$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: WhC3VU2ppC2dFsA86lifp10AWro3A18VjJe3/cR2aBw= Subject key identifier: DA:51:5F:43:AC:30:36:1B:2F:2A:59:88:34:6C:15:FE:97:71:82:ED Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 43A1F10AD0CCA67248478EA257CED1E0A6ED83B6 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa Signing time: Sat 16 May 2026 00:13:49 +0000 ROA not before: Sat 16 May 2026 00:08:49 +0000 ROA not after: Sat 15 May 2027 00:13:49 +0000 asID: 42831 IP address blocks: 169.40.105.0/24 maxlen: 24 169.40.106.0/24 maxlen: 24 169.40.109.0/24 maxlen: 24 169.40.127.0/24 maxlen: 24 169.40.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 15:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a1:f1:0a:d0:cc:a6:72:48:47:8e:a2:57:ce:d1:e0:a6:ed:83:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: May 16 00:08:49 2026 GMT Not After : May 15 00:13:49 2027 GMT Subject: CN=DA515F43AC30361B2F2A5988346C15FE977182ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:82:fa:9f:13:26:e9:fb:6d:c9:9f:72:58: 30:4b:59:ce:72:21:23:f9:69:ff:9a:52:69:6d:86: 01:11:0b:d3:cc:f0:12:fc:fb:8e:23:cb:5b:bb:6f: 1c:b0:5d:04:e9:9a:34:b0:2d:0d:fd:c7:9d:22:ac: a0:90:1f:ed:0d:96:1a:91:d3:4f:97:c8:42:86:4e: 15:05:70:b3:bd:36:c8:fb:ad:c3:e1:60:33:b4:6e: fd:9b:e3:18:88:12:f7:87:1e:74:da:10:01:7c:af: eb:c2:f0:bd:82:82:c1:d3:11:f8:87:9d:f1:05:cb: 38:d6:3f:06:72:b2:2e:3c:2b:b7:09:60:0c:96:fd: ca:08:a2:7e:3d:a5:31:19:d3:3d:35:a6:ee:f3:aa: 9d:b4:69:2e:9a:3e:b4:0f:55:67:8a:20:a7:18:9d: 34:3b:a6:68:4d:74:a2:01:5b:38:f5:b7:b5:d2:0e: 7e:c7:1b:b1:8b:57:f7:90:eb:5c:05:8d:71:0d:98: ad:26:49:32:99:cf:11:72:ab:bc:10:49:90:31:9d: 97:38:fe:17:29:f9:f0:44:94:aa:6f:9b:54:ff:7e: e4:21:7c:85:2c:fe:4b:37:3c:73:36:18:f0:61:2d: 77:de:c8:dd:39:90:df:24:a2:3b:d2:10:b6:57:99: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:51:5F:43:AC:30:36:1B:2F:2A:59:88:34:6C:15:FE:97:71:82:ED X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.105.0-169.40.106.255 169.40.109.0/24 169.40.127.0/24 169.40.134.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6a:c8:ef:fe:08:a9:36:29:82:a9:41:51:ee:c6:38:d7:1e: ae:d8:32:e4:53:d4:82:0a:01:96:fc:07:10:10:9f:96:9e:1f: eb:ed:65:0a:c3:ce:39:76:70:d8:d8:d3:01:e4:52:7e:0e:80: b4:d8:c4:ce:36:1d:b9:35:a7:44:51:ef:53:66:3f:15:77:15: ee:88:08:47:93:ac:db:f0:b5:cd:fd:1d:f4:78:f1:4e:35:ba: b2:8a:c3:b8:88:8e:2e:7b:53:50:78:88:80:29:eb:e2:75:e9: 85:a9:d6:b4:c5:be:16:a1:8e:25:25:11:42:2c:31:9b:72:c1: 22:5c:8e:0c:1f:f3:c1:b6:8d:fd:29:da:ba:b3:03:c1:90:8a: f3:f9:20:4b:b4:f8:ec:15:1c:eb:1b:74:40:0c:c8:1a:2b:5f: 47:fb:2d:58:33:63:df:ed:dc:25:a4:8c:31:24:b3:79:56:86: 88:cf:e3:f4:17:2a:1f:3f:b0:2d:43:7f:cc:e6:f5:58:97:c2: 71:04:d3:e4:f8:9c:2f:ea:9a:29:03:a1:e4:e4:a3:aa:70:2f: 2a:8d:00:e2:7a:c1:2b:d6:24:73:a0:5b:c7:aa:57:0f:6a:de: 38:56:1d:a7:5e:d2:2b:cd:dd:c0:80:16:70:7c:80:7b:5c:cf: 8c:0b:5e:2a -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUQ6HxCtDMpnJIR46iV87R4Kbtg7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA1MTYwMDA4NDlaFw0yNzA1MTUwMDEzNDlaMDMxMTAvBgNV BAMTKERBNTE1RjQzQUMzMDM2MUIyRjJBNTk4ODM0NkMxNUZFOTc3MTgyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyYL6nxMm6fttyZ9yWDBLWc5y ISP5af+aUmlthgERC9PM8BL8+44jy1u7bxywXQTpmjSwLQ39x50irKCQH+0NlhqR 00+XyEKGThUFcLO9Nsj7rcPhYDO0bv2b4xiIEveHHnTaEAF8r+vC8L2CgsHTEfiH nfEFyzjWPwZysi48K7cJYAyW/coIon49pTEZ0z01pu7zqp20aS6aPrQPVWeKIKcY nTQ7pmhNdKIBWzj1t7XSDn7HG7GLV/eQ61wFjXENmK0mSTKZzxFyq7wQSZAxnZc4 /hcp+fBElKpvm1T/fuQhfIUs/ks3PHM2GPBhLXfeyN05kN8kojvSELZXmRoBAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQU2lFfQ6wwNhsvKlmINGwV/pdxgu0wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzQyODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBACpKGkDBACpKGoDBACp KG0DBACpKH8DBACpKIYwDQYJKoZIhvcNAQELBQADggEBADhqyO/+CKk2KYKpQVHu xjjXHq7YMuRT1IIKAZb8BxAQn5aeH+vtZQrDzjl2cNjY0wHkUn4OgLTYxM42Hbk1 p0RR71NmPxV3Fe6ICEeTrNvwtc39HfR48U41urKKw7iIji57U1B4iIAp6+J16YWp 1rTFvhahjiUlEUIsMZtywSJcjgwf88G2jf0p2rqzA8GQivP5IEu0+OwVHOsbdEAM yBorX0f7LVgzY9/t3CWkjDEks3lWhojP4/QXKh8/sC1Df8zm9ViXwnEE0+T4nC/q mikDoeTko6pwLyqNAOJ6wSvWJHOgW8eqVw9q3jhWHade0ivN3cCAFnB8gHtcz4wL Xio= -----END CERTIFICATE-----Generated at Sat Jun 13 06:44:08 2026 by rpki-client