Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS275098.roa
File:                     AS275098.roa (raw, json)
Hash identifier:          8+1qgw3HtYPy6FbISsKBdNh5B3ZtjJSJ3oAfbsC4fCA=
Subject key identifier:   DC:15:18:CD:16:63:15:CB:DB:CE:31:D7:BB:31:02:F2:2C:9D:9E:DE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       144F1C24F8DC009F5B031B1A2F8B380AF9A43C84
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS275098.roa
Signing time:             Mon 02 Nov 2026 03:14:12 +0000
ROA not before:           Mon 02 Nov 2026 03:09:12 +0000
ROA not after:            Mon 01 Nov 2027 03:14:12 +0000
asID:                     275098
IP address blocks:        169.40.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:1c:24:f8:dc:00:9f:5b:03:1b:1a:2f:8b:38:0a:f9:a4:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  2 03:09:12 2026 GMT
            Not After : Nov  1 03:14:12 2027 GMT
        Subject: CN=DC1518CD166315CBDBCE31D7BB3102F22C9D9EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:26:a7:11:1e:65:90:ab:02:ca:ca:fb:b2:d6:
                    6c:cc:01:27:f6:0d:0e:91:e0:3f:60:81:93:56:e5:
                    5f:87:d3:a9:e3:d0:cc:79:bb:b0:7b:9d:3a:81:74:
                    fc:a3:e4:76:4a:84:ff:47:2a:f7:03:ac:fc:79:d4:
                    4e:03:a3:81:45:81:6f:e5:3d:f1:06:83:80:cb:aa:
                    20:1a:13:09:74:6c:35:28:f7:df:3a:f7:0e:4f:d6:
                    67:b9:62:cb:1c:73:5f:87:97:70:8c:ac:55:e0:45:
                    6f:e1:e6:51:8b:72:35:39:25:25:3c:31:cc:1e:d4:
                    74:36:05:95:79:79:a3:57:1c:2b:a5:27:b3:89:3e:
                    2f:bf:a3:4f:24:66:58:97:50:2f:e6:16:7a:e1:62:
                    53:25:a0:3f:9f:00:96:b0:18:38:ab:10:a9:23:4d:
                    5d:2e:46:28:7e:63:3e:f3:04:2d:95:15:9f:ac:d0:
                    3f:f1:aa:f2:90:85:06:eb:c9:a4:9c:9d:1a:c5:b2:
                    e7:9a:57:e3:ac:59:e4:a3:88:cf:3a:1c:b9:e2:53:
                    c7:89:32:68:3d:ef:c1:a1:6a:53:95:d3:40:4a:d3:
                    e0:d1:95:87:8a:91:ab:6a:09:0c:22:0e:c3:05:c4:
                    76:74:09:ff:5c:c5:44:b6:23:1f:be:b0:9f:02:33:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:15:18:CD:16:63:15:CB:DB:CE:31:D7:BB:31:02:F2:2C:9D:9E:DE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS275098.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:90:ac:6c:48:d8:b5:6d:d8:cd:8b:d9:2b:3b:ae:1b:99:
         32:90:20:99:94:f1:6d:91:3d:68:6a:b8:6e:0d:2f:13:3f:67:
         51:2a:bb:f9:a7:67:eb:a1:6e:78:19:1a:e0:37:fd:29:54:50:
         0d:0c:77:26:4a:7a:24:1c:af:90:7f:27:41:0c:ca:76:3b:bf:
         e2:74:25:87:b7:5d:01:86:11:8c:b1:ae:cc:b7:70:37:f9:32:
         05:f0:1e:20:a1:ac:13:98:7d:52:12:72:cf:11:21:34:7f:1d:
         a6:dc:88:14:8c:f6:58:ff:cd:26:e6:c4:48:1a:ee:88:bc:57:
         e3:3f:54:63:60:50:eb:9a:01:50:04:1c:2c:87:bb:2e:2a:d1:
         13:75:a4:5d:af:51:a5:74:50:91:41:f5:f8:d6:1c:89:cb:77:
         37:d3:29:d8:1f:06:b8:59:41:52:c9:6a:34:8d:5d:86:6b:1e:
         59:4e:83:b1:e9:b4:96:8c:a8:6d:ed:10:a7:cf:44:72:39:18:
         98:7f:cf:50:50:de:38:fe:bc:67:3d:26:44:71:2f:62:57:77:
         75:bb:25:a3:80:17:69:1b:a2:61:a1:4c:d8:4d:07:15:4e:b6:
         b9:11:b2:e3:04:28:fe:bc:0a:24:e0:25:e2:ba:4c:d8:22:de:
         76:3c:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:50:18 2026 by rpki-client