
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: QInofXWRSBiehxoszeJq5ZyNs8ozl36HwEXJnnupSz8=
Subject key identifier: 6A:DE:FC:60:1F:D9:5C:0D:04:DC:49:76:F7:4C:A1:86:B7:E6:BB:1E
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 76911813F19063AD6D2DC5E597412957CDC13C52
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Fri 18 Sep 2026 12:27:44 +0000
ROA not before: Fri 18 Sep 2026 12:22:44 +0000
ROA not after: Fri 17 Sep 2027 12:27:44 +0000
asID: 834
IP address blocks: 13.141.24.0/22 maxlen: 24
13.141.32.0/22 maxlen: 24
13.141.48.0/22 maxlen: 24
13.141.56.0/21 maxlen: 24
13.141.64.0/20 maxlen: 24
13.141.112.0/21 maxlen: 24
13.141.120.0/22 maxlen: 24
169.40.36.0/24 maxlen: 24
169.40.43.0/24 maxlen: 24
169.40.44.0/24 maxlen: 24
169.40.47.0/24 maxlen: 24
169.40.57.0/24 maxlen: 24
169.40.68.0/22 maxlen: 24
169.40.72.0/21 maxlen: 24
169.40.104.0/24 maxlen: 24
169.40.124.0/23 maxlen: 24
169.40.132.0/24 maxlen: 24
169.40.155.0/24 maxlen: 24
169.40.158.0/24 maxlen: 24
169.40.204.0/22 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 23:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:91:18:13:f1:90:63:ad:6d:2d:c5:e5:97:41:29:57:cd:c1:3c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Sep 18 12:22:44 2026 GMT
Not After : Sep 17 12:27:44 2027 GMT
Subject: CN=6ADEFC601FD95C0D04DC4976F74CA186B7E6BB1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:03:cb:b8:fe:50:30:0a:16:ee:15:89:cd:
f2:0b:4c:d2:b1:b2:b0:4c:9c:c5:fe:e7:50:36:e1:
6f:b3:87:53:6a:0c:8c:21:cf:f2:5c:4d:f6:a3:79:
fd:a4:58:c1:17:44:87:82:ca:af:15:1d:02:6f:65:
2d:ba:c7:af:59:b9:08:39:b7:5f:8f:6d:ab:13:2c:
6b:c5:83:62:e8:a1:7c:88:8b:1b:95:6b:23:bd:52:
80:62:25:a6:ed:b8:d1:a8:3d:ad:1b:69:2d:9b:8a:
ce:65:fe:81:e9:7e:17:b4:08:aa:e7:15:c3:38:00:
7a:31:5c:a5:fe:e2:05:18:85:f4:01:3e:25:6c:87:
ee:c9:a7:c1:a5:4b:14:d1:59:cf:b3:07:94:61:7b:
8d:24:14:31:d1:47:be:c3:d3:a2:ee:de:10:ea:26:
ea:50:0d:9d:85:cd:fb:a1:5b:d7:36:6d:27:2a:67:
4d:79:f3:c9:eb:36:50:c5:80:19:3d:b4:42:b1:71:
6f:13:e6:15:66:c2:ec:7e:fb:98:bf:e1:71:09:ad:
0d:71:0b:0a:99:ab:d9:00:4d:97:f0:34:6e:40:f6:
da:b7:ac:8b:a1:ed:9f:52:3b:29:32:cc:38:b9:8e:
e6:39:ea:8f:d7:31:bd:c8:e1:31:32:52:7f:c7:f5:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DE:FC:60:1F:D9:5C:0D:04:DC:49:76:F7:4C:A1:86:B7:E6:BB:1E
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.24.0/22
13.141.32.0/22
13.141.48.0/22
13.141.56.0-13.141.79.255
13.141.112.0-13.141.123.255
169.40.36.0/24
169.40.43.0-169.40.44.255
169.40.47.0/24
169.40.57.0/24
169.40.68.0-169.40.79.255
169.40.104.0/24
169.40.124.0/23
169.40.132.0/24
169.40.155.0/24
169.40.158.0/24
169.40.204.0/22
169.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:81:ee:05:64:e5:5e:35:c8:d4:1a:ac:1c:9c:03:57:6b:6f:
60:95:1f:bc:72:53:aa:0b:ed:f9:04:0a:f4:77:dc:6f:f3:e7:
db:b7:12:b7:70:8c:54:53:17:cb:ad:3e:f8:c9:d9:f4:e9:c0:
f8:c1:9a:ff:a5:4c:35:82:9d:aa:af:1c:33:8d:0d:e6:4a:78:
d3:74:f0:54:bc:fc:bf:2b:8e:48:a8:89:33:bd:7d:40:5c:68:
ae:22:7c:74:5e:07:ea:57:3c:1c:1f:dc:9b:f1:0c:99:ac:f1:
a8:87:dc:21:44:ed:d8:1d:81:33:cf:bb:69:0f:65:74:e4:11:
3f:8b:91:97:9b:5c:d9:7f:ff:0e:be:99:3e:1b:5c:e8:7c:4d:
53:08:e3:e0:d2:40:3b:8a:1c:be:90:3b:32:43:82:b9:f5:dd:
53:22:3b:9b:36:d8:72:c3:18:10:2b:b4:ea:c5:55:29:8d:65:
0e:96:a5:e3:79:be:cd:61:4e:fd:70:7e:f8:7c:2d:52:3b:e3:
f4:b8:a2:1e:f9:17:65:d8:1b:a1:42:55:1f:0f:a9:6b:bