Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313734.roa
File:                     352e38332e3231392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          vx5YXfvuTa6mhlJ55pli14SPnOVKpar0bJolWGxpqFo=
Subject key identifier:   5C:15:D9:79:EF:AD:09:4D:8E:6D:4E:1E:CC:99:BE:EF:29:A0:90:FA
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       78D31160F90B52755EEFA6E056CD5E0578ED9ABF
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313734.roa
Signing time:             Tue 10 Feb 2026 10:07:13 +0000
ROA not before:           Tue 10 Feb 2026 10:02:13 +0000
ROA not after:            Tue 09 Feb 2027 10:07:13 +0000
asID:                     174
IP address blocks:        5.83.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d3:11:60:f9:0b:52:75:5e:ef:a6:e0:56:cd:5e:05:78:ed:9a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Feb 10 10:02:13 2026 GMT
            Not After : Feb  9 10:07:13 2027 GMT
        Subject: CN=5C15D979EFAD094D8E6D4E1ECC99BEEF29A090FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:5f:39:8a:17:1b:36:ed:b8:a5:b1:dd:2f:
                    00:69:b0:1c:44:75:74:6e:a1:51:e6:e1:b2:c1:68:
                    7d:9d:08:05:a0:f5:71:9c:ce:a6:f8:8c:1b:51:a5:
                    73:52:1d:ec:39:ee:b0:56:80:c7:22:06:5c:79:89:
                    a7:3a:33:ff:b5:00:9f:dd:92:8a:39:c1:ea:b8:13:
                    52:44:6e:bb:07:e3:36:0a:bf:dc:eb:30:ba:95:84:
                    e1:ee:a8:9a:42:d6:ca:ff:67:f0:f7:4c:0e:72:f5:
                    47:4b:f1:c5:9d:a4:fc:4f:0d:3c:1d:2c:8e:b9:e9:
                    41:21:d2:bf:e7:56:87:2a:4a:40:d5:13:a7:91:01:
                    0c:c3:1a:0c:b0:8d:a7:bd:f1:a1:c1:b4:3a:84:ab:
                    44:c3:2f:29:f7:00:23:69:34:f7:9f:c0:11:52:e8:
                    70:b4:db:1a:c5:59:12:d7:7b:35:c2:0c:c5:cc:71:
                    fa:15:af:65:8f:50:69:b6:c8:01:50:6f:29:76:d3:
                    ec:d7:41:e5:a5:3e:a4:34:c7:c6:9f:06:48:33:fc:
                    03:a0:f8:47:3a:36:83:a0:60:48:ee:75:cb:05:fc:
                    9d:22:23:22:49:4a:04:04:62:23:2e:35:67:79:6e:
                    b4:59:d4:b3:0a:a7:66:fc:42:2f:6d:cf:d3:25:44:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:D9:79:EF:AD:09:4D:8E:6D:4E:1E:CC:99:BE:EF:29:A0:90:FA
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:cd:78:c8:68:a7:2f:64:e2:22:d4:2f:7f:8b:6e:29:fa:
         5a:60:e1:aa:77:fd:23:46:67:38:30:99:01:78:eb:47:af:24:
         2f:b1:55:7e:84:b3:04:ae:f6:18:8d:88:ac:db:42:a0:51:e8:
         0c:68:36:af:db:68:6e:1b:3e:0c:bc:3a:cf:87:e4:e2:77:e7:
         e1:ff:f4:f2:34:44:48:94:fa:51:93:18:7e:54:42:85:2f:46:
         f3:6d:c3:a8:50:95:4d:97:08:b0:5a:ba:d9:eb:7c:19:57:3f:
         2a:96:44:22:66:8b:75:ec:d6:74:68:aa:50:be:a2:04:24:e4:
         f3:ae:26:81:ff:c1:6a:5b:11:ff:d1:e3:55:43:da:fc:44:94:
         1a:a2:80:59:66:ee:88:8b:4d:4b:42:63:61:c3:20:5b:59:a2:
         7d:e9:b0:69:31:3b:57:17:24:72:f3:cb:ed:1a:2b:1f:9e:7e:
         97:25:4f:9f:84:d7:81:23:78:4b:23:a4:8c:b8:65:2f:eb:c2:
         d9:5a:37:3e:e3:d0:4a:03:33:43:23:43:00:e6:86:3c:b4:8c:
         57:1e:21:91:d8:49:b0:e5:39:86:e1:f4:82:d3:92:05:da:ed:
         9c:f5:6c:06:19:8a:b9:af:10:b9:b0:15:17:13:f6:54:71:a3:
         f4:66:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:46 2026 by rpki-client