$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: fTYBhMhhVeq/jRgHNt2LOD/TGWAN3n9ROgOkdkWZTao= Subject key identifier: 07:16:B6:2D:4A:29:35:31:DE:D9:6A:2C:84:6E:E3:90:88:DA:67:49 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0FD67512A8AD26A35EBE65359D6FA32F586FC1F7 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa Signing time: Fri 23 Oct 2026 00:00:46 +0000 ROA not before: Thu 22 Oct 2026 23:55:46 +0000 ROA not after: Fri 22 Oct 2027 00:00:46 +0000 asID: 7029 IP address blocks: 13.141.64.0/19 maxlen: 24 13.141.80.0/20 maxlen: 24 13.141.96.0/20 maxlen: 24 13.141.128.0/17 maxlen: 24 13.141.156.0/22 maxlen: 24 13.141.160.0/19 maxlen: 24 13.141.192.0/18 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d6:75:12:a8:ad:26:a3:5e:be:65:35:9d:6f:a3:2f:58:6f:c1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 22 23:55:46 2026 GMT Not After : Oct 22 00:00:46 2027 GMT Subject: CN=0716B62D4A293531DED96A2C846EE39088DA6749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:b4:5f:54:40:70:91:1d:d1:5a:1a:46:4d: 76:ed:8a:d0:76:74:3f:67:1a:b0:17:bd:e0:f0:bd: 3a:79:ce:0d:53:3f:c9:23:6a:ae:3c:a3:41:55:79: 0f:0a:8a:d8:16:0b:4c:2b:36:3d:f7:68:43:90:e0: c4:2f:79:a5:3a:4a:c1:fd:68:16:08:48:b4:a1:14: 2c:f9:59:be:74:0e:43:16:a6:bb:a8:5c:de:63:0b: fd:f5:3b:fb:a1:db:18:a6:07:3a:fe:b7:43:3a:87: 6d:09:45:9a:03:3b:ab:fb:ac:c3:9b:ce:7d:cc:9a: 42:cd:7c:b6:b3:a0:48:18:ec:6f:3a:57:78:e2:9e: 76:b0:9d:e4:83:e3:e9:b2:ea:77:47:f4:9a:59:a7: 72:90:0e:0f:97:82:28:81:f3:36:c8:7e:73:cc:bd: cc:3f:9a:fc:d3:b7:54:e6:23:69:67:44:80:97:cf: bc:de:57:34:30:e7:a6:b9:c2:95:88:f8:6a:25:0e: d7:4a:6c:58:42:77:8d:20:7e:20:80:6a:1c:10:c6: aa:0c:e0:72:e2:a7:04:5b:d4:a8:7f:85:50:86:71: 7b:42:bf:04:07:90:a2:e7:70:56:80:56:7a:be:a0: 83:53:72:f5:4c:1e:ab:c7:d0:63:48:85:ea:3b:fe: 41:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:B6:2D:4A:29:35:31:DE:D9:6A:2C:84:6E:E3:90:88:DA:67:49 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.64.0-13.141.111.255 13.141.128.0/17 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.183.255 169.40.188.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 39:10:c2:a9:cf:44:2c:71:2f:c3:a3:77:ea:2c:29:26:9f:e3: b1:ec:7a:61:5c:40:a6:63:31:d5:7a:cf:49:02:76:77:49:4b: e4:6a:5f:ae:4a:36:09:e8:fd:91:dd:ae:c5:da:35:18:08:86: aa:18:14:a9:f1:38:41:fa:ca:df:dd:b4:75:64:f7:a4:81:b3: 2d:01:99:a5:68:ed:59:06:a0:f7:a5:aa:29:a7:01:f9:11:94: f4:e4:c8:c4:d0:03:e4:1b:88:b1:33:b9:b8:39:e1:83:bd:6d: 0a:4a:1a:11:41:3a:06:41:df:8f:e5:38:71:ba:ca:d8:83:77: cb:fe:04:24:04:7c:92:b2:46:b5:90:d3:23:b9:d1:49:b9:7d: 86:bd:8d:21:05:b9:77:36:1d:77:fa:84:0f:15:c0:ea:e0:4e: 23:06:7f:bc:7c:76:54:11:b3:73:67:ac:d5:3b:b9:a6:ca:1a: 32:f5:a5:af:df:a3:30:51:af:ef:fc:a8:c3:0d:8c:ba:1e:46: 7c:6c:27:4f:fd:1e:28:32:f5:9c:f9:64:36:39:eb:c8:9e:93: 84:81:64:39:9c:f2:3c:20:11:b6:d1:3c:58:37:5f:ef:69:f2: 18:01:0c:e0:38:53:a7:05:68:a1:c2:f0:6b:92:cf:24:af:70: 77:d7:fe:22 -----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIUD9Z1EqitJqNevmU1nW+jL1hvwfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMjIyMzU1NDZaFw0yNzEwMjIwMDAwNDZaMDMxMTAvBgNV BAMTKDA3MTZCNjJENEEyOTM1MzFERUQ5NkEyQzg0NkVFMzkwODhEQTY3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SLRfVEBwkR3RWhpGTXbtitB2 dD9nGrAXveDwvTp5zg1TP8kjaq48o0FVeQ8KitgWC0wrNj33aEOQ4MQveaU6SsH9 aBYISLShFCz5Wb50DkMWpruoXN5jC/31O/uh2ximBzr+t0M6h20JRZoDO6v7rMOb zn3MmkLNfLazoEgY7G86V3jinnawneSD4+my6ndH9JpZp3KQDg+XgiiB8zbIfnPM vcw/mvzTt1TmI2lnRICXz7zeVzQw56a5wpWI+GolDtdKbFhCd40gfiCAahwQxqoM 4HLipwRb1Kh/hVCGcXtCvwQHkKLncFaAVnq+oINTcvVMHqvH0GNIheo7/kG5AgMB AAGjggJ1MIICcTAdBgNVHQ4EFgQUBxa2LUopNTHe2WoshG7jkIjaZ0kwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4wDAMEBg2NQAMEBA2NYAMEBw2N gAMEAKkogTAMAwQEqSiQAwQBqSiUAwQAqSiZAwQBqSicMAwDBAKpKKQDBAOpKLAD BAKpKLwDBASpKPAwDQYJKoZIhvcNAQELBQADggEBADkQwqnPRCxxL8Ojd+osKSaf 47HsemFcQKZjMdV6z0kCdndJS+RqX65KNgno/ZHdrsXaNRgIhqoYFKnxOEH6yt/d tHVk96SBsy0BmaVo7VkGoPelqimnAfkRlPTkyMTQA+QbiLEzubg54YO9bQpKGhFB OgZB34/lOHG6ytiDd8v+BCQEfJKyRrWQ0yO50Um5fYa9jSEFuXc2HXf6hA8VwOrg TiMGf7x8dlQRs3NnrNU7uabKGjL1pa/fozBRr+/8qMMNjLoeRnxsJ0/9Higy9Zz5 ZDY568iek4SBZDmc8jwgEbbRPFg3X+9p8hgBDOA4U6cFaKHC8GuSzySvcHfX/iI= -----END CERTIFICATE-----Generated at Thu Nov 5 08:58:47 2026 by rpki-client