Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33322e302f32342d3234203d3e203136323736.roa
File:                     3136392e34302e33322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          0d7KYlQ+q7jZhQS9Cw1Tw6GgazHmx0ZYWHAz5x80/xw=
Subject key identifier:   80:2D:2B:4D:41:FD:B8:D2:E9:02:91:E8:2B:DA:68:5B:0F:46:D5:CE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       717CB38C89978F622AD2AA97B1F7C084EEDF0621
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33322e302f32342d3234203d3e203136323736.roa
Signing time:             Thu 12 Feb 2026 09:36:07 +0000
ROA not before:           Thu 12 Feb 2026 09:31:07 +0000
ROA not after:            Thu 11 Feb 2027 09:36:07 +0000
asID:                     16276
IP address blocks:        169.40.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7c:b3:8c:89:97:8f:62:2a:d2:aa:97:b1:f7:c0:84:ee:df:06:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 09:31:07 2026 GMT
            Not After : Feb 11 09:36:07 2027 GMT
        Subject: CN=802D2B4D41FDB8D2E90291E82BDA685B0F46D5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:47:04:9b:79:a0:8d:d0:83:4d:d3:ef:25:
                    9f:61:40:89:2d:aa:45:ba:f2:7a:68:69:02:8d:9e:
                    9b:74:d0:10:18:1e:46:db:6c:0e:3d:df:ba:6a:fa:
                    04:e2:80:3f:a4:08:2c:48:68:a6:58:6c:0e:8f:bc:
                    5f:d2:05:8e:92:20:b3:ec:f3:70:27:fa:05:f3:88:
                    8f:fd:be:67:ec:8d:fc:7d:4c:56:99:df:8f:5b:fa:
                    22:b9:2d:52:08:11:04:24:8c:06:f2:2f:a5:d0:13:
                    78:01:5d:86:1e:61:6e:8c:a3:d5:5c:b8:84:81:a3:
                    f1:b4:27:0c:ef:90:e6:72:9e:35:42:3b:df:a8:a6:
                    48:a1:49:5c:79:23:e0:ca:5a:6e:f7:14:6f:bb:c7:
                    4b:5a:ec:ac:16:a4:03:5c:92:4e:88:97:a8:04:3a:
                    ad:49:49:21:40:fe:79:7f:85:df:58:7c:db:c2:97:
                    3a:80:32:d0:f9:12:95:6a:ad:7a:d7:75:be:7d:c9:
                    b5:eb:52:65:5a:e5:48:7c:d0:16:ff:bd:88:f3:c0:
                    2c:b1:09:87:59:b7:60:78:b4:4a:9f:fa:8c:55:c8:
                    2c:93:a5:79:29:db:21:d1:95:ed:8a:14:c2:e7:51:
                    63:88:fc:e5:36:b8:44:19:e7:b4:4d:27:fe:c8:af:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:2B:4D:41:FD:B8:D2:E9:02:91:E8:2B:DA:68:5B:0F:46:D5:CE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33322e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:17:65:aa:f0:34:35:9b:02:f8:53:46:f5:7c:d5:39:6d:
         e1:67:f6:0e:78:62:0c:a2:a5:cf:46:43:46:90:05:3f:63:1d:
         51:15:2c:f3:dc:b7:0b:8a:20:b2:00:79:47:15:b5:d0:49:cd:
         9c:c9:57:e0:ee:61:b5:1d:7a:50:60:43:a8:cb:e8:08:4d:8a:
         9c:f3:9c:8f:3d:09:d4:a4:62:49:d3:e3:71:ac:c7:13:56:aa:
         84:c4:ac:83:6f:ef:45:32:a9:a3:e4:a7:78:cf:e0:39:3f:3a:
         fb:c4:69:db:94:b5:6a:5e:9c:68:2c:45:38:0d:d4:ba:85:a7:
         26:33:15:7a:88:b3:2e:4e:6c:66:96:a2:56:04:1e:0a:2d:af:
         de:c8:c5:bf:58:63:bc:9f:71:52:76:ea:cf:1b:35:2b:76:e2:
         d4:4b:74:52:2d:ed:2b:a8:52:d7:bf:60:cd:a5:22:bf:7e:72:
         f1:6c:10:d0:87:3f:92:2a:3b:25:b1:9a:59:a4:59:28:d0:e4:
         28:1d:12:7d:28:d8:1e:06:22:95:d7:c5:78:96:d8:d6:7d:fa:
         97:35:dd:d1:5c:d0:ce:f7:ce:b2:26:59:d9:4a:c0:0e:df:b0:
         b7:13:50:82:c8:92:3f:a7:83:4f:b9:9c:a0:53:c9:ee:f3:95:
         4e:7b:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:05 2026 by rpki-client