$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: up6yTjeB0gqLlBQQTfimKi4wSYMRDLF9tVDMxoYCin0= Subject key identifier: 13:18:33:C8:27:59:1F:66:3D:69:90:80:AB:0B:70:E0:A0:F3:31:44 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 3DB0188BCBA3ACA57885B23D0C163A14E41E1BF6 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa Signing time: Wed 07 Oct 2026 21:23:14 +0000 ROA not before: Wed 07 Oct 2026 21:18:14 +0000 ROA not after: Wed 06 Oct 2027 21:23:14 +0000 asID: 20473 IP address blocks: 13.141.52.0/23 maxlen: 24 13.141.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b0:18:8b:cb:a3:ac:a5:78:85:b2:3d:0c:16:3a:14:e4:1e:1b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 7 21:18:14 2026 GMT Not After : Oct 6 21:23:14 2027 GMT Subject: CN=131833C827591F663D699080AB0B70E0A0F33144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:da:7a:a5:a5:44:b9:83:81:aa:ae:64:e9: 35:c5:81:fe:ca:76:d2:e0:3e:1e:cd:d9:d7:00:49: 95:a2:b5:46:d8:54:7a:9a:99:b9:14:bf:91:6b:0f: 13:ba:43:b5:91:79:f0:12:3f:39:58:40:68:02:fd: f2:63:c1:d5:15:6c:e2:7e:67:f2:19:d3:c4:e9:a2: 64:01:6f:3b:e9:52:85:b6:b7:cf:c1:bd:57:df:7a: 98:8b:6f:04:88:36:f2:6a:ee:c2:fe:e3:85:7c:48: da:46:34:1f:f9:74:f5:3d:e4:cf:18:29:52:52:7e: 2f:73:e9:d0:9f:02:dc:df:7d:69:ce:d8:52:f5:ca: 3f:eb:3a:f7:bb:69:46:bb:c4:6a:7c:23:8c:05:75: f3:4a:4b:5e:5d:d9:a0:ef:bc:2f:ce:e8:91:5d:e0: 61:ce:ee:cd:d0:3d:6e:5e:27:99:08:ce:7e:48:70: 60:11:0a:8d:98:e0:87:63:73:74:b6:14:f5:b7:08: aa:5d:5f:3e:5a:84:f9:9d:42:e0:4b:6b:1b:e2:6a: 9c:0d:01:2f:5b:74:d4:ee:7c:eb:c8:dd:fd:5c:da: cb:52:43:69:5d:a5:76:97:0b:b6:84:55:b1:6f:44: c5:7d:c8:9e:ed:f8:b3:de:b2:f6:29:00:a3:08:79: aa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:18:33:C8:27:59:1F:66:3D:69:90:80:AB:0B:70:E0:A0:F3:31:44 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.52.0/23 13.141.126.0/24 Signature Algorithm: sha256WithRSAEncryption 07:a8:76:4e:23:40:13:14:57:02:15:aa:50:83:bd:ec:e8:a4: 89:07:16:7c:bc:76:0d:7a:0e:c6:8e:9e:1b:1c:6a:24:85:77: 81:18:1c:28:ff:18:2b:18:f4:92:3d:e2:4e:6e:c3:70:42:9b: 1e:93:c7:11:78:e1:84:5a:d5:73:72:15:51:32:ec:34:42:2f: 30:b1:db:2b:f2:1d:f8:56:25:1c:7f:ba:e7:28:4f:65:95:d7: bd:0a:d8:98:77:c5:14:d5:08:a2:8b:21:df:fc:4f:bc:b8:1b: 94:24:a8:af:73:5a:74:31:16:19:93:aa:98:0b:b3:bc:1a:4e: 62:8b:36:06:81:08:e2:fd:35:d1:25:3f:85:70:e5:52:dc:e2: 03:6d:0a:c2:bd:2e:09:74:c3:7a:2b:fe:62:07:83:37:5f:52: 68:6a:af:10:57:a8:04:f3:09:86:cf:73:44:3c:98:a3:aa:20: 1e:c3:be:47:8c:dc:13:41:4c:b8:ac:7f:c5:74:fc:42:ca:a8: 52:f4:15:38:c1:37:a5:3d:81:a1:e4:e5:f0:c0:f8:e3:47:39: 8c:da:70:78:d5:bf:dd:1c:a0:83:80:6b:95:f9:ec:36:e3:46: 9d:fb:a8:82:0c:48:c2:79:3b:3d:5e:3b:b0:dc:d1:d7:12:98: db:ec:4d:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPbAYi8ujrKV4hbI9DBY6FOQeG/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMDcyMTE4MTRaFw0yNzEwMDYyMTIzMTRaMDMxMTAvBgNV BAMTKDEzMTgzM0M4Mjc1OTFGNjYzRDY5OTA4MEFCMEI3MEUwQTBGMzMxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7G9p6paVEuYOBqq5k6TXFgf7K dtLgPh7N2dcASZWitUbYVHqambkUv5FrDxO6Q7WRefASPzlYQGgC/fJjwdUVbOJ+ Z/IZ08TpomQBbzvpUoW2t8/BvVffepiLbwSINvJq7sL+44V8SNpGNB/5dPU95M8Y KVJSfi9z6dCfAtzffWnO2FL1yj/rOve7aUa7xGp8I4wFdfNKS15d2aDvvC/O6JFd 4GHO7s3QPW5eJ5kIzn5IcGARCo2Y4Idjc3S2FPW3CKpdXz5ahPmdQuBLaxviapwN AS9bdNTufOvI3f1c2stSQ2ldpXaXC7aEVbFvRMV9yJ7t+LPesvYpAKMIeapdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUExgzyCdZH2Y9aZCAqwtw4KDzMUQwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBDY00AwQADY1+MA0GCSqG SIb3DQEBCwUAA4IBAQAHqHZOI0ATFFcCFapQg73s6KSJBxZ8vHYNeg7Gjp4bHGok hXeBGBwo/xgrGPSSPeJObsNwQpsek8cReOGEWtVzchVRMuw0Qi8wsdsr8h34ViUc f7rnKE9llde9CtiYd8UU1QiiiyHf/E+8uBuUJKivc1p0MRYZk6qYC7O8Gk5iizYG gQji/TXRJT+FcOVS3OIDbQrCvS4JdMN6K/5iB4M3X1Joaq8QV6gE8wmGz3NEPJij qiAew75HjNwTQUy4rH/FdPxCyqhS9BU4wTelPYGh5OXwwPjjRzmM2nB41b/dHKCD gGuV+ew240ad+6iCDEjCeTs9Xjuw3NHXEpjb7E0M -----END CERTIFICATE-----Generated at Thu Nov 5 16:45:46 2026 by rpki-client