$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa File: AS20326.roa (raw, json) Hash identifier: u6OYV42iVC0ypTBwm1RLY09aFHR2lbeGYMjJeqHeMQQ= Subject key identifier: 71:77:6D:39:85:DA:E7:55:12:B7:7D:26:21:64:DF:9F:5F:02:2A:DD Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 2353ABB2A6E2F26992DDD651D0E9E8ED16C05486 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa Signing time: Fri 17 Apr 2026 01:17:54 +0000 ROA not before: Fri 17 Apr 2026 01:12:54 +0000 ROA not after: Fri 16 Apr 2027 01:17:54 +0000 asID: 20326 IP address blocks: 169.40.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:53:ab:b2:a6:e2:f2:69:92:dd:d6:51:d0:e9:e8:ed:16:c0:54:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 17 01:12:54 2026 GMT Not After : Apr 16 01:17:54 2027 GMT Subject: CN=71776D3985DAE75512B77D262164DF9F5F022ADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:56:76:6a:70:38:a8:40:85:56:69:76:86: 9e:89:0d:aa:be:0a:2e:6d:df:36:39:42:52:56:b3: 60:05:85:17:b4:0e:40:c0:bc:32:0f:e1:d9:e2:bb: 98:cf:1e:3a:4b:4a:ea:3e:de:cc:ee:83:4f:9f:98: 5d:fd:67:0e:be:ab:a5:95:59:12:85:55:0f:5e:6a: 49:7b:f3:9b:85:ad:ae:32:7a:1c:b2:f6:b4:ca:e3: e4:76:18:cf:33:07:4e:3c:bf:05:85:56:43:a6:da: 18:ff:35:ba:ea:f9:82:ca:e2:46:cf:d6:e2:ce:35: 4f:6c:e0:e9:c3:6a:81:6f:b0:58:b9:5a:1f:3a:b5: e4:3d:55:3e:98:05:49:94:94:08:f6:58:25:0f:b6: af:37:ad:96:5a:ba:25:5f:1c:bd:02:50:58:ed:79: 84:5c:40:73:bc:4e:ed:df:ba:e8:d9:0d:65:b5:3e: aa:ec:39:b2:a4:2c:98:39:d0:19:9f:dc:3c:69:17: 2e:2a:50:b2:cb:91:fb:19:3c:22:81:95:75:78:31: 80:d6:3d:60:3b:b4:f9:87:26:1c:9e:2e:71:13:c7: a3:62:45:62:41:e7:af:af:db:7f:a5:2d:87:70:a6: ae:60:e1:c1:77:cf:06:3c:67:e5:0d:ce:5d:bd:5b: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:77:6D:39:85:DA:E7:55:12:B7:7D:26:21:64:DF:9F:5F:02:2A:DD X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.80.0/20 Signature Algorithm: sha256WithRSAEncryption 43:91:fe:f9:7b:ee:db:43:c2:ab:ce:3f:7f:60:9f:d2:44:77: a1:e6:70:6d:66:a2:8f:a9:2e:66:89:ba:b9:9a:5b:5f:36:1e: 80:8a:d1:62:8b:b6:96:e5:4e:6f:a1:a5:89:09:d2:e0:4a:c1: 86:8a:de:f2:34:be:ae:a8:b3:b6:a2:47:d4:e5:40:12:9a:9f: d0:a9:fd:c6:d8:50:9e:87:70:69:45:8c:3f:8d:64:ee:42:9f: 7a:7c:60:02:ec:09:4c:ac:02:20:56:19:02:62:0d:9c:8e:69: 55:d5:c8:ab:a4:0a:57:c6:3a:38:05:77:b4:13:c5:5e:ef:21: 8d:1a:73:d4:5e:38:39:6b:89:e8:d8:d9:c5:6f:3a:4d:a2:79: d9:d4:8d:2a:25:4c:fd:f4:d1:98:0a:bf:7c:2b:77:50:a8:59: 73:20:8f:f4:02:0b:55:d3:3c:74:2e:6d:f8:0c:fd:6f:8f:49: 4e:0f:1c:71:82:0a:c3:df:ac:fc:90:38:eb:bf:19:0c:8c:36: aa:be:09:c7:82:f6:7a:90:23:84:0c:fc:c1:66:8e:8f:e5:39: ef:9b:58:ed:69:63:c8:03:29:a3:cd:41:51:ad:91:1a:7c:78: fd:3e:dc:5c:07:82:e3:1e:2b:2c:be:96:2d:ed:68:87:68:a0: 39:2a:c1:68 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUI1Orsqbi8mmS3dZR0Ono7RbAVIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MTcwMTEyNTRaFw0yNzA0MTYwMTE3NTRaMDMxMTAvBgNV BAMTKDcxNzc2RDM5ODVEQUU3NTUxMkI3N0QyNjIxNjRERjlGNUYwMjJBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/b1Z2anA4qECFVml2hp6JDaq+ Ci5t3zY5QlJWs2AFhRe0DkDAvDIP4dniu5jPHjpLSuo+3szug0+fmF39Zw6+q6WV WRKFVQ9eakl785uFra4yehyy9rTK4+R2GM8zB048vwWFVkOm2hj/Nbrq+YLK4kbP 1uLONU9s4OnDaoFvsFi5Wh86teQ9VT6YBUmUlAj2WCUPtq83rZZauiVfHL0CUFjt eYRcQHO8Tu3fuujZDWW1PqrsObKkLJg50Bmf3DxpFy4qULLLkfsZPCKBlXV4MYDW PWA7tPmHJhyeLnETx6NiRWJB56+v23+lLYdwpq5g4cF3zwY8Z+UNzl29W5IXAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUcXdtOYXa51USt30mIWTfn18CKt0wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIwMzI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqShQMA0GCSqGSIb3DQEB CwUAA4IBAQBDkf75e+7bQ8Krzj9/YJ/SRHeh5nBtZqKPqS5mibq5mltfNh6AitFi i7aW5U5voaWJCdLgSsGGit7yNL6uqLO2okfU5UASmp/Qqf3G2FCeh3BpRYw/jWTu Qp96fGAC7AlMrAIgVhkCYg2cjmlV1cirpApXxjo4BXe0E8Ve7yGNGnPUXjg5a4no 2NnFbzpNonnZ1I0qJUz99NGYCr98K3dQqFlzII/0AgtV0zx0Lm34DP1vj0lODxxx ggrD36z8kDjrvxkMjDaqvgnHgvZ6kCOEDPzBZo6P5Tnvm1jtaWPIAymjzUFRrZEa fHj9PtxcB4LjHissvpYt7WiHaKA5KsFo -----END CERTIFICATE-----Generated at Fri Apr 17 05:37:42 2026 by rpki-client