Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS399359.roa
File:                     AS399359.roa (raw, json)
Hash identifier:          Rru+awcTVAvFpmTkpwz0HdoZ9ZGn3BaisuK5Sp/A+S8=
Subject key identifier:   53:D7:76:19:7E:4F:5F:5B:D6:DF:9F:10:B8:6E:40:7B:4D:5A:EB:6E
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2465B5D820EB630526ED51E72BE8F9E48A6C67C5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS399359.roa
Signing time:             Fri 04 Sep 2026 12:42:52 +0000
ROA not before:           Fri 04 Sep 2026 12:37:52 +0000
ROA not after:            Fri 03 Sep 2027 12:42:52 +0000
asID:                     399359
IP address blocks:        89.116.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:65:b5:d8:20:eb:63:05:26:ed:51:e7:2b:e8:f9:e4:8a:6c:67:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep  4 12:37:52 2026 GMT
            Not After : Sep  3 12:42:52 2027 GMT
        Subject: CN=53D776197E4F5F5BD6DF9F10B86E407B4D5AEB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:6c:5d:ed:68:5d:5e:8b:24:a5:64:61:c7:
                    22:ab:fa:b3:65:df:06:ca:ec:cf:d7:14:70:27:7f:
                    fa:d6:1c:53:8b:24:71:69:78:36:44:1b:ff:76:ac:
                    33:a8:b4:66:4f:04:f4:44:e3:f3:6f:e0:6b:0a:4c:
                    3d:19:c6:20:13:56:6a:60:58:2a:b0:d5:e5:34:66:
                    25:c0:96:8e:97:4c:af:b0:57:30:57:0a:80:02:c7:
                    c6:7f:04:90:32:e4:86:57:22:e8:5f:10:7f:42:1f:
                    37:3a:05:ed:cb:5d:42:ea:73:a7:1c:3b:aa:5d:46:
                    ba:1d:18:0c:a9:6b:82:dc:47:d7:bd:a2:20:c6:27:
                    15:b6:fa:f7:f3:2a:fa:fd:c0:a1:1c:28:be:d9:34:
                    e5:6d:89:85:45:cf:de:cd:0d:af:ce:a4:64:f5:72:
                    83:af:69:1a:48:07:68:b9:dd:6b:da:73:35:eb:3a:
                    39:2e:a4:3e:b0:5f:05:37:95:20:94:27:4a:eb:a0:
                    74:e8:0a:18:ae:fa:80:d7:1f:33:84:d2:ab:30:04:
                    d5:62:93:5e:90:f4:f7:1a:69:60:04:61:ef:bb:21:
                    64:b0:5a:f8:49:07:b5:06:54:e9:28:2a:ba:56:9e:
                    76:1e:3a:13:0a:68:f4:27:64:a6:e7:05:18:00:c6:
                    7d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D7:76:19:7E:4F:5F:5B:D6:DF:9F:10:B8:6E:40:7B:4D:5A:EB:6E
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS399359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:e9:d2:57:6a:19:a5:fc:3f:a8:12:73:0f:58:62:04:85:
         82:7b:a6:0f:f7:42:10:9c:83:be:56:d2:78:e7:4c:34:93:41:
         65:39:92:00:97:97:fe:bf:4b:fc:f8:74:d4:8d:52:38:fe:e5:
         70:36:15:e3:af:c3:f3:73:0c:d9:47:a1:6c:7f:2d:81:ab:c0:
         ba:5c:bc:10:e3:89:15:0b:b2:c4:d5:55:61:60:93:68:e2:f0:
         fe:7f:1c:3e:08:35:fd:43:cc:33:e3:9b:d0:7e:55:7e:a1:3c:
         92:2e:ad:c5:57:63:a2:cd:b9:9f:91:3a:b5:67:31:4a:1b:ca:
         b1:08:4c:20:1b:1d:68:e3:e1:60:dd:73:00:63:a2:47:2c:84:
         33:9e:a6:8b:6b:fe:51:dc:14:ea:e4:f2:df:5a:ce:81:d5:3a:
         ff:80:b5:89:58:be:da:93:ea:d9:49:33:fa:7e:00:f0:9f:99:
         37:96:a0:24:6b:ae:33:0b:19:7b:1a:7c:de:f4:73:09:ad:6b:
         f5:3a:89:82:a5:69:61:f7:47:31:fe:e5:7a:1e:44:8d:f6:b7:
         2d:60:e9:6b:7a:b3:54:ae:86:0e:73:e3:4a:52:57:c6:eb:7a:
         4a:e9:6c:18:f2:18:20:35:21:d9:d5:78:e3:7f:74:df:32:f1:
         ca:e5:bc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:16 2026 by rpki-client