Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3137362e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          tQckYNlNNoi1tMT/IJlePBzb5IwPpbOjuuAi3TAuQ9g=
Subject key identifier:   C7:AB:9B:DB:22:73:CE:DC:98:90:88:CE:D0:CE:BB:3D:39:7F:E8:94
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3CCA3128ABBFB12CE422C2CEBA4AFD7235A4B7E4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:07 +0000
ROA not before:           Thu 12 Feb 2026 01:00:07 +0000
ROA not after:            Thu 11 Feb 2027 01:05:07 +0000
asID:                     5650
IP address blocks:        169.40.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ca:31:28:ab:bf:b1:2c:e4:22:c2:ce:ba:4a:fd:72:35:a4:b7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:07 2026 GMT
            Not After : Feb 11 01:05:07 2027 GMT
        Subject: CN=C7AB9BDB2273CEDC989088CED0CEBB3D397FE894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:34:e2:4f:9a:d8:64:ff:62:ef:1d:8f:14:
                    93:45:89:0e:24:e3:a8:68:bc:e8:0c:bb:88:59:ff:
                    8e:a0:a4:a1:24:68:c5:96:4a:4c:7a:25:3c:83:62:
                    da:ea:33:ef:51:88:2f:50:4d:05:1a:16:81:e6:36:
                    e2:e1:ee:04:95:1d:52:c8:0e:1c:bc:53:36:9c:15:
                    e9:ec:be:29:7d:7b:9d:9f:aa:77:a5:9a:05:66:88:
                    a9:99:28:19:79:f1:88:10:07:04:33:ea:9d:db:a3:
                    30:02:92:5b:2f:71:e8:d2:e9:51:d6:c8:8e:26:12:
                    16:6a:4c:e6:b8:82:4c:eb:47:f8:30:a7:36:38:72:
                    91:e2:52:6a:8c:a3:e5:ef:f8:6e:0e:e2:26:7d:22:
                    88:b5:41:a7:22:05:30:b5:c6:ee:00:bf:0e:1d:dd:
                    c5:98:4e:a5:2a:d8:04:0c:74:ac:5e:0e:7c:72:d2:
                    fb:a3:c0:f3:24:d8:5a:e9:f4:48:7f:73:6c:41:cb:
                    52:b1:4c:aa:15:fe:ca:f0:fc:b4:9c:07:dd:7a:78:
                    25:cc:4d:44:cb:53:c9:6e:73:ad:c8:33:da:29:1d:
                    09:79:11:0e:18:2a:a3:f0:54:d1:be:13:5e:b3:a7:
                    ea:b2:f3:25:fd:8c:d0:08:75:d1:90:70:59:e2:c0:
                    76:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AB:9B:DB:22:73:CE:DC:98:90:88:CE:D0:CE:BB:3D:39:7F:E8:94
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:15:6f:63:37:2b:f2:08:e2:5f:89:b0:89:3d:e2:d7:36:
         38:d2:b3:73:9c:eb:b1:7b:a8:4a:63:e2:53:8f:f5:76:b2:55:
         8b:a9:49:c6:07:f7:ae:3d:b1:6b:29:a6:ba:6e:7e:12:3d:81:
         17:a9:63:90:9c:ee:28:c4:15:89:22:39:7c:13:c9:1c:2c:41:
         ea:f1:95:ec:ad:b2:b2:6f:5e:db:56:e3:da:7c:e6:c9:37:53:
         a2:c0:c0:c5:5d:37:5b:d7:ca:67:fe:5f:13:5a:c7:a7:fe:ac:
         ed:b0:49:90:eb:3a:dc:49:31:e3:f6:34:11:71:c3:13:1e:f7:
         81:60:cf:ec:23:63:6a:0a:a1:e4:ec:bb:20:24:47:17:aa:af:
         ec:db:7c:a9:0b:61:ae:15:01:5a:33:40:54:9a:17:c6:f5:a5:
         8f:20:5c:9f:59:f6:ec:2b:a4:8b:db:c1:fb:3b:53:25:68:8d:
         a1:c2:d1:60:a9:d3:87:ef:2a:f8:0d:04:7c:be:f5:af:62:ea:
         9d:d6:1b:e9:9b:d8:f7:a4:ba:ba:e8:9b:2b:10:b6:10:4b:c6:
         24:68:3a:30:e2:4e:c1:21:3d:9e:e3:e1:36:92:91:91:51:c1:
         6f:b7:cd:b4:a7:e2:85:79:45:e4:84:41:69:39:03:ce:16:06:
         8f:fc:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:37 2026 by rpki-client