Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402976.roa
File:                     AS402976.roa (raw, json)
Hash identifier:          ROu/8YKGoDyXQDGi/Xtf3Ctjy4+D9xfuWKjvznn+A/g=
Subject key identifier:   61:FB:CE:45:AB:BE:7F:63:F3:DA:F6:FC:F7:63:DB:3D:B5:7D:02:C5
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       092C41D29EA93713DCCE4373AE32D176356E4849
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402976.roa
Signing time:             Wed 16 Sep 2026 16:12:27 +0000
ROA not before:           Wed 16 Sep 2026 16:07:27 +0000
ROA not after:            Wed 15 Sep 2027 16:12:27 +0000
asID:                     402976
IP address blocks:        86.38.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2c:41:d2:9e:a9:37:13:dc:ce:43:73:ae:32:d1:76:35:6e:48:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 16 16:07:27 2026 GMT
            Not After : Sep 15 16:12:27 2027 GMT
        Subject: CN=61FBCE45ABBE7F63F3DAF6FCF763DB3DB57D02C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:96:c1:bb:7b:f9:6f:87:0c:bd:89:ce:93:
                    52:4e:5d:80:9e:ab:7d:ff:41:99:03:16:ea:2f:ea:
                    f9:a7:ce:1d:b9:52:50:58:63:61:b0:3a:62:bc:7c:
                    7f:ca:95:bf:5b:c3:b7:9e:68:29:77:11:8e:2e:4d:
                    bd:44:be:77:75:39:24:93:6d:00:c9:6a:2b:d4:0d:
                    96:f3:ee:6a:99:35:6e:9c:28:a5:30:1b:d5:84:e9:
                    7b:92:ad:57:4f:72:4f:12:7e:f3:91:92:09:8c:5c:
                    17:8c:a1:bf:79:bf:cd:8c:ad:2f:92:84:71:c0:4f:
                    40:d4:2b:d0:dc:fb:35:c8:40:d5:dd:d0:25:05:1c:
                    8b:81:b2:f5:06:80:e6:99:94:1e:7c:0a:05:3c:de:
                    f9:04:39:bf:4b:d7:6f:b1:33:d8:33:5c:5a:cb:01:
                    67:83:46:ec:77:07:ea:0a:54:5b:a0:b9:ba:d6:48:
                    41:7f:a1:d8:ec:04:08:17:09:39:94:8d:d1:5d:01:
                    d3:bb:44:06:a9:4e:7e:bd:18:e6:11:9b:50:c4:ab:
                    34:5b:6f:e5:e3:c1:f6:da:9f:17:d1:91:84:9d:7a:
                    28:f2:51:d8:71:08:75:42:ee:8a:2e:55:db:24:39:
                    7d:03:20:2d:ad:e8:70:f2:ed:21:75:fb:4f:e0:21:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:CE:45:AB:BE:7F:63:F3:DA:F6:FC:F7:63:DB:3D:B5:7D:02:C5
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402976.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d2:93:5d:06:3a:86:39:af:d6:53:d5:47:37:65:73:5c:33:
         e7:df:b5:e9:6e:c7:ca:3a:08:37:ab:71:da:37:ba:cf:43:fe:
         5a:53:23:96:e9:af:d8:38:8b:ea:41:e0:b7:2a:9a:1e:50:0f:
         d0:80:a7:22:f4:47:67:9e:93:84:22:df:6f:f1:fe:85:13:45:
         97:35:f9:ea:ca:15:51:db:74:9a:28:9c:3d:45:4b:da:7e:79:
         b4:23:86:95:42:61:b7:25:dd:95:b1:86:15:6e:8b:38:d6:c4:
         9e:1a:84:cd:5b:ba:40:25:3c:70:c3:f1:14:03:56:7c:e8:9e:
         55:11:ce:e5:ca:c6:c2:91:03:2d:75:78:b6:04:7f:86:d3:f6:
         22:01:8b:93:5a:75:df:31:1e:40:2d:c0:fc:d6:20:07:60:1a:
         38:c4:8b:95:5f:02:40:99:65:50:d9:09:8e:4e:32:06:e9:14:
         0c:8d:ec:95:9f:f8:7a:93:a4:86:15:69:92:11:bb:f8:26:e3:
         8e:76:db:4e:4e:a2:50:aa:dd:57:f2:d3:b2:95:8d:b7:8e:cc:
         0b:09:4a:3c:18:45:74:63:ff:1e:06:39:28:a0:1d:05:76:96:
         8b:96:ef:8d:65:f2:04:28:27:a4:de:c7:3c:a7:a7:1d:c9:a1:
         ce:e2:82:c0
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUCSxB0p6pNxPczkNzrjLRdjVuSEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA5MTYxNjA3MjdaFw0yNzA5MTUxNjEyMjdaMDMxMTAvBgNV
BAMTKDYxRkJDRTQ1QUJCRTdGNjNGM0RBRjZGQ0Y3NjNEQjNEQjU3RDAyQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXO5bBu3v5b4cMvYnOk1JOXYCe
q33/QZkDFuov6vmnzh25UlBYY2GwOmK8fH/Klb9bw7eeaCl3EY4uTb1Evnd1OSST
bQDJaivUDZbz7mqZNW6cKKUwG9WE6XuSrVdPck8SfvORkgmMXBeMob95v82MrS+S
hHHAT0DUK9Dc+zXIQNXd0CUFHIuBsvUGgOaZlB58CgU83vkEOb9L12+xM9gzXFrL
AWeDRux3B+oKVFugubrWSEF/odjsBAgXCTmUjdFdAdO7RAapTn69GOYRm1DEqzRb
b+XjwfbanxfRkYSdeijyUdhxCHVC7oouVdskOX0DIC2t6HDy7SF1+0/gIarjAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUYfvORau+f2Pz2vb892PbPbV9AsUwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQwMjk3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm/zANBgkqhkiG9w0B
AQsFAAOCAQEAL9KTXQY6hjmv1lPVRzdlc1wz59+16W7HyjoIN6tx2je6z0P+WlMj
lumv2DiL6kHgtyqaHlAP0ICnIvRHZ56ThCLfb/H+hRNFlzX56soVUdt0miicPUVL
2n55tCOGlUJhtyXdlbGGFW6LONbEnhqEzVu6QCU8cMPxFANWfOieVRHO5crGwpED
LXV4tgR/htP2IgGLk1p13zEeQC3A/NYgB2AaOMSLlV8CQJllUNkJjk4yBukUDI3s
lZ/4epOkhhVpkhG7+CbjjnbbTk6iUKrdV/LTspWNt47MCwlKPBhFdGP/HgY5KKAd
BXaWi5bvjWXyBCgnpN7HPKenHcmhzuKCwA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 01:07:37 2026 by rpki-client