$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401856.roa File: AS401856.roa (raw, json) Hash identifier: D1exJ7YF0br5auj1EfQwdLM/F5QifMeuKzKMCnr2xQM= Subject key identifier: E5:A8:AC:B9:C2:DF:E5:94:26:0D:B9:BD:F7:1A:AF:F6:93:06:E8:2E Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 7E51E71CF23ACA8CE2DA95B27663443985C978D9 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401856.roa Signing time: Sun 12 Apr 2026 10:37:26 +0000 ROA not before: Sun 12 Apr 2026 10:32:26 +0000 ROA not after: Sun 11 Apr 2027 10:37:26 +0000 asID: 401856 IP address blocks: 169.40.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:51:e7:1c:f2:3a:ca:8c:e2:da:95:b2:76:63:44:39:85:c9:78:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 12 10:32:26 2026 GMT Not After : Apr 11 10:37:26 2027 GMT Subject: CN=E5A8ACB9C2DFE594260DB9BDF71AAFF69306E82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:6c:fd:de:49:d7:89:8d:05:26:ed:30:b8: 11:ef:2c:08:7f:36:fa:8e:21:0e:4d:bc:53:91:08: 02:a5:e2:91:68:e1:66:ed:99:51:aa:1b:6e:29:7a: f4:09:48:42:80:d7:4b:d9:d1:58:f1:08:86:04:01: e7:c3:94:68:fd:c5:cd:48:73:09:35:31:c1:0e:08: 10:f8:e2:5b:2d:b9:6a:2d:71:db:5a:69:57:39:94: d3:32:67:2f:2c:96:95:54:6d:60:29:23:a4:87:0a: 27:46:35:46:4e:3c:e3:a2:43:8d:f7:fd:b8:31:8a: b6:3c:55:4f:48:d8:38:3b:d4:04:2d:a8:91:ac:4d: 00:96:a5:9e:12:32:d0:94:6e:6d:62:90:6f:17:04: 66:36:cd:40:be:30:40:77:fb:34:36:f5:34:1e:c6: 08:84:a9:ad:84:2b:38:86:76:e7:f3:4f:2b:78:45: 31:b5:58:8c:31:c2:cd:62:7b:90:c5:87:e0:ef:e8: 67:2d:3b:fc:3a:ed:30:c0:f9:f6:14:80:8a:c8:22: 04:12:79:1d:e9:3e:58:09:c5:59:19:06:80:ae:31: a5:25:29:0f:27:87:5d:85:a7:a6:f4:01:e8:a0:a9: 85:3d:90:ba:a2:e6:2c:f4:51:bf:13:1c:58:3e:1a: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A8:AC:B9:C2:DF:E5:94:26:0D:B9:BD:F7:1A:AF:F6:93:06:E8:2E X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.41.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:0f:b1:34:4b:a4:09:cd:aa:29:57:8d:91:4f:cf:4b:ae:c1: c2:83:45:59:f6:c2:96:98:c9:4f:ab:04:2f:ad:a7:7c:2e:ac: 26:8b:ac:f6:6f:6e:51:08:e2:92:57:b8:80:1d:d5:30:bf:87: f5:b1:28:b5:94:29:65:bb:71:2f:69:2e:2e:cb:5b:c0:d6:07: 28:5f:31:93:c4:47:df:15:5a:35:d4:8a:98:49:3a:a2:ac:80: a6:ae:82:54:f5:9f:9d:2d:88:7a:bc:e3:65:67:b0:05:9e:1a: a5:53:66:02:e2:5c:09:a2:bb:de:dc:20:d1:37:24:61:7b:19: 0a:2f:70:70:fa:43:8e:6c:cd:88:5e:c0:fc:7f:6b:c9:c7:3b: 59:a5:29:11:9b:5e:72:ab:64:19:48:8f:a2:af:66:e0:05:87: 17:8c:7e:42:dd:d1:d7:30:3b:f3:52:69:0f:4c:b0:d5:dc:bf: 79:e0:72:c7:5a:b0:6d:40:73:6d:69:78:b2:d9:58:83:55:8e: d5:b4:e0:07:21:44:48:b6:15:d0:06:31:e9:69:bb:2b:ad:96: 02:fe:b9:66:85:1f:7a:52:5f:5e:ec:98:47:d3:f7:b8:1a:ae: ad:12:56:6c:62:0d:32:d3:0b:f3:7c:59:2a:5c:22:06:bf:86: c1:84:b5:f1 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUflHnHPI6yozi2pWydmNEOYXJeNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MTIxMDMyMjZaFw0yNzA0MTExMDM3MjZaMDMxMTAvBgNV BAMTKEU1QThBQ0I5QzJERkU1OTQyNjBEQjlCREY3MUFBRkY2OTMwNkU4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKmz93knXiY0FJu0wuBHvLAh/ NvqOIQ5NvFORCAKl4pFo4WbtmVGqG24pevQJSEKA10vZ0VjxCIYEAefDlGj9xc1I cwk1McEOCBD44lstuWotcdtaaVc5lNMyZy8slpVUbWApI6SHCidGNUZOPOOiQ433 /bgxirY8VU9I2Dg71AQtqJGsTQCWpZ4SMtCUbm1ikG8XBGY2zUC+MEB3+zQ29TQe xgiEqa2EKziGdufzTyt4RTG1WIwxws1ie5DFh+Dv6GctO/w67TDA+fYUgIrIIgQS eR3pPlgJxVkZBoCuMaUlKQ8nh12Fp6b0AeigqYU9kLqi5iz0Ub8THFg+Gh+hAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQU5aisucLf5ZQmDbm99xqv9pMG6C4wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQwMTg1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoKTANBgkqhkiG9w0B AQsFAAOCAQEATg+xNEukCc2qKVeNkU/PS67BwoNFWfbClpjJT6sEL62nfC6sJous 9m9uUQjikle4gB3VML+H9bEotZQpZbtxL2kuLstbwNYHKF8xk8RH3xVaNdSKmEk6 oqyApq6CVPWfnS2IerzjZWewBZ4apVNmAuJcCaK73twg0TckYXsZCi9wcPpDjmzN iF7A/H9rycc7WaUpEZtecqtkGUiPoq9m4AWHF4x+Qt3R1zA781JpD0yw1dy/eeBy x1qwbUBzbWl4stlYg1WO1bTgByFESLYV0AYx6Wm7K62WAv65ZoUfelJfXuyYR9P3 uBqurRJWbGINMtML83xZKlwiBr+GwYS18Q== -----END CERTIFICATE-----Generated at Sun Apr 19 11:14:06 2026 by rpki-client