$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400402.roa File: AS400402.roa (raw, json) Hash identifier: 3rnAyVMGJbaVOVTbHlMKdVubZEQG6FuoA69MyxaIV3k= Subject key identifier: CE:A0:F5:DE:31:B1:3D:16:C0:10:CF:0E:AC:1B:58:C7:A7:50:BB:E4 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0F283A9C4CEA288CBDF421376D849C9A8716D2AE Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400402.roa Signing time: Sat 22 Aug 2026 00:06:23 +0000 ROA not before: Sat 22 Aug 2026 00:01:23 +0000 ROA not after: Sat 21 Aug 2027 00:06:23 +0000 asID: 400402 IP address blocks: 169.40.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:28:3a:9c:4c:ea:28:8c:bd:f4:21:37:6d:84:9c:9a:87:16:d2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Aug 22 00:01:23 2026 GMT Not After : Aug 21 00:06:23 2027 GMT Subject: CN=CEA0F5DE31B13D16C010CF0EAC1B58C7A750BBE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4f:da:06:d7:7d:6a:45:ba:ba:dd:07:33:c5: d6:74:99:ca:31:ea:d8:3a:df:2c:8a:4e:d6:4d:34: bf:61:cf:99:c9:c0:f2:75:9c:ce:0c:e7:5b:e4:3c: e4:83:74:3a:c6:92:21:3c:3f:90:80:09:67:7c:ee: 2c:d6:91:66:76:63:e2:71:30:ec:0b:0c:ce:45:5d: 97:d7:8e:70:0a:7a:f4:c7:d0:d5:46:c2:e7:a1:fe: a6:0f:55:60:ce:cd:03:51:db:f7:bc:bb:18:e3:34: f5:21:c9:93:48:8d:da:72:93:96:b6:19:82:96:62: b9:60:71:d6:99:e8:3d:32:ae:bc:c0:c9:a8:47:e5: 32:e8:79:ee:7f:8c:eb:70:b2:2a:84:c7:24:4a:71: 4b:fa:a4:59:0a:72:e1:63:81:6a:5c:06:8b:1c:6d: 2d:c4:31:3c:e7:85:22:d0:5b:9f:ce:a3:95:df:33: b9:89:b8:5d:83:b8:31:f0:5e:76:6b:56:86:9a:77: 6c:00:a9:b3:f1:c7:d8:e3:0b:37:b2:3f:f8:94:96: b4:d4:01:33:ec:b5:d6:f5:ab:7a:e7:b7:2d:3d:9d: 9f:ac:f0:ed:3e:a3:6e:6b:d1:cd:d2:e3:6b:9f:83: e0:7d:01:fc:77:b6:9d:4d:5c:59:52:ad:cd:12:b6: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:F5:DE:31:B1:3D:16:C0:10:CF:0E:AC:1B:58:C7:A7:50:BB:E4 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400402.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.160.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:02:3b:8f:1d:57:5a:44:15:45:93:4f:0c:9a:02:6e:de:6f: 4f:78:b1:2b:f2:13:a4:8f:c3:52:56:c3:8f:68:6c:b2:64:2d: b2:90:65:ef:4d:c7:50:83:d3:78:e5:b2:99:bc:9f:91:d7:a7: fd:57:1c:88:23:83:a2:f3:3d:ce:20:27:42:f2:70:ab:af:ce: 82:45:b7:48:71:f8:dc:39:39:af:98:88:83:23:d1:e7:27:2d: fe:12:a8:65:92:25:46:fe:c7:7b:df:c2:47:ad:47:5d:db:9d: 2c:4c:da:e5:b5:2c:81:4d:73:2a:21:1c:7c:21:fb:8c:8c:5c: 8f:b5:db:ca:34:59:e4:8b:ab:b3:08:78:fd:74:0d:2a:9e:60: 9c:f1:ec:ff:fc:d7:5a:8d:0c:fa:7e:0a:d2:03:70:3b:26:41: 13:2e:18:04:0e:ab:f3:77:af:46:ef:54:15:c9:78:56:16:f9: 35:f2:c9:f5:ed:96:a1:95:c4:97:14:73:16:d2:a7:bb:71:6b: f8:3b:df:9f:2b:a6:53:73:a2:cf:10:49:4e:d1:9a:bd:d8:46: bd:fa:b4:66:24:3c:59:56:e6:4d:60:78:de:06:6d:d1:39:f1: 86:d6:f7:da:1c:77:aa:81:92:cb:96:27:6e:36:27:5b:10:47: b8:bb:46:cb -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUDyg6nEzqKIy99CE3bYScmocW0q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA4MjIwMDAxMjNaFw0yNzA4MjEwMDA2MjNaMDMxMTAvBgNV BAMTKENFQTBGNURFMzFCMTNEMTZDMDEwQ0YwRUFDMUI1OEM3QTc1MEJCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkT9oG131qRbq63QczxdZ0mcox 6tg63yyKTtZNNL9hz5nJwPJ1nM4M51vkPOSDdDrGkiE8P5CACWd87izWkWZ2Y+Jx MOwLDM5FXZfXjnAKevTH0NVGwueh/qYPVWDOzQNR2/e8uxjjNPUhyZNIjdpyk5a2 GYKWYrlgcdaZ6D0yrrzAyahH5TLoee5/jOtwsiqExyRKcUv6pFkKcuFjgWpcBosc bS3EMTznhSLQW5/Oo5XfM7mJuF2DuDHwXnZrVoaad2wAqbPxx9jjCzeyP/iUlrTU ATPstdb1q3rnty09nZ+s8O0+o25r0c3S42ufg+B9Afx3tp1NXFlSrc0SticjAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUzqD13jGxPRbAEM8OrBtYx6dQu+QwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwMDQwMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqkooDANBgkqhkiG9w0B AQsFAAOCAQEAnQI7jx1XWkQVRZNPDJoCbt5vT3ixK/ITpI/DUlbDj2hssmQtspBl 703HUIPTeOWymbyfkden/VcciCODovM9ziAnQvJwq6/OgkW3SHH43Dk5r5iIgyPR 5yct/hKoZZIlRv7He9/CR61HXdudLEza5bUsgU1zKiEcfCH7jIxcj7XbyjRZ5Iur swh4/XQNKp5gnPHs//zXWo0M+n4K0gNwOyZBEy4YBA6r83evRu9UFcl4Vhb5NfLJ 9e2WoZXElxRzFtKnu3Fr+DvfnyumU3OizxBJTtGavdhGvfq0ZiQ8WVbmTWB43gZt 0Tnxhtb32hx3qoGSy5YnbjYnWxBHuLtGyw== -----END CERTIFICATE-----Generated at Sun Sep 20 11:42:30 2026 by rpki-client