$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: gUsXnr2Wu89THk79T2DEnO4q9V4SV0xaRWJPdlVBM4o= Subject key identifier: 6B:7A:D6:E3:30:EC:3F:23:0A:ED:DA:B4:E6:C1:3D:2B:C8:98:4D:11 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 71C0491A2DBCCB7DE2F2C57A5684B568D8B3C748 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa Signing time: Sun 12 Apr 2026 14:36:10 +0000 ROA not before: Sun 12 Apr 2026 14:31:10 +0000 ROA not after: Sun 11 Apr 2027 14:36:10 +0000 asID: 5650 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.184.0/22 maxlen: 22 169.40.188.0/22 maxlen: 24 169.40.200.0/22 maxlen: 22 169.40.204.0/22 maxlen: 22 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 20:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:49:1a:2d:bc:cb:7d:e2:f2:c5:7a:56:84:b5:68:d8:b3:c7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Apr 12 14:31:10 2026 GMT Not After : Apr 11 14:36:10 2027 GMT Subject: CN=6B7AD6E330EC3F230AEDDAB4E6C13D2BC8984D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:6a:c8:1b:6f:02:e9:97:9e:32:1d:5b:9e: 42:73:df:82:9d:8e:83:3a:26:e0:20:2b:b7:55:b1: 39:aa:c9:10:d5:02:33:e3:f3:20:2e:db:76:9c:14: a9:04:31:0c:af:46:16:fe:18:bb:d4:c8:6b:05:20: 71:30:23:50:93:d4:03:06:12:a5:ef:34:79:58:1d: 38:60:30:af:91:57:18:92:2c:e5:a8:3e:b7:25:dd: 63:08:51:c2:cc:cd:ec:38:e4:38:c7:8d:0b:51:61: 9d:05:32:8f:30:b8:10:2a:1f:d4:8e:dd:cc:ba:28: ff:2a:be:b7:1e:a2:00:95:5c:7f:89:b0:5e:6d:b0: a7:0b:70:26:91:b7:51:4a:7e:df:f4:87:d0:7b:0a: 94:01:8e:3a:35:80:be:4e:d2:8b:db:2d:75:97:a3: b0:f7:cf:6b:7e:b9:6b:05:d2:dc:db:32:3a:0b:ca: bd:51:18:59:9a:68:1f:29:9f:7e:45:f2:b9:39:56: 59:0d:37:be:1c:b9:0e:4a:21:28:36:ec:ec:16:bd: c1:13:77:96:d1:08:5c:83:1c:88:e5:17:2b:cc:42: 2f:0a:48:b8:3f:2d:23:95:0a:c4:c8:cc:47:a0:d8: 25:90:e2:ff:a4:d7:8e:81:e4:2a:22:9e:37:bc:4d: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:D6:E3:30:EC:3F:23:0A:ED:DA:B4:E6:C1:3D:2B:C8:98:4D:11 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.191.255 169.40.200.0/21 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 12:b3:73:73:e9:11:44:8f:9f:e3:40:82:7d:f2:3b:12:f5:83: f1:6d:46:66:af:c8:1a:a1:22:45:0b:2e:de:3e:f1:a7:86:6d: f0:90:0a:54:e5:1c:4c:01:c6:37:15:9b:bd:bb:5c:e1:a8:de: 6e:d5:74:b6:38:1f:f5:e8:94:eb:62:60:34:ae:d7:83:f7:1d: 96:d8:de:07:de:25:ec:be:6b:25:ee:e3:b4:aa:e2:53:ad:c3: ef:72:7e:01:80:19:14:a0:c8:a9:6c:04:36:a8:57:50:b0:3e: ef:39:0c:29:c5:e2:22:69:c9:bd:e4:39:87:13:56:a0:ab:d0: 45:63:cf:7c:1c:5e:ba:50:95:f0:73:6c:cb:5c:fa:1b:cf:92: 5e:37:a2:42:2b:dc:29:6b:6f:66:32:cb:ae:c1:f5:56:a2:36: a6:57:3f:37:04:47:3a:82:e5:3f:d6:ab:18:e1:00:45:1d:54: 20:51:06:c5:5b:56:be:d6:42:b8:f7:2a:7e:5c:f4:67:55:40: 8e:ed:0d:44:d5:90:d8:b1:9b:81:f1:ef:19:c8:13:2e:e9:c7: 55:e2:2c:d5:f6:9f:05:f0:63:ff:41:52:09:5b:2a:00:55:82: b1:63:a1:88:8a:51:4e:d5:13:0f:c3:03:78:9b:8a:1c:8f:6e: ba:1b:ea:00 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIUccBJGi28y33i8sV6VoS1aNizx0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA0MTIxNDMxMTBaFw0yNzA0MTExNDM2MTBaMDMxMTAvBgNV BAMTKDZCN0FENkUzMzBFQzNGMjMwQUVEREFCNEU2QzEzRDJCQzg5ODREMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovmrIG28C6ZeeMh1bnkJz34Kd joM6JuAgK7dVsTmqyRDVAjPj8yAu23acFKkEMQyvRhb+GLvUyGsFIHEwI1CT1AMG EqXvNHlYHThgMK+RVxiSLOWoPrcl3WMIUcLMzew45DjHjQtRYZ0FMo8wuBAqH9SO 3cy6KP8qvrceogCVXH+JsF5tsKcLcCaRt1FKft/0h9B7CpQBjjo1gL5O0ovbLXWX o7D3z2t+uWsF0tzbMjoLyr1RGFmaaB8pn35F8rk5VlkNN74cuQ5KISg27OwWvcET d5bRCFyDHIjlFyvMQi8KSLg/LSOVCsTIzEeg2CWQ4v+k146B5Coinje8Tea3AgMB AAGjggJ0MIICcDAdBgNVHQ4EFgQUa3rW4zDsPyMK7dq05sE9K8iYTREwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwZgYIKwYBBQUHAQcBAf8EVzBVMFMEAgABME0wCwMDAA2NAwQCDY0QAwQCDY0o AwQAqSiBMAwDBASpKJADBAGpKJQDBACpKJkDBAGpKJwwDAMEAqkopAMEBqkogAME A6koyAMEBKko8DANBgkqhkiG9w0BAQsFAAOCAQEAErNzc+kRRI+f40CCffI7EvWD 8W1GZq/IGqEiRQsu3j7xp4Zt8JAKVOUcTAHGNxWbvbtc4ajebtV0tjgf9eiU62Jg NK7Xg/cdltjeB94l7L5rJe7jtKriU63D73J+AYAZFKDIqWwENqhXULA+7zkMKcXi ImnJveQ5hxNWoKvQRWPPfBxeulCV8HNsy1z6G8+SXjeiQivcKWtvZjLLrsH1VqI2 plc/NwRHOoLlP9arGOEARR1UIFEGxVtWvtZCuPcqflz0Z1VAju0NRNWQ2LGbgfHv GcgTLunHVeIs1fafBfBj/0FSCVsqAFWCsWOhiIpRTtUTD8MDeJuKHI9uuhvqAA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:37:45 2026 by rpki-client