Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS206766.roa
File:                     AS206766.roa (raw, json)
Hash identifier:          0WFephJaQbCNMsS3+539DzzLKKYNNm80lLmXn6Jgf+s=
Subject key identifier:   85:27:06:3A:FD:70:2E:B3:C4:9E:1E:DF:87:26:68:81:48:9F:95:EE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       704D72CAAE4A8A9AB790D70F39BB41CD567FD8D6
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS206766.roa
Signing time:             Sun 01 Nov 2026 08:40:09 +0000
ROA not before:           Sun 01 Nov 2026 08:35:09 +0000
ROA not after:            Sun 31 Oct 2027 08:40:09 +0000
asID:                     206766
IP address blocks:        13.141.20.0/23 maxlen: 24
                          169.40.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4d:72:ca:ae:4a:8a:9a:b7:90:d7:0f:39:bb:41:cd:56:7f:d8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  1 08:35:09 2026 GMT
            Not After : Oct 31 08:40:09 2027 GMT
        Subject: CN=8527063AFD702EB3C49E1EDF87266881489F95EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:8a:db:6f:ca:33:3f:68:06:58:97:b6:dd:
                    95:f9:72:01:03:85:31:72:eb:e8:a3:13:b3:1f:18:
                    ec:ba:7f:6d:04:a4:d5:21:8f:8a:b4:0c:7e:b2:5c:
                    77:64:fd:ca:77:c7:f2:60:02:e3:cc:03:ca:39:fe:
                    c7:39:45:31:83:40:6c:fd:e2:03:da:6f:45:ce:af:
                    28:7b:57:0b:e9:f4:43:05:38:48:76:fb:be:12:2f:
                    c9:a1:57:ea:16:e7:c3:ac:31:0e:fc:08:f0:97:de:
                    7c:06:3f:68:9f:14:39:1e:3b:f5:bc:2a:25:bd:65:
                    54:d3:c6:e5:4c:77:d1:17:34:a2:1c:5f:05:1d:9a:
                    9a:e0:1c:b2:a8:0b:7b:91:1b:8e:3f:6b:13:b4:58:
                    e5:0f:e4:9d:30:26:bf:2b:4c:b9:da:d2:e6:e4:7f:
                    aa:35:4a:b0:99:ff:5a:72:80:6a:f2:56:2c:95:da:
                    aa:be:46:0c:c1:c2:77:81:4b:e3:34:0d:4d:f6:d4:
                    29:1f:03:25:32:2b:1c:67:a5:36:0b:9b:53:e4:bf:
                    66:1d:63:15:ae:73:f0:4b:d9:cd:47:2f:d5:b7:95:
                    a4:68:5a:d8:0f:8d:fc:34:a5:9f:30:e2:1f:b3:da:
                    4d:89:7f:1f:03:ee:89:4a:87:67:6f:8a:46:c3:a1:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:06:3A:FD:70:2E:B3:C4:9E:1E:DF:87:26:68:81:48:9F:95:EE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS206766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.20.0/23
                  169.40.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:15:32:26:da:83:cb:8b:94:08:d9:84:2d:dc:28:a3:e0:
         48:aa:c4:bd:f7:8e:ef:06:c8:a6:16:e6:3a:8e:d0:64:ca:7e:
         b1:11:14:e8:46:3b:58:b2:d4:c6:46:3f:2f:90:43:95:bc:f1:
         1c:bd:cb:6e:e0:9f:87:87:94:00:3b:03:71:ac:82:88:55:8e:
         e8:0a:5d:2e:1d:20:17:5a:39:fd:b7:99:4b:18:8f:8d:5e:73:
         79:a9:b1:4a:64:00:11:7e:64:1b:46:f5:6b:18:11:ff:53:d5:
         22:7d:ff:62:aa:00:3f:03:c9:c0:2a:20:0c:a8:43:0f:34:ce:
         2a:1c:6d:0b:7b:5f:92:3c:af:5d:cf:89:2e:f2:33:2c:63:03:
         39:55:54:d8:59:c6:b0:fd:ba:e5:8b:0b:6d:52:13:10:7a:43:
         3f:05:b3:8c:68:79:f8:2c:e5:f8:e6:97:91:54:09:87:ff:c6:
         00:a9:a0:c9:6b:b1:41:5d:11:98:bc:8f:58:5e:8f:f1:86:e6:
         ed:b9:70:49:2f:cc:51:43:90:27:8b:80:08:2b:a4:03:03:1b:
         47:8a:c8:2a:b8:03:9f:77:1c:60:ce:1c:54:13:35:ec:8a:d3:
         d6:37:21:82:22:69:a3:42:77:67:e0:55:36:6e:f9:d7:4a:6d:
         82:d3:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:16:52 2026 by rpki-client