$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: II2BT14LE2lv4ynDw4OFoQ5ACIA5ci4W8k1+HcR9o88= Subject key identifier: 09:F4:53:BE:9E:9A:BD:7E:45:49:43:5C:0E:F5:19:75:B6:27:33:66 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 75333D25EE513985A307D41EA199A0257A7BAD37 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa Signing time: Thu 17 Sep 2026 00:04:43 +0000 ROA not before: Wed 16 Sep 2026 23:59:43 +0000 ROA not after: Thu 16 Sep 2027 00:04:43 +0000 asID: 7029 IP address blocks: 13.141.0.0/20 maxlen: 24 13.141.16.0/22 maxlen: 24 13.141.40.0/22 maxlen: 24 13.141.64.0/19 maxlen: 24 13.141.80.0/20 maxlen: 24 13.141.96.0/20 maxlen: 24 13.141.128.0/17 maxlen: 24 13.141.156.0/22 maxlen: 24 13.141.160.0/19 maxlen: 24 13.141.192.0/18 maxlen: 24 169.40.129.0/24 maxlen: 24 169.40.144.0/24 maxlen: 24 169.40.145.0/24 maxlen: 24 169.40.146.0/23 maxlen: 24 169.40.148.0/23 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.156.0/23 maxlen: 24 169.40.164.0/22 maxlen: 24 169.40.168.0/22 maxlen: 24 169.40.172.0/22 maxlen: 24 169.40.176.0/22 maxlen: 24 169.40.180.0/22 maxlen: 24 169.40.188.0/22 maxlen: 24 169.40.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:33:3d:25:ee:51:39:85:a3:07:d4:1e:a1:99:a0:25:7a:7b:ad:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 16 23:59:43 2026 GMT Not After : Sep 16 00:04:43 2027 GMT Subject: CN=09F453BE9E9ABD7E4549435C0EF51975B6273366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:18:3c:6c:01:e4:2e:0a:f8:a3:33:c6:79: d7:78:19:b8:4d:db:c8:ca:b5:d5:da:4a:3c:f1:06: e3:51:b0:76:b6:e2:4e:ce:37:69:db:a9:f5:1a:6e: 8c:f9:36:54:d3:9f:30:85:ea:bf:d9:09:b5:eb:22: 1d:2a:4c:81:3f:7b:55:ae:08:03:e8:45:25:83:dc: 98:ba:82:3c:5b:78:5e:5c:b8:4f:ce:2e:73:e6:c3: f1:ec:4e:71:29:65:17:b0:39:cf:d9:17:f8:c4:3f: ec:ac:fa:9d:fe:21:3a:ab:2f:c7:70:24:ce:84:c3: 14:a8:3a:83:b3:c3:2d:3a:f9:b9:9b:7c:f2:c7:2d: ec:fb:ec:6e:5a:59:47:3a:05:33:df:4f:bd:72:6f: 95:44:3d:8d:c5:a5:ca:bc:07:06:b3:70:9e:28:1f: 2a:34:65:42:1a:f4:64:ab:df:43:21:f6:0e:e7:f7: 08:99:be:6d:01:a7:7a:58:e8:c8:25:4a:bd:4f:e2: f1:6e:50:80:4e:8a:5a:33:e2:05:17:8b:45:c9:4a: 38:16:02:74:1b:c6:7f:ab:79:e3:37:af:cf:d2:d2: c9:52:0e:b2:51:e7:55:cf:21:ff:23:7f:b0:09:a2: f8:77:cc:54:1b:40:9f:9a:5b:89:f7:5c:14:92:36: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F4:53:BE:9E:9A:BD:7E:45:49:43:5C:0E:F5:19:75:B6:27:33:66 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.0.0-13.141.19.255 13.141.40.0/22 13.141.64.0-13.141.111.255 13.141.128.0/17 169.40.129.0/24 169.40.144.0-169.40.149.255 169.40.153.0/24 169.40.156.0/23 169.40.164.0-169.40.183.255 169.40.188.0/22 169.40.240.