$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: 95nkkRAghkeg0qrElmnfnueqQcHstD+oWPrsyz3IBLU= Subject key identifier: D8:AA:1E:0D:D5:55:74:86:25:44:29:61:94:49:B8:AD:03:09:17:16 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 2A399C6891AF6235DE27A1DA6660B430D92E6F62 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa Signing time: Tue 06 Oct 2026 18:27:27 +0000 ROA not before: Tue 06 Oct 2026 18:22:27 +0000 ROA not after: Tue 05 Oct 2027 18:27:27 +0000 asID: 9009 IP address blocks: 13.141.62.0/24 maxlen: 24 169.40.116.0/24 maxlen: 24 169.40.128.0/24 maxlen: 24 169.40.130.0/23 maxlen: 24 169.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:9c:68:91:af:62:35:de:27:a1:da:66:60:b4:30:d9:2e:6f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 6 18:22:27 2026 GMT Not After : Oct 5 18:27:27 2027 GMT Subject: CN=D8AA1E0DD5557486254429619449B8AD03091716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8f:40:21:ed:c0:8f:a8:68:49:90:34:4a:ce: 14:be:06:f4:84:a0:1d:8b:3f:f6:31:e8:ed:91:8f: 0e:13:c4:ba:7d:86:c8:3b:99:c9:54:99:fa:2a:08: 1e:89:02:ce:53:07:6b:4b:c4:9e:3f:09:48:83:bc: bc:47:9f:92:e8:c8:b6:c1:63:fe:a9:39:33:29:1f: a6:b4:63:a2:14:9c:0a:f2:d2:0e:b2:64:01:ee:e8: 8a:90:c3:bd:42:76:fc:dc:ca:6e:9d:34:3f:94:7d: c5:04:30:af:5f:b5:a5:c9:5b:cf:9a:e7:c3:4b:11: b0:0f:8d:c9:11:6f:01:7b:c2:3e:6d:b9:9d:72:25: 20:2d:33:ad:8b:b6:2f:ab:96:6c:39:a5:6e:5d:21: 72:0b:a8:d1:08:c2:db:2b:0e:b9:35:ec:b4:50:3f: 84:c2:88:4d:3d:64:6a:35:f1:cb:4a:27:04:36:99: 56:98:0c:7e:c4:4c:91:7a:a0:27:4a:6d:d2:5d:fc: fe:99:45:4a:4d:cd:d7:cd:15:50:aa:cc:97:41:f8: 5e:ef:7f:e8:03:34:86:9f:34:cc:b2:0d:aa:8d:0c: 43:92:31:14:48:90:79:82:63:0f:44:55:6f:48:08: 15:37:e1:1c:22:0b:f5:5b:46:12:da:73:58:7e:31: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AA:1E:0D:D5:55:74:86:25:44:29:61:94:49:B8:AD:03:09:17:16 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.62.0/24 169.40.116.0/24 169.40.128.0/24 169.40.130.0/23 169.40.154.0/24 Signature Algorithm: sha256WithRSAEncryption 26:97:68:e4:40:85:ef:5d:9f:76:68:7e:2a:89:8e:c9:1a:16: fb:ea:da:7a:c5:48:b2:da:64:ce:d0:9e:4d:fe:49:ca:fa:80: 33:fa:f0:dc:44:63:2f:06:f2:57:0d:27:18:60:5a:e4:29:e0: 59:2d:9c:21:80:fb:c7:ac:4d:b3:dc:01:90:77:55:17:4d:20: fd:3b:c7:63:4b:c7:93:e5:4a:9f:1c:7f:c4:22:53:c8:cd:46: 51:1f:5c:40:c5:90:04:d9:29:2d:e1:ba:f0:f3:02:1c:9e:55: 59:2f:9f:3d:54:ce:1f:a9:bb:13:34:f3:b6:69:c6:92:69:f8: 71:43:b2:48:c6:f2:79:3b:b4:76:ca:33:45:60:ad:dd:40:2a: 3d:1a:79:f9:a0:7c:38:2f:fa:43:0e:05:5d:55:ca:5e:13:6e: 15:17:6b:44:98:eb:91:32:98:62:fc:9b:16:3a:a7:43:5c:86: 88:08:a8:45:02:39:57:7b:c6:73:a0:84:20:7b:ad:26:87:a4: 3b:43:0d:07:0d:6c:b6:69:d9:f8:74:bc:ab:90:8d:a8:17:cc: 56:70:1a:5c:b4:3a:2f:96:1c:1e:cf:b4:62:29:f9:e1:b5:94: 64:eb:6e:84:71:c5:69:7b:80:07:43:24:f9:8a:26:22:22:70: 27:8b:60:12 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUKjmcaJGvYjXeJ6HaZmC0MNkub2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMDYxODIyMjdaFw0yNzEwMDUxODI3MjdaMDMxMTAvBgNV BAMTKEQ4QUExRTBERDU1NTc0ODYyNTQ0Mjk2MTk0NDlCOEFEMDMwOTE3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTj0Ah7cCPqGhJkDRKzhS+BvSE oB2LP/Yx6O2Rjw4TxLp9hsg7mclUmfoqCB6JAs5TB2tLxJ4/CUiDvLxHn5LoyLbB Y/6pOTMpH6a0Y6IUnAry0g6yZAHu6IqQw71Cdvzcym6dND+UfcUEMK9ftaXJW8+a 58NLEbAPjckRbwF7wj5tuZ1yJSAtM62Lti+rlmw5pW5dIXILqNEIwtsrDrk17LRQ P4TCiE09ZGo18ctKJwQ2mVaYDH7ETJF6oCdKbdJd/P6ZRUpNzdfNFVCqzJdB+F7v f+gDNIafNMyyDaqNDEOSMRRIkHmCYw9EVW9ICBU34RwiC/VbRhLac1h+MdBBAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU2KoeDdVVdIYlRClhlEm4rQMJFxYwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAANjT4DBACpKHQDBACpKIAD BAGpKIIDBACpKJowDQYJKoZIhvcNAQELBQADggEBACaXaORAhe9dn3ZofiqJjska Fvvq2nrFSLLaZM7Qnk3+Scr6gDP68NxEYy8G8lcNJxhgWuQp4FktnCGA+8esTbPc AZB3VRdNIP07x2NLx5PlSp8cf8QiU8jNRlEfXEDFkATZKS3huvDzAhyeVVkvnz1U zh+puxM087ZpxpJp+HFDskjG8nk7tHbKM0Vgrd1AKj0aefmgfDgv+kMOBV1Vyl4T bhUXa0SY65EymGL8mxY6p0NchogIqEUCOVd7xnOghCB7rSaHpDtDDQcNbLZp2fh0 vKuQjagXzFZwGly0Oi+WHB7PtGIp+eG1lGTrboRxxWl7gAdDJPmKJiIicCeLYBI= -----END CERTIFICATE-----Generated at Sun Oct 18 09:36:28 2026 by rpki-client