$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: r2PnEVWtBw8x8dkhx0pEEgk0IKCXH18iM72xENRiDbY= Subject key identifier: A7:F7:87:03:50:3B:12:61:A7:87:E2:55:FA:25:2F:6A:04:CA:70:BB Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 2B6D47CA81F93D752C99E0F468024AE4E9695908 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Thu 17 Sep 2026 00:04:43 +0000 ROA not before: Wed 16 Sep 2026 23:59:43 +0000 ROA not after: Thu 16 Sep 2027 00:04:43 +0000 asID: 5650 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:47:ca:81:f9:3d:75:2c:99:e0:f4:68:02:4a:e4:e9:69:59:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 16 23:59:43 2026 GMT Not After : Sep 16 00:04:43 2027 GMT Subject: CN=A7F78703503B1261A787E255FA252F6A04CA70BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:37:9a:58:92:6f:8b:f3:e6:1e:f0:69:10: e3:2f:ee:55:a5:56:33:0a:26:cb:ff:32:fc:53:f8: 30:5f:39:fd:ab:59:59:c8:4a:e3:ef:7c:c8:38:49: e3:d6:bf:5c:ed:9e:f8:16:2b:ad:90:ed:d1:e9:db: a9:98:c2:76:bb:8c:c6:97:3f:c3:01:b1:e6:e0:f3: 13:1d:a2:92:27:7e:f5:2f:98:b9:70:4c:90:33:43: ab:78:8c:50:c4:5f:5b:52:3b:63:4b:b8:49:86:19: c7:e6:ba:60:33:da:ca:90:ea:7d:67:ec:8d:66:7e: 43:1f:cf:94:f6:33:4b:15:1f:9d:ea:b7:14:de:25: 79:0c:35:a5:9b:a7:13:0c:85:c2:78:7e:1d:03:e1: 4d:18:4d:94:5e:4a:b8:ab:41:ad:10:b8:0d:6f:56: 28:8b:b9:4a:3f:7e:6f:98:ee:99:2b:fb:12:4e:26: 2a:b9:96:f8:d5:7c:6c:5a:bb:45:62:ff:7c:02:03: 31:d6:9d:f9:42:b3:b2:ae:21:0e:70:1a:b5:58:5f: a2:36:ac:0e:5f:33:75:8c:7f:a0:59:54:60:12:e0: f6:19:b7:06:47:70:32:d0:4e:35:ae:14:0f:98:42: 56:d5:9e:52:27:6f:b0:48:09:bb:09:63:4f:d2:95: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F7:87:03:50:3B:12:61:A7:87:E2:55:FA:25:2F:6A:04:CA:70:BB X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 91:b1:af:25:eb:90:1b:f0:db:e9:a4:ba:f5:d1:90:ad:16:8d: ac:0b:80:c0:36:7d:46:96:85:89:2c:02:db:db:04:58:b0:14: 26:21:97:9f:a6:98:cd:1f:db:fa:13:00:82:7c:66:0d:09:f9: 85:08:eb:9e:bf:df:4a:ba:a4:52:67:c3:d3:a4:32:99:6e:50: c6:02:06:29:46:27:8b:d7:b0:90:34:fa:06:a5:f6:ec:64:25: c7:ac:70:b3:68:44:ea:28:d3:7b:e6:78:81:fb:78:9f:2d:7b: 1f:b9:f9:af:67:b6:7b:15:17:dc:b5:e5:e0:20:5a:63:02:9a: 9f:84:29:9f:bf:54:76:4c:7f:87:82:51:73:f1:fa:23:a5:c5: f0:17:d8:1f:87:de:06:4d:16:18:19:52:b7:c0:4e:9a:8a:6c: 2f:d5:49:18:6e:9e:f3:1d:e0:83:39:e2:7b:91:0c:f8:71:dc: d8:49:74:9b:f8:a6:fa:f1:17:36:ce:4b:22:2a:9a:0b:35:37: ff:45:81:df:0d:66:8b:f9:4d:e6:b9:ac:eb:7c:8f:cc:cc:84: 3a:b5:eb:a4:b1:96:da:3a:2f:7b:f1:9e:d7:93:1b:b1:4e:bb: e5:e7:55:c5:7f:07:de:5f:16:fa:ee:6a:03:01:80:f7:c6:f9: 39:98:4e:93 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUK21HyoH5PXUsmeD0aAJK5OlpWQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MTYyMzU5NDNaFw0yNzA5MTYwMDA0NDNaMDMxMTAvBgNV BAMTKEE3Rjc4NzAzNTAzQjEyNjFBNzg3RTI1NUZBMjUyRjZBMDRDQTcwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNjeaWJJvi/PmHvBpEOMv7lWl VjMKJsv/MvxT+DBfOf2rWVnISuPvfMg4SePWv1ztnvgWK62Q7dHp26mYwna7jMaX P8MBsebg8xMdopInfvUvmLlwTJAzQ6t4jFDEX1tSO2NLuEmGGcfmumAz2sqQ6n1n 7I1mfkMfz5T2M0sVH53qtxTeJXkMNaWbpxMMhcJ4fh0D4U0YTZReSrirQa0QuA1v ViiLuUo/fm+Y7pkr+xJOJiq5lvjVfGxau0Vi/3wCAzHWnflCs7KuIQ5wGrVYX6I2 rA5fM3WMf6BZVGAS4PYZtwZHcDLQTjWuFA+YQlbVnlInb7BICbsJY0/SlbF9AgMB AAGjggJuMIICajAdBgNVHQ4EFgQUp/eHA1A7EmGnh+JV+iUvagTKcLswHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwYAYIKwYBBQUHAQcBAf8EUTBPME0EAgABMEcwCwMDAA2NAwQCDY0QAwQCDY0o AwQAqSiBMAwDBASpKJADBAGpKJQDBACpKJkDBAGpKJwwDAMEAqkopAMEBqkogAME BKko8DANBgkqhkiG9w0BAQsFAAOCAQEAkbGvJeuQG/Db6aS69dGQrRaNrAuAwDZ9 RpaFiSwC29sEWLAUJiGXn6aYzR/b+hMAgnxmDQn5hQjrnr/fSrqkUmfD06QymW5Q xgIGKUYni9ewkDT6BqX27GQlx6xws2hE6ijTe+Z4gft4ny17H7n5r2e2exUX3LXl 4CBaYwKan4Qpn79Udkx/h4JRc/H6I6XF8BfYH4feBk0WGBlSt8BOmopsL9VJGG6e 8x3ggznie5EM+HHc2El0m/im+vEXNs5LIiqaCzU3/0WB3w1mi/lN5rms63yPzMyE OrXrpLGW2jove/Ge15MbsU675edVxX8H3l8W+u5qAwGA98b5OZhOkw== -----END CERTIFICATE-----Generated at Mon Sep 21 05:53:28 2026 by rpki-client