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:e4:41:07:05:2d:05:64:0f:39:62:08:49:a3:30:e7:1e:f1: ba:a3:85:a0:0a:e7:9b:1e:90:0e:2b:21:19:ce:10:85:04:04: 0b:47:25:e2:41:96:e8:d4:d1:b8:15:b4:b4:f3:f0:4e:2d:42: f3:55:bf:a7:6c:96:9f:29:30:55:82:a3:de:1e:a7:49:44:b5: 5f:cc:a8:8b:70:91:00:0f:0d:e2:56:fd:e8:de:77:10:f6:e1: 11:7f:67:0d:9a:91:eb:53:2b:85:ff:cb:4e:30:09:81:3b:ae: 0c:33:2e:20:f3:5c:7a:1f:e3:55:ca:17:fc:af:8e:7d:de:82: 3f:80:7d:0d:21:24:f7:0e:f1:0c:1c:38:f6:e3:4b:7b:22:4a: 18:8a:93:8b:09:f0:57:63:61:0a:75:11:16:ea:39:94:e0:0e: 53:92:4a:c2:4a:ad:cc:48:3a:e8:f7:5b:31:b4:87:00:a6:b6: 85:fe:1c:c7:13:13:28:37:93:26:67:b6:de:30:53:f6:58:b5: 7e:35:aa:46:3f:df:6b:b2:ac:ba:9b:4d:ff:b3:14:17:db:c2: 35:51:6e:c3:04:3c:c7:25:96:e7:e4:2f:c9:16:eb:d6:f3:54: 3f:73:09:83:e4:9e:35:1f:24:31:c4:99:85:31:c9:81:8f:4a: a8:4b:70:db -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUdTM9Je5ROYWjB9QeoZmgJXp7rTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MTYyMzU5NDNaFw0yNzA5MTYwMDA0NDNaMDMxMTAvBgNV BAMTKDA5RjQ1M0JFOUU5QUJEN0U0NTQ5NDM1QzBFRjUxOTc1QjYyNzMzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2xg8bAHkLgr4ozPGedd4GbhN 28jKtdXaSjzxBuNRsHa24k7ON2nbqfUaboz5NlTTnzCF6r/ZCbXrIh0qTIE/e1Wu CAPoRSWD3Ji6gjxbeF5cuE/OLnPmw/HsTnEpZRewOc/ZF/jEP+ys+p3+ITqrL8dw JM6EwxSoOoOzwy06+bmbfPLHLez77G5aWUc6BTPfT71yb5VEPY3Fpcq8BwazcJ4o Hyo0ZUIa9GSr30Mh9g7n9wiZvm0Bp3pY6MglSr1P4vFuUIBOiloz4gUXi0XJSjgW AnQbxn+reeM3r8/S0slSDrJR51XPIf8jf7AJovh3zFQbQJ+aW4n3XBSSNlFrAgMB AAGjggKIMIIChDAdBgNVHQ4EFgQUCfRTvp6avX5FSUNcDvUZdbYnM2YwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwegYIKwYBBQUHAQcBAf8EazBpMGcEAgABMGEwCwMDAA2NAwQCDY0QAwQCDY0o MAwDBAYNjUADBAQNjWADBAcNjYADBACpKIEwDAMEBKkokAMEAakolAMEAKkomQME AakonDAMAwQCqSikAwQDqSiwAwQCqSi8AwQEqSjwMA0GCSqGSIb3DQEBCwUAA4IB AQAL5EEHBS0FZA85YghJozDnHvG6o4WgCuebHpAOKyEZzhCFBAQLRyXiQZbo1NG4 FbS08/BOLULzVb+nbJafKTBVgqPeHqdJRLVfzKiLcJEADw3iVv3o3ncQ9uERf2cN mpHrUyuF/8tOMAmBO64MMy4g81x6H+NVyhf8r4593oI/gH0NIST3DvEMHDj240t7 IkoYipOLCfBXY2EKdREW6jmU4A5TkkrCSq3MSDro91sxtIcApraF/hzHExMoN5Mm Z7beMFP2WLV+NapGP99rsqy6m03/sxQX28I1UW7DBDzHJZbn5C/JFuvW81Q/cwmD 5J41HyQxxJmFMcmBj0qoS3Db -----END CERTIFICATE-----Generated at Sun Sep 20 11:44:46 2026 by rpki-client