Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209809.roa
File:                     AS209809.roa (raw, json)
Hash identifier:          dMQtZkH7r21Ur+vQQmBuFsuFato/lTMRgdLbdp6siJc=
Subject key identifier:   90:96:F5:F8:53:ED:F1:59:91:E1:FC:DF:73:3F:52:4C:FB:D1:0B:E4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6FCD433FEF746307640DE8098A45C429314AA4A0
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209809.roa
Signing time:             Thu 05 Nov 2026 02:49:49 +0000
ROA not before:           Thu 05 Nov 2026 02:44:49 +0000
ROA not after:            Thu 04 Nov 2027 02:49:49 +0000
asID:                     209809
IP address blocks:        169.40.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cd:43:3f:ef:74:63:07:64:0d:e8:09:8a:45:c4:29:31:4a:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  5 02:44:49 2026 GMT
            Not After : Nov  4 02:49:49 2027 GMT
        Subject: CN=9096F5F853EDF15991E1FCDF733F524CFBD10BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:dd:06:57:a2:2c:e6:ca:0d:d0:a1:cd:e3:
                    6b:c6:f5:5c:b9:0e:05:ad:64:59:18:b8:d8:c8:7c:
                    5d:f7:ac:03:54:e6:e5:b9:4a:3a:8f:58:21:46:02:
                    3b:89:ff:54:ae:14:75:a8:7b:aa:e8:9b:8a:c5:b0:
                    95:3f:f2:f2:07:13:74:21:39:be:f8:f0:d0:ee:73:
                    f8:3d:ea:0b:f5:ea:12:17:d1:e6:5a:da:95:ec:3e:
                    c4:78:15:bc:4e:c4:22:7c:2f:a5:1e:9c:f5:c8:bf:
                    45:33:1f:d0:cd:96:59:54:9e:75:34:10:98:f9:40:
                    0f:c6:d1:e1:98:6a:97:c2:5d:20:e4:ad:43:89:47:
                    17:19:3c:73:b4:be:02:9c:2e:92:5f:bc:7c:4e:5d:
                    40:af:e3:1c:9e:8e:e8:11:c6:f7:d1:a1:63:0b:3b:
                    c7:9b:44:e1:48:f8:c8:12:3a:38:8b:2f:8a:c4:e2:
                    13:b7:70:ec:6f:f7:32:a2:ae:15:44:17:01:6b:5d:
                    54:ca:cb:5b:a2:52:af:d4:00:6a:7a:40:ef:a2:ec:
                    1a:a6:e9:9c:e8:24:df:e3:64:79:35:85:00:e8:15:
                    6b:21:11:b4:3b:a8:3b:da:e7:ca:06:d6:eb:67:1b:
                    44:ff:82:fe:f5:53:76:06:18:03:19:3e:8d:05:60:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:F5:F8:53:ED:F1:59:91:E1:FC:DF:73:3F:52:4C:FB:D1:0B:E4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209809.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:90:32:8d:04:68:a7:6f:47:11:70:c7:49:e7:5a:c5:b8:
         59:27:6f:48:1c:54:1e:e8:eb:10:4d:fe:7b:7a:23:53:0a:41:
         02:be:a4:6b:c2:01:3d:79:24:00:5d:96:9b:9c:94:95:c3:be:
         40:83:bb:ae:89:90:87:64:11:ec:3b:52:6a:53:48:39:d9:6e:
         0c:d5:1d:3a:df:b6:b9:c0:d5:be:1a:b9:95:c4:18:89:fe:97:
         5f:13:9b:60:9f:72:7d:ac:63:1a:ae:71:2c:50:84:0e:80:ed:
         03:17:4a:e6:98:1c:7b:2a:e8:0a:ea:8a:8d:4e:08:08:6c:fa:
         5e:b4:36:3e:50:cb:4b:08:80:5a:1a:37:33:50:5d:80:79:60:
         05:6e:ee:38:41:36:c5:b8:0a:87:60:7b:bc:e4:82:5d:18:1b:
         6e:ce:77:ab:32:d0:0c:ea:a4:af:30:14:a0:03:b0:13:ef:ce:
         be:5d:28:61:3b:38:de:8c:26:f6:42:c4:73:db:5b:9a:94:2f:
         5a:35:18:e2:3e:e0:84:f8:8d:05:b3:75:99:fc:7e:eb:a3:04:
         2b:36:c7:f7:0e:ea:04:6c:ea:fd:ac:20:b2:c1:49:b5:0b:56:
         dd:d0:1b:7c:6a:6b:07:ff:e2:38:4a:c8:83:a2:6f:dc:18:fc:
         f6:9b:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:08:55 2026 by rpki-client