Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3138302e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          /8/73mrgUzIg/CefL+pW2O6fsyQob6/77oNVUmRK6pM=
Subject key identifier:   40:84:D2:AA:26:59:B9:AB:C4:45:A8:47:D1:BE:C6:C1:24:3E:C6:77
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       22D2E0E9E8116E9597688F59CCAA2E8F946D1ABF
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     5650
IP address blocks:        169.40.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:e0:e9:e8:11:6e:95:97:68:8f:59:cc:aa:2e:8f:94:6d:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=4084D2AA2659B9ABC445A847D1BEC6C1243EC677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:8e:5f:5c:cf:2e:a7:c4:db:ff:76:7b:f4:
                    b1:bd:96:92:78:9f:84:ac:07:87:93:ff:14:d9:6e:
                    df:32:4a:3b:61:cf:ce:3a:b2:92:f0:ce:b4:6b:fc:
                    c7:37:b6:e5:79:44:ee:95:cb:68:60:3b:ba:05:e7:
                    3f:58:04:8f:b2:04:be:1e:3f:7d:48:a2:39:6f:73:
                    4d:89:8e:52:67:0c:3e:d3:11:82:be:66:8f:7c:f2:
                    07:66:86:0b:57:18:bc:a5:11:b0:6a:16:0b:6c:b4:
                    8d:5d:4e:4b:e3:97:57:22:e7:32:ca:14:88:70:9c:
                    3b:66:e5:4b:e4:92:87:bf:65:35:76:7f:68:9e:99:
                    9a:ed:ec:44:e7:1a:e1:fd:c9:d3:0b:75:b2:25:70:
                    cf:08:1a:4a:32:ca:16:5b:42:1c:97:bf:86:b5:47:
                    68:56:e5:6e:5a:a1:b7:67:0c:f0:6d:04:57:e3:b2:
                    cb:0b:59:29:17:d3:8d:96:81:be:8e:82:74:27:86:
                    ea:d2:15:50:8b:57:ee:b2:6e:2c:e7:52:13:a6:5a:
                    a2:b6:66:0e:32:62:1c:b7:4a:62:ba:13:a2:9b:74:
                    bd:6c:67:72:d7:6d:e0:e1:ff:52:d7:e7:1d:a7:13:
                    97:dd:0d:f0:23:2e:74:5a:01:ce:0f:31:ef:31:28:
                    de:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:84:D2:AA:26:59:B9:AB:C4:45:A8:47:D1:BE:C6:C1:24:3E:C6:77
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:59:4e:a9:0a:18:54:2c:d3:6a:c9:bf:b1:ae:eb:10:31:ac:
         17:96:e8:0d:9f:15:1e:e0:8f:fb:99:cf:4b:2b:0a:c7:64:e6:
         cd:b2:09:df:74:b6:d7:30:79:57:65:b7:ff:9b:60:4f:56:71:
         ab:49:9a:5f:61:59:9e:87:e2:12:e8:0a:29:e0:0b:99:8e:4d:
         b2:8a:a4:2c:3c:e4:73:4c:b9:97:fe:e2:63:bf:8b:d4:dc:cf:
         4c:0f:7d:5f:08:db:90:77:af:41:1f:cc:f7:29:65:8a:fe:90:
         89:91:d9:3e:cf:0f:ca:84:fe:50:f3:42:a6:13:41:ae:dd:99:
         fe:75:9e:17:72:3b:f8:71:81:6f:a4:72:bc:63:1a:45:54:f2:
         e2:f3:22:49:4e:08:2a:1e:6b:2f:f4:8a:20:55:9e:6c:7b:cc:
         2b:b2:95:62:05:0c:bd:6d:f1:ea:98:5d:25:9b:56:e9:75:2d:
         fc:f8:09:0b:ce:67:ae:15:f8:55:a0:ff:a7:e4:58:15:fe:a5:
         ab:12:c2:dd:4a:9d:9b:f1:8a:bb:dd:4c:a5:c2:82:45:18:1f:
         11:ab:c3:28:0c:f3:a4:18:41:e0:4e:34:51:28:39:1d:7a:2f:
         28:f9:cb:c7:40:03:82:d1:44:cc:fe:0f:7c:d6:c9:58:83:f8:
         e1:09:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:43 2026 by rpki-client