Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35362e302f32342d3234203d3e20383334.roa
File:                     3136392e34302e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9s8Arb2El3V5Ko8j40QnrInwJh8yJWwQipaMxhbzFIY=
Subject key identifier:   01:A8:54:21:B4:E7:7D:58:80:84:72:44:FF:EC:59:9E:5B:63:0C:7B
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       45CCF6294FB9E1D0FF390337D7BA98AD986F8FF7
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 27 Feb 2026 10:24:07 +0000
ROA not before:           Fri 27 Feb 2026 10:19:07 +0000
ROA not after:            Fri 26 Feb 2027 10:24:07 +0000
asID:                     834
IP address blocks:        169.40.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cc:f6:29:4f:b9:e1:d0:ff:39:03:37:d7:ba:98:ad:98:6f:8f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 27 10:19:07 2026 GMT
            Not After : Feb 26 10:24:07 2027 GMT
        Subject: CN=01A85421B4E77D5880847244FFEC599E5B630C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:7b:51:06:35:5e:8c:72:87:7e:6d:56:40:
                    66:e5:57:ab:cd:55:95:83:30:25:17:94:5a:ad:33:
                    5f:ac:d5:9e:d3:d1:c2:1a:9a:28:6c:8c:e3:49:83:
                    21:60:28:2a:80:6d:62:36:bb:b5:38:73:40:45:b3:
                    bc:44:8d:c2:f9:14:d7:10:81:94:a2:39:8c:5a:7d:
                    23:73:ed:b8:6c:6d:8a:a8:3a:99:3a:cb:fb:8a:8b:
                    e3:e4:8c:13:d7:bd:a2:7b:17:59:02:f6:90:c9:e9:
                    b2:95:c5:f9:2e:0d:e6:d5:01:62:e3:3c:05:25:6d:
                    d0:1c:a7:ea:5b:80:13:29:95:05:d4:a5:ba:a7:78:
                    be:07:ff:f9:7f:78:ca:1a:e0:93:bf:1e:d7:59:c1:
                    fa:34:b4:9d:24:ac:0b:b0:d8:14:03:e4:36:74:0c:
                    fd:66:85:3b:8a:fc:e1:92:ab:a3:19:c9:3b:c8:b5:
                    36:e0:c3:79:c2:9e:3c:cb:69:63:b8:db:5a:d3:e2:
                    06:b3:39:43:68:6b:5b:af:f0:76:d9:88:3e:fb:9a:
                    39:94:67:9b:d8:7a:6c:10:50:00:c8:24:74:73:17:
                    f8:aa:dc:4f:15:85:e0:56:f5:05:fe:a7:55:76:af:
                    e8:21:35:02:b5:6e:8c:5b:fb:77:96:e1:69:f9:cb:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A8:54:21:B4:E7:7D:58:80:84:72:44:FF:EC:59:9E:5B:63:0C:7B
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e35362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c2:4f:94:f5:de:6f:9b:08:85:8f:f5:7e:ba:2a:49:00:ae:
         f6:a5:43:97:aa:b9:33:dd:9d:b1:7f:e6:8a:7c:43:33:87:e2:
         25:09:04:32:41:6c:aa:b1:79:b1:dc:15:48:03:ba:41:cc:0b:
         04:45:ac:ef:0c:d8:8d:51:69:03:44:cf:9d:3e:cb:79:6f:a0:
         c0:ee:87:e1:54:5f:d7:da:1e:3e:00:05:a6:3a:d7:d2:24:d1:
         9c:37:dc:6f:3e:64:71:ac:5f:a4:c7:2d:06:8f:47:c6:c1:64:
         66:2b:f5:c7:9d:48:4c:54:c2:ee:cd:8a:9d:5b:6d:4b:e8:2e:
         6c:93:4e:0a:0d:2f:1a:13:49:a0:1c:bb:eb:dc:b9:5b:e7:94:
         0d:a5:0d:9b:82:e6:34:1f:45:74:0b:3b:6c:4d:6c:a2:b9:11:
         99:a6:31:d3:77:27:2b:3e:2f:d8:cd:e5:ce:88:bd:89:4b:a2:
         3c:3c:54:4b:be:5b:53:df:ae:8c:21:97:e9:cf:b6:f5:d7:53:
         a1:27:84:75:6f:7d:fc:d8:f5:ac:9a:bc:38:ff:ab:e4:7d:56:
         09:a2:f1:c9:b4:e8:2d:8d:5e:91:9c:f2:54:80:ee:e6:09:53:
         2a:6f:85:0f:f1:32:ba:45:49:be:13:7f:8c:44:33:13:57:fb:
         00:fa:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:33 2026 by rpki-client