Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216104.roa
File:                     AS216104.roa (raw, json)
Hash identifier:          MTTZDKlYs/Lmts9chqrWn9P0fbMiEW+yK2xAqVgRKO0=
Subject key identifier:   1B:01:C7:E8:59:FE:2E:CB:D1:BE:A7:87:10:F1:25:6B:69:2D:DB:11
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6E47220D2E01D6B67349E044315E78299F530D39
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216104.roa
Signing time:             Fri 28 Aug 2026 13:49:30 +0000
ROA not before:           Fri 28 Aug 2026 13:44:30 +0000
ROA not after:            Fri 27 Aug 2027 13:49:30 +0000
asID:                     216104
IP address blocks:        89.117.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:47:22:0d:2e:01:d6:b6:73:49:e0:44:31:5e:78:29:9f:53:0d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Aug 28 13:44:30 2026 GMT
            Not After : Aug 27 13:49:30 2027 GMT
        Subject: CN=1B01C7E859FE2ECBD1BEA78710F1256B692DDB11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:a0:6c:f7:9a:65:d3:e4:0f:c6:4b:0d:00:
                    09:b6:4c:15:49:3c:27:be:53:26:18:88:aa:6e:a6:
                    83:7a:8d:fd:a7:54:22:fc:37:64:a9:cb:2b:af:8d:
                    af:d5:74:10:9f:0d:2d:a8:1a:12:00:27:c5:df:f7:
                    d5:31:ee:03:8e:3c:31:74:da:f9:a1:51:e8:44:6a:
                    5a:4b:53:c9:b0:db:8e:6c:1e:15:b8:2f:c6:2a:cd:
                    77:38:87:8d:86:d5:92:42:c3:71:c0:b9:93:18:41:
                    d4:cf:f6:78:da:04:e4:3a:05:80:92:f4:09:9a:e4:
                    12:8b:48:8e:a0:68:25:a2:e7:bd:83:29:65:7e:41:
                    e5:0f:59:09:9d:8b:c0:11:36:11:81:7a:b2:db:0d:
                    8b:02:71:bb:9b:0a:e4:dd:e0:2c:ba:a8:04:9c:1a:
                    8c:5b:03:a3:6b:da:7c:21:67:99:4d:08:d3:00:78:
                    f0:5f:6d:fd:fe:82:bb:65:8e:91:02:4c:5c:76:47:
                    c8:2d:70:ee:4d:52:67:3d:99:87:76:be:b5:69:e7:
                    9e:93:8c:9c:36:a5:70:98:01:ad:27:ea:98:68:b7:
                    50:59:6e:ee:3b:b7:46:9e:21:b1:01:26:2f:85:a8:
                    2c:4c:60:6c:d4:7e:9b:00:02:c8:1d:20:e6:7b:d2:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:C7:E8:59:FE:2E:CB:D1:BE:A7:87:10:F1:25:6B:69:2D:DB:11
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS216104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:f3:33:69:de:fe:8d:87:c2:85:35:04:37:a2:32:b4:a6:60:
         d6:34:c0:5c:82:bf:a7:e1:35:f6:74:31:a4:fd:91:2b:76:dd:
         6b:02:23:76:27:7a:5c:1c:05:00:97:56:3c:cb:5c:f9:fb:45:
         35:70:5e:5e:1d:7e:67:db:a0:4e:fc:3a:5a:6e:dd:62:ae:ab:
         c3:b9:ef:e8:6e:f2:34:70:9b:1d:4f:ee:21:40:0f:50:4d:f1:
         d7:e8:93:ed:4c:8c:24:38:86:25:04:ee:0a:ea:5b:df:c0:85:
         a0:98:0a:cf:42:c8:e7:18:41:16:63:d2:73:f0:7d:f7:94:a4:
         69:da:88:1d:61:84:1b:3a:74:c4:34:00:e1:ee:fc:e0:27:f5:
         60:73:dd:cb:9f:90:e6:dc:24:1b:19:72:f5:a3:d2:17:fb:03:
         97:fd:a9:95:c0:a0:03:2b:1d:bc:b0:0a:f3:3d:ef:83:9a:c4:
         48:ea:e2:ac:a0:e0:07:30:d2:0e:0e:00:4b:53:93:75:73:f5:
         ff:f0:5d:ea:09:21:6b:ad:57:d8:10:ac:9a:91:8a:47:4a:39:
         ca:31:9d:97:c7:69:e7:a7:3f:d7:da:22:14:28:da:2a:75:20:
         df:88:17:9b:47:4e:52:48:39:06:96:ff:dd:3a:48:f1:3a:cf:
         94:c5:df:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:18 2026 by rpki-client