Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130322e302f32332d3233203d3e2039333034.roa
File:                     3136392e34302e3130322e302f32332d3233203d3e2039333034.roa (raw, json)
Hash identifier:          9ZHScfdLxzC2Ein3/GZqVRGnqXCQmcQ9+CoDnbsFIOQ=
Subject key identifier:   3B:31:A1:FD:50:B4:37:85:35:96:B1:A6:21:FF:94:AB:4E:EC:17:90
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7172B726B10B8405D7C1AD24E047B8C7AF872089
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130322e302f32332d3233203d3e2039333034.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     9304
IP address blocks:        169.40.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:b7:26:b1:0b:84:05:d7:c1:ad:24:e0:47:b8:c7:af:87:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=3B31A1FD50B437853596B1A621FF94AB4EEC1790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cd:f3:88:19:a8:23:63:54:20:43:25:fc:74:
                    37:09:bb:3c:ab:d2:cf:ab:93:ac:ca:af:56:f1:9e:
                    7f:c2:26:7e:d0:8c:62:b6:d9:41:c8:3c:03:c0:61:
                    22:40:91:eb:28:36:29:88:ec:8c:f1:b0:99:b3:aa:
                    a2:bf:34:83:9d:52:71:06:c9:d4:17:27:33:81:a1:
                    8d:b4:c0:c6:e6:e4:f7:cc:ea:e7:30:c0:f9:92:ba:
                    88:ee:0c:ee:5d:6b:8f:d6:0a:44:d6:54:5c:29:4a:
                    5e:26:15:d6:c7:46:64:6c:89:e8:60:b2:8a:a7:96:
                    b7:01:98:19:56:d0:ac:e6:fb:1b:f5:c6:29:c6:36:
                    21:d3:7f:75:88:cc:b6:bd:19:47:2d:d7:9d:27:29:
                    46:32:25:09:b3:9c:cb:77:1d:8e:95:ea:50:4c:e5:
                    2a:9e:4a:57:55:f3:bf:b7:ae:73:22:05:dd:85:2e:
                    75:64:07:fc:69:9f:a5:6a:7b:ed:e7:00:3c:af:09:
                    f2:00:c5:46:aa:27:ac:ef:36:c2:40:c8:9e:3a:a4:
                    0c:5f:cc:2d:4a:a6:0d:52:98:7d:a4:24:28:d3:13:
                    46:4d:31:34:67:0d:8d:06:c7:4c:a4:ef:39:3e:25:
                    45:ea:29:27:f3:8b:df:a9:3f:dc:72:28:c7:6f:1f:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:31:A1:FD:50:B4:37:85:35:96:B1:A6:21:FF:94:AB:4E:EC:17:90
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130322e302f32332d3233203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:07:ea:03:3c:70:d0:90:3b:31:02:f5:4a:56:87:ff:5f:
         aa:cb:f5:f6:26:a1:b1:ef:18:3c:c8:88:41:fb:5a:bf:94:ed:
         e2:03:f1:4d:ed:1d:20:59:9e:06:5c:39:bb:55:c1:58:33:e9:
         f3:04:3f:5f:d0:89:3a:a2:34:50:2f:f6:f2:f9:a1:57:54:76:
         f2:6c:dd:58:2e:aa:40:2c:eb:f5:c7:0d:54:05:83:05:0e:44:
         ee:4e:d5:7a:6e:e4:91:26:4f:1f:e6:e2:b4:b7:62:ac:b8:3a:
         91:57:2b:87:b7:d1:81:ac:f6:b8:32:80:e0:12:04:86:55:68:
         ef:8c:fb:9e:52:e0:78:ac:24:8a:39:28:37:50:a1:1c:cf:dd:
         af:12:47:31:5a:6d:91:e9:f3:bc:2b:93:bd:27:74:42:19:0e:
         1d:85:b4:eb:25:e5:12:16:e8:5c:df:3a:f9:ff:2e:f3:39:85:
         97:42:51:b1:98:97:3f:73:4b:27:3e:2c:8d:af:7d:e1:58:ed:
         24:31:c9:5e:6e:72:4a:40:bb:3d:c1:82:e0:e4:e8:f0:5d:ef:
         35:64:a2:4b:26:f2:51:44:55:49:b6:2c:52:f4:1a:df:25:e3:
         85:67:67:3c:f9:bf:bf:a6:c0:cd:8a:ec:b8:15:42:c9:79:ec:
         d7:05:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:10 2026 by rpki-client