Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: cEYxbVELrynYlUdyhKl/1o9TgghdnqAIZUoJTqcktqw=
Subject key identifier: 22:3D:7D:26:28:B8:30:BD:43:08:FD:12:1B:77:A6:E2:F5:7D:9F:BB
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 5393E4E4E472119C09208BFF523E7854BB0DFA2C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Fri 12 Jun 2026 15:43:59 +0000
ROA not before: Fri 12 Jun 2026 15:38:59 +0000
ROA not after: Fri 11 Jun 2027 15:43:59 +0000
asID: 834
IP address blocks: 13.141.24.0/22 maxlen: 24
13.141.32.0/22 maxlen: 24
13.141.56.0/21 maxlen: 24
13.141.72.0/21 maxlen: 24
13.141.96.0/22 maxlen: 24
13.141.104.0/21 maxlen: 24
13.141.112.0/21 maxlen: 24
13.141.120.0/22 maxlen: 24
169.40.33.0/24 maxlen: 24
169.40.35.0/24 maxlen: 24
169.40.37.0/24 maxlen: 24
169.40.38.0/23 maxlen: 24
169.40.46.0/23 maxlen: 24
169.40.59.0/24 maxlen: 24
169.40.68.0/22 maxlen: 24
169.40.72.0/21 maxlen: 24
169.40.80.0/20 maxlen: 24
169.40.98.0/24 maxlen: 24
169.40.100.0/24 maxlen: 24
169.40.112.0/24 maxlen: 24
169.40.115.0/24 maxlen: 24
169.40.116.0/24 maxlen: 24
169.40.119.0/24 maxlen: 24
169.40.121.0/24 maxlen: 24
169.40.122.0/24 maxlen: 24
169.40.124.0/23 maxlen: 24
169.40.132.0/24 maxlen: 24
169.40.136.0/24 maxlen: 24
169.40.143.0/24 maxlen: 24
169.40.151.0/24 maxlen: 24
169.40.152.0/24 maxlen: 24
169.40.158.0/23 maxlen: 24
169.40.160.0/22 maxlen: 24
169.40.192.0/21 maxlen: 24
169.40.200.0/22 maxlen: 24
169.40.208.0/22 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 15:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:93:e4:e4:e4:72:11:9c:09:20:8b:ff:52:3e:78:54:bb:0d:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Jun 12 15:38:59 2026 GMT
Not After : Jun 11 15:43:59 2027 GMT
Subject: CN=223D7D2628B830BD4308FD121B77A6E2F57D9FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:1b:a4:4b:cd:75:25:2f:bc:b2:a3:8a:0a:
5c:26:62:5c:78:06:d0:21:5a:de:83:dd:e3:da:d9:
10:48:38:47:3c:7c:6a:b4:d6:e2:24:40:2b:18:d7:
ee:ae:d9:c5:f4:e4:88:23:3f:48:a9:6d:94:5b:7b:
67:26:eb:72:90:83:a3:a7:c8:80:b9:b4:09:0e:35:
f6:d3:e5:d6:f0:59:d1:59:02:40:86:f7:be:b6:41:
e1:ec:40:4b:bd:35:4b:9e:75:50:73:72:c9:c5:8b:
65:05:88:e5:d6:8a:fc:d3:78:cf:8d:68:e7:37:54:
9c:96:a3:c6:5a:b6:eb:90:58:a4:be:12:92:7a:37:
bb:62:ac:b2:84:fb:9d:d8:22:eb:27:b0:ac:1f:d3:
79:19:89:d1:ea:3d:7e:58:cf:7c:e5:b3:24:3f:ac:
56:f3:ad:34:91:ff:60:12:37:c5:26:89:e4:7d:bb:
d2:a1:ba:9f:41:bd:e8:f6:14:a0:ac:f8:27:5a:54:
ee:13:d0:49:5b:fc:13:58:fa:09:70:89:1f:0e:f4:
b0:3f:1f:a9:ee:a6:87:63:9e:72:e4:cc:83:a0:af:
02:ab:24:6f:f4:3a:c3:7f:d7:89:5b:ed:b3:dc:20:
76:b5:46:c8:eb:aa:c9:92:b6:32:42:ea:0c:b1:da:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:7D:26:28:B8:30:BD:43:08:FD:12:1B:77:A6:E2:F5:7D:9F:BB
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.24.0/22
13.141.32.0/22
13.141.56.0/21
13.141.72.0/21
13.141.96.0/22
13.141.104.0-13.141.123.255
169.40.33.0/24
169.40.35.0/24
169.40.37.0-169.40.39.255
169.40.46.0/23
169.40.59.0/24
169.40.68.0-169.40.95.255
169.40.98.0/24
169.40.100.0/24
169.40.112.0/24
169.40.115.0-169.40.116.255
169.40.119.0/24
169.40.121.0-169.40.122.255
169.40.124.0/23
169.40.132.0/24
169.40.136.0/24
169.40.143.0/24
169.40.151.0-169.40.152.255
169.40.158.0-169.40.163.255
169.40.192.0-169.40.203.255
169.40.208.0/22
169.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:45:4c:87:39:52:7f:3f:07:0e:07:6f:57:21:f0:6f:80:ff:
0f:b9:95:ad:a4:08:75:a8:e8:86:4b:1f:b1:e9:db:74:b1:c5:
d0:23:eb:05:cb:5e:b0:60:9f:56:e9:b2:44:cc:8b:6c:78:f5:
d8:86:db:c6:0f:62:67:5f:0c:5c:ef:3c:88:07:cb:ce:12:34:
31:12:fe:2a:e1:04:79:87:d9:8d:55:fb:7d:98:96:46:86:71:
a6:7f:b4:de:61:af:19:19:86:3c:2b:26:11:aa:3c:ae:3c:86:
21:a0:00:e2:64:48:24:af:d5:0a:00:0b:b7:76:97:33:40:f9:
53:eb:b5:ae:b9:53:e8:e5:c9:f9:b4:af:8d:29:dc:8d:fc:43:
d8:ed:a1:c8:26:45:c3:ef:1a:f9:50:bf:47:69:1e:f4:ba:4e:
7f:bc:98:fc:2e:55:e8:72:19:92:a2:b6:29:3e:18:09:ac:e4:
9b:42:47:d5:dd:d4:ab:66:26:45:05:1c:0f:12:92:e4:e1:a3:
ed:cf:ee:f2:4e:bf:e4:d1:d5:61:92:81:ce:28:67:6e:9e:0e:
77:d3:5e:61:0a:ee:51:46:f5:7b:1e:84:bc:b1:15:a2:96:71:
87:54:19:c0:75:1b:e4:83:e2:bd:10:7a:8e:e5:24:23:10:8b:
34:79:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:45:04 2026 by rpki-client