80:ae:4a: e5:32:e7:33:e4:48:1d:93:32:45:b7:76:dc:0f:76:91:a4:f3: 36:59:5c:41:f2:3b:3d:34:aa:ae:d0:cc:50:d3:f4:22:9f:c1: 59:b9:1b:74:c3:7a:fa:ee:32:41:4f:c9:ab:f4:4d:08:c6:d0: af:88:7c:0c:7a:e6:ac:ba:29:1e:14:9e:83:06:ef:0a:cd:40: 64:1a:37:c3:34:9f:c8:4f:e3:62:d8:cc:2a:c2:72:7c:b3:4d: 90:7c:ad:f3:ff:75:c1:6b:06:7a:b8:19:3b:f7:b4:be:c2:fc: 0b:ee:0e:06:49:c2:da:7b:2e:4e:99:9f:99:8d:53:4a:96:af: a9:41:23:72:68:32:21:d3:d9:aa:fa:11:50:a4:32:50:8a:f2: 97:6e:d6:5d:36:75:ca:ce:44:f9:2e:78:6e:ca:cc:00:f4:db: 0c:c8:31:63 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgIUQnTBuieZstMKLfmspQwuvjP7u1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MjUyMDE2NDBaFw0yNzA5MjQyMDIxNDBaMDMxMTAvBgNV BAMTKDdDQTdCNDAzMTIwOUNBMUUwQkYyQzI4QkRDNTFEOUY2NDdEREM0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREbEGXobDNXp+lLIkYyqgkzTx HkCT7JiMzOUDy8MTpRZW8VvyHXh4EuCCZzslj4HRNE4WBe/E9h4khSAAnPLkSAs6 BknynNH1t7VsEg0T6WEcpq1S9mjznyXhMZhRd7eePwK06NXecDStbSwrlnAPxWn4 MJhqP32g/GOcgtG1tOlp/gu4GVBahAdOPxQnd+aTmiy42XY28g2/uFFihlgoSvDK S6XmM+vYYpYsffnPRDkjqNGeuc6rji7A03q/EyshEv4krjRP+cFmNVpWzXhyBK3W Hdzlmngc+TREKGsV+wGPQ0tJCT3SkqP5yrc+okLrtk64sg3XpIe3yTdYaLKHAgMB AAGjggJ+MIICejAdBgNVHQ4EFgQUfKe0AxIJyh4L8sKL3FHZ9kfdxBAwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjBxBggrBgEFBQcBBwEB/wRiMGAwXgQCAAEwWAMEAA2NGgMEAA2NRQMEAakoIgME AakoJjAMAwQAqSgrAwQAqSgsAwQBqSgwAwQBqSg6MAwDBAKpKEQDBASpKEADBACp KJcDBAKpKMQDBAKpKMwDBASpKOAwDQYJKoZIhvcNAQELBQADggEBAFn8+8ppYXab zNIaFIIlINEyuQv+va+UMVlIjtSWEaAGmZiSbrU3XTKNiwHLzWU/mxTqzRjyQfiZ XyozPCdr3CYO0HGFWgbf+rM5vosFNr/DIL9lPE+YvoCuSuUy5zPkSB2TMkW3dtwP dpGk8zZZXEHyOz00qq7QzFDT9CKfwVm5G3TDevruMkFPyav0TQjG0K+IfAx65qy6 KR4UnoMG7wrNQGQaN8M0n8hP42LYzCrCcnyzTZB8rfP/dcFrBnq4GTv3tL7C/Avu DgZJwtp7Lk6Zn5mNU0qWr6lBI3JoMiHT2ar6EVCkMlCK8pdu1l02dcrORPkueG7K zAD02wzIMWM= -----END CERTIFICATE-----Generated at Sun Sep 27 08:24:47 2026 by rpki-client