Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: 64Mag3R3+cn2ndQ92xQ48U60wEf6lvBSmmtSTyFulnA=
Subject key identifier: 63:95:EC:03:70:81:78:87:50:BE:5A:53:5C:80:F5:E5:57:3F:5B:DF
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 31EC2894C2BD3538977644481D7683A3D2EBC3CA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Thu 05 Nov 2026 04:02:21 +0000
ROA not before: Thu 05 Nov 2026 03:57:21 +0000
ROA not after: Thu 04 Nov 2027 04:02:21 +0000
asID: 834
IP address blocks: 13.141.1.0/24 maxlen: 24
13.141.5.0/24 maxlen: 24
13.141.7.0/24 maxlen: 24
13.141.9.0/24 maxlen: 24
13.141.11.0/24 maxlen: 24
13.141.13.0/24 maxlen: 24
13.141.15.0/24 maxlen: 24
13.141.22.0/23 maxlen: 24
13.141.26.0/24 maxlen: 24
13.141.32.0/24 maxlen: 24
13.141.35.0/24 maxlen: 24
13.141.36.0/22 maxlen: 24
13.141.55.0/24 maxlen: 24
13.141.62.0/24 maxlen: 24
13.141.64.0/24 maxlen: 24
13.141.69.0/24 maxlen: 24
13.141.76.0/23 maxlen: 24
13.141.121.0/24 maxlen: 24
13.141.123.0/24 maxlen: 24
13.141.127.0/24 maxlen: 24
169.40.58.0/24 maxlen: 24
169.40.60.0/22 maxlen: 24
169.40.72.0/22 maxlen: 24
169.40.128.0/24 maxlen: 24
169.40.132.0/24 maxlen: 24
169.40.160.0/22 maxlen: 24
169.40.192.0/22 maxlen: 24
169.40.204.0/22 maxlen: 24
169.40.208.0/22 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ec:28:94:c2:bd:35:38:97:76:44:48:1d:76:83:a3:d2:eb:c3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Nov 5 03:57:21 2026 GMT
Not After : Nov 4 04:02:21 2027 GMT
Subject: CN=6395EC037081788750BE5A535C80F5E5573F5BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:12:ca:11:3f:fc:d2:a8:21:fb:49:cd:17:
24:82:d3:4c:a7:d7:ec:e7:99:b8:70:20:f7:a9:a6:
05:04:20:74:4a:27:af:ec:ac:dd:96:aa:9b:60:47:
66:f7:ab:87:a7:b5:56:79:d5:dd:93:ed:db:d6:d7:
b8:a1:4d:c0:f7:65:3e:36:3c:1e:e2:a4:0b:18:e3:
bd:5d:84:07:d1:ff:0b:4f:7c:c2:39:5c:ff:e3:32:
b8:a1:bb:45:37:6f:b0:20:a4:f2:5e:ee:92:2a:e5:
41:1a:63:53:94:42:f2:5e:33:53:40:56:d8:f1:b7:
cf:b8:c1:f6:18:b4:11:09:a7:aa:36:68:9b:ad:27:
a7:57:49:79:69:ea:29:0f:da:a0:27:ac:30:3c:a0:
49:96:22:19:0d:57:0d:df:30:55:55:68:c7:dc:b1:
42:8b:cc:a8:37:cc:0c:9a:c1:1d:92:9c:a9:92:8a:
e3:cd:27:a4:c8:26:39:2d:74:01:62:ab:58:29:78:
4b:55:17:44:bb:b1:a3:f5:ba:e8:7a:44:1c:ad:a8:
8b:e3:cb:d9:1c:c1:42:66:8a:5c:56:92:7e:a2:bd:
5c:6e:40:52:ce:eb:ea:bb:13:3e:c8:51:eb:7e:bb:
59:1d:ff:cf:03:d5:c6:d9:8c:c0:58:89:08:32:b4:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:EC:03:70:81:78:87:50:BE:5A:53:5C:80:F5:E5:57:3F:5B:DF
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.1.0/24
13.141.5.0/24
13.141.7.0/24
13.141.9.0/24
13.141.11.0/24
13.141.13.0/24
13.141.15.0/24
13.141.22.0/23
13.141.26.0/24
13.141.32.0/24
13.141.35.0-13.141.39.255
13.141.55.0/24
13.141.62.0/24
13.141.64.0/24
13.141.69.0/24
13.141.76.0/23
13.141.121.0/24
13.141.123.0/24
13.141.127.0/24
169.40.58.0/24
169.40.60.0/22
169.40.72.0/22
169.40.128.0/24
169.40.132.0/24
169.40.160.0/22
169.40.192.0/22
169.40.204.0-169.40.211.255
169.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
31:5f:e4:8c:77:1f:0c:8e:b2:73:fb:fe:a4:04:67:39:71:a6:
80:88:98:93:e9:0b:93:2f:6e:54:94:d6:93:6b:d2:48:f0:fa:
ed:ce:bc:75:7b:9c:f8:d7:1f:d1:3b:26:89:68:03:fb:6b:8e:
54:81:b1:b2:e7:93:f2:12:83:3b:44:c7:b5:4e:b9:57:87:1b:
83:6e:23:a5:b2:f3:21:4a:35:de:fc:96:cb:58:4f:f1:9d:0d:
4c:08:7c:20:ea:b8:23:59:98:9d:77:61:67:af:b4:1e:e5:59:
57:46:a7:1d:e3:a9:ba:50:85:06:31:ac:f8:fd:2e:41:34:27:
c2:ab:9b:ad:52:a3:72:2b:2d:b6:ce:8c:20:75:ff:42:9c:31:
8b:59:dc:73:1d:24:73:30:8e:6c:e0:8f:b2:9b:51:13:25:83:
0d:8b:fc:6b:12:1c:db:85:ee:32:d7:88:dd:ba:09:77:50:a9:
dc:c1:a5:0c:29:0b:07:b1:4d:e1:40:73:1d:da:89:c0:33:02:
41:a0:86:18:64:f7:70:62:a8:f3:81:1d:ba:fd:d5:37:af:20:
da:18:b2:1a:8c:9b:7f:e9:80:c0:8b:00:81:70:4a:a2:ff:aa:
6d:81:63:67:60:be:c1:97:22:2b:80:d6:38:e6:c6:67:df:71:
56:60:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:15:42 2026 by rpki-client