Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402904.roa
File:                     AS402904.roa (raw, json)
Hash identifier:          wDu4h5Xmy2ssBznbQevPsUaW5gr8OnynvfAKNrlRQKI=
Subject key identifier:   63:91:66:E0:60:64:16:07:85:FA:4F:0F:F1:8A:1F:0D:F3:3E:E7:D6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       30ECC84159C7831605E428BFCB168258C4F718BD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402904.roa
Signing time:             Tue 03 Nov 2026 14:13:19 +0000
ROA not before:           Tue 03 Nov 2026 14:08:19 +0000
ROA not after:            Tue 02 Nov 2027 14:13:19 +0000
asID:                     402904
IP address blocks:        169.40.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:c8:41:59:c7:83:16:05:e4:28:bf:cb:16:82:58:c4:f7:18:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  3 14:08:19 2026 GMT
            Not After : Nov  2 14:13:19 2027 GMT
        Subject: CN=639166E06064160785FA4F0FF18A1F0DF33EE7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:c0:12:62:d3:a2:7d:70:16:49:9e:27:03:
                    6f:84:3a:73:86:d2:d5:25:ba:6d:31:3a:72:c1:12:
                    ad:f7:ff:61:58:8c:df:4a:b9:af:7d:f0:70:41:27:
                    f9:0f:1f:c6:f5:a1:59:43:47:5f:36:a4:0a:e8:aa:
                    3f:e0:ea:f2:b9:de:b8:2a:42:40:65:4d:98:5c:a2:
                    92:a9:af:d2:20:5f:d8:3a:6d:b5:23:b0:4e:f0:c9:
                    70:3b:55:0b:07:09:13:1a:de:5a:e3:82:cc:33:59:
                    87:28:5c:1b:8b:52:23:20:2a:13:0f:12:ef:d3:67:
                    e7:b6:4e:8e:d1:4f:96:86:d5:63:e9:12:2e:86:78:
                    c9:dd:e0:b0:63:9d:61:81:81:8c:cf:97:80:ac:c4:
                    e9:e7:ec:0c:82:74:84:9c:aa:e1:43:06:a1:8f:a6:
                    78:6b:ec:de:b3:79:71:e9:34:fd:1a:9c:87:f2:6f:
                    7b:85:7f:71:cb:e3:45:3f:07:2c:b4:a0:eb:28:a1:
                    7e:7d:c2:aa:32:78:f6:e0:b8:4e:d2:83:be:20:36:
                    5f:2e:4f:04:03:82:cc:f5:91:ea:f1:db:42:b4:5d:
                    10:98:05:25:2e:83:8d:1f:2b:d0:cb:ea:a8:9a:94:
                    79:ad:72:ff:02:c8:bb:ef:c7:d3:3c:8f:d2:23:ba:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:66:E0:60:64:16:07:85:FA:4F:0F:F1:8A:1F:0D:F3:3E:E7:D6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402904.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:00:15:d4:51:a3:42:bf:d5:7e:ef:ed:6c:27:67:e4:40:
         a4:15:51:28:5d:2f:b7:b7:e5:54:eb:bd:0c:7a:f8:33:c8:21:
         87:6b:c3:4b:55:81:9a:c0:f3:e0:a7:0e:40:a6:09:f7:1e:1d:
         8d:45:38:93:dc:bc:8b:e5:24:49:28:8f:67:b7:47:8d:d4:68:
         f2:bc:a5:3a:4f:73:cc:a3:2a:65:b0:e3:95:05:36:b2:16:a2:
         fb:6a:d4:af:43:3d:9c:45:1a:45:0e:00:3e:06:e2:85:e1:0c:
         56:3f:be:3d:5c:6f:64:c0:c3:04:f9:64:56:61:fb:0a:90:18:
         5e:e5:8b:a2:83:ad:9b:76:98:38:17:27:65:fc:ac:f9:f8:ea:
         e5:8e:2c:ac:bb:c8:1b:2b:50:42:12:ea:ca:02:24:68:18:f9:
         03:3c:de:4c:b4:3e:e2:20:f8:99:82:7f:a2:d4:c4:a3:72:54:
         5b:29:bd:54:13:42:98:8a:e9:21:ba:ff:76:ad:70:f7:0d:9d:
         52:c5:ef:d6:82:cb:75:d6:49:9b:fc:fa:8a:c0:f5:e6:26:74:
         5e:13:94:cd:80:44:7d:2f:ce:ad:23:42:d3:b1:e1:b1:6c:ca:
         be:59:f1:97:e2:06:fb:2f:af:26:49:0a:78:ab:10:14:61:6e:
         f8:67:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:45:32 2026 by rpki-client