Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS136809.roa
File:                     AS136809.roa (raw, json)
Hash identifier:          +XErh/3YxnT4Y7jZAO22wndFeZV0UvTOvFLrSFBUgQE=
Subject key identifier:   9E:47:99:F5:28:B4:44:29:EC:C6:6D:13:E6:E4:9D:D3:03:FB:13:E6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       50C4A2D2BBCAC0AF8FEB5717E04B15D4B352A4A0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS136809.roa
Signing time:             Tue 20 Oct 2026 16:39:37 +0000
ROA not before:           Tue 20 Oct 2026 16:34:37 +0000
ROA not after:            Tue 19 Oct 2027 16:39:37 +0000
asID:                     136809
IP address blocks:        89.116.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 12:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c4:a2:d2:bb:ca:c0:af:8f:eb:57:17:e0:4b:15:d4:b3:52:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Oct 20 16:34:37 2026 GMT
            Not After : Oct 19 16:39:37 2027 GMT
        Subject: CN=9E4799F528B44429ECC66D13E6E49DD303FB13E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:66:15:1f:3a:5b:ec:ca:3f:06:69:c6:d7:
                    13:6b:68:bf:ef:c6:04:d6:1d:d4:c8:5a:b7:8d:83:
                    04:a3:7e:6f:11:4a:e2:79:37:cf:b0:28:46:80:6f:
                    18:31:8e:2a:e6:95:fe:aa:69:b9:0f:75:c2:58:3a:
                    cb:73:e2:6b:af:47:9c:2a:5b:84:2f:31:9e:4e:ee:
                    6e:55:e7:8a:0f:87:d3:35:d3:a0:eb:71:81:bb:aa:
                    e2:b0:5d:3e:75:92:7f:30:b0:c6:76:a8:41:57:ff:
                    df:1c:c2:89:8e:f8:31:c1:a3:0c:02:42:a9:c3:f9:
                    29:be:f3:a6:46:57:dc:c0:2a:08:7f:ce:04:5e:ca:
                    ec:15:1f:5c:8e:f8:49:c1:e8:f3:29:7f:92:b7:07:
                    bf:36:89:68:43:7b:6c:2a:dc:e0:ad:8d:40:b0:52:
                    6d:60:1d:8d:88:d4:8b:45:62:10:9b:de:aa:18:cc:
                    43:58:f9:06:20:d4:97:a9:ff:dd:7f:a7:67:aa:09:
                    18:d1:55:fa:70:35:f6:42:57:45:fd:de:06:2c:67:
                    4f:4e:42:30:3c:d7:1b:61:52:a2:ec:1d:9e:19:7c:
                    3a:e0:5c:33:9e:4d:d4:56:ff:4f:64:12:1d:0e:9b:
                    01:0e:5d:fc:db:15:06:a3:8e:ee:d0:6e:38:27:92:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:47:99:F5:28:B4:44:29:EC:C6:6D:13:E6:E4:9D:D3:03:FB:13:E6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS136809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:1f:03:fb:18:25:c1:b1:49:37:06:73:ea:4b:12:9e:59:24:
         a5:07:8c:64:46:cb:1b:8b:a2:06:b3:d6:1e:43:c7:48:70:48:
         5e:de:39:1d:c7:86:ab:fd:5e:33:27:3d:0d:12:95:1f:72:58:
         c6:39:3b:84:55:1d:dc:64:06:31:68:59:a6:f6:c0:27:5b:2f:
         4d:28:7b:13:2b:2f:e9:08:39:07:af:71:5e:14:e1:58:14:eb:
         d7:bd:e8:12:dd:60:8e:14:53:d3:92:be:16:cc:c6:c4:41:a5:
         32:1d:f9:39:3c:68:b5:be:c1:a2:a2:ff:03:17:29:d2:02:7c:
         bc:c2:c2:87:61:22:83:3d:a3:95:eb:bf:9e:0d:04:06:9c:68:
         a0:00:7f:a8:8a:8d:d6:ee:8a:6c:56:a5:26:51:2c:ba:2c:6f:
         32:66:82:78:60:45:30:f0:90:21:47:fa:f4:6c:98:ef:fe:c6:
         94:39:54:50:ed:8a:77:7b:c4:d3:03:8e:52:b5:80:63:30:b4:
         4c:db:2a:bc:e1:21:18:d1:73:f2:73:4b:34:12:fc:d9:0a:4b:
         e7:53:0d:3d:4c:2b:4b:4d:39:6d:b7:67:df:3e:fd:88:f1:7a:
         93:0a:b4:c9:20:17:b1:01:2c:a3:b5:36:7a:43:2b:28:d5:ee:
         ad:e2:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:37:08 2026 by rpki-client