Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203156.roa
File:                     AS203156.roa (raw, json)
Hash identifier:          51u8kM058aUrGlBoGDa9PC3DTj//o6VhxVBm7l+3EuM=
Subject key identifier:   BF:20:41:71:AA:9F:24:6E:79:7A:6A:4F:AF:44:F2:27:57:28:EA:05
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       181F357F63EE157A7295578B04DC546F4B5F7D6C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203156.roa
Signing time:             Mon 19 Oct 2026 19:41:17 +0000
ROA not before:           Mon 19 Oct 2026 19:36:17 +0000
ROA not after:            Mon 18 Oct 2027 19:41:17 +0000
asID:                     203156
IP address blocks:        169.40.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1f:35:7f:63:ee:15:7a:72:95:57:8b:04:dc:54:6f:4b:5f:7d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 19 19:36:17 2026 GMT
            Not After : Oct 18 19:41:17 2027 GMT
        Subject: CN=BF204171AA9F246E797A6A4FAF44F2275728EA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:6b:78:fe:66:e0:ba:53:1b:1e:34:f6:11:
                    48:9f:d2:e7:45:47:f2:a3:ec:c8:b2:71:6a:db:a3:
                    d0:49:be:86:a2:59:12:d3:a0:d8:25:08:0c:41:47:
                    c2:9c:4f:33:fc:e0:aa:f4:39:82:f4:43:8d:b2:b3:
                    c1:4f:03:92:9e:4b:89:8d:11:01:58:a0:03:33:64:
                    91:d1:01:42:11:7f:70:40:64:55:23:5d:1e:bd:ad:
                    2c:9b:98:ae:bb:97:2d:da:2b:97:96:42:16:d5:21:
                    51:fb:37:44:47:1c:68:7d:1a:40:23:24:cc:45:b5:
                    51:76:b0:66:7e:6d:1e:dc:b7:07:0f:87:15:a4:7a:
                    f3:ec:68:73:43:ce:91:49:3a:d4:8b:f6:42:b1:1c:
                    6f:29:38:8a:b7:7f:4d:26:db:07:09:83:b6:3d:0b:
                    48:7e:43:6d:15:df:6a:fa:bd:97:d1:46:1b:6a:12:
                    42:7c:8e:23:8a:6c:21:51:c7:21:93:f8:f6:a8:42:
                    99:94:ee:0b:ee:6b:2a:ed:8d:6c:2c:82:24:6b:de:
                    79:1c:07:6f:3c:1c:58:7c:d9:25:b7:02:1d:99:94:
                    41:b0:0d:e1:1e:db:9e:d7:fd:11:69:2c:5f:22:df:
                    11:09:3d:26:06:06:aa:0e:79:6e:d6:f4:28:74:89:
                    8a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:41:71:AA:9F:24:6E:79:7A:6A:4F:AF:44:F2:27:57:28:EA:05
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS203156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:e5:00:51:64:dd:67:b7:88:bc:ac:d1:46:f6:c2:27:bf:
         f5:8e:50:44:a9:6d:17:67:4e:f2:55:17:08:7f:5e:7f:f3:52:
         7d:7e:fe:f2:79:04:96:32:b5:dd:e7:17:3b:a8:e8:81:cb:b5:
         97:1a:98:93:f3:6f:17:47:59:fd:c1:51:28:9b:11:fb:6a:9b:
         d4:7d:b9:07:ce:58:db:10:82:e9:79:5d:90:7a:aa:ed:bc:ba:
         6c:21:b9:58:36:94:08:dd:bf:1c:e3:b9:6e:28:2e:e1:10:e5:
         2a:27:a7:c7:7b:a4:7c:fe:3e:94:ce:6f:a7:9e:13:f9:d0:15:
         f5:85:b4:2e:27:f5:1d:aa:62:bf:08:65:a0:e8:f3:a2:ee:fa:
         e1:6d:61:a9:42:63:6e:83:e4:c8:2d:51:eb:e4:94:ce:1a:04:
         8e:84:c7:ab:34:b9:16:22:80:4b:0a:d3:5f:0e:3f:dd:64:fa:
         9a:da:18:c9:cf:eb:44:0c:5e:3c:a2:d0:2a:81:87:fa:da:4e:
         9a:e2:54:c5:0c:c5:92:c7:95:f0:0e:92:3c:b0:03:54:5c:2b:
         f8:22:0d:bb:70:f4:f2:d3:63:ab:b9:b2:2e:db:a6:43:0f:87:
         3d:d2:7e:a0:83:3f:f8:91:e4:b3:c8:af:3d:7f:79:1e:78:e2:
         a6:7d:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:53:15 2026 by rpki-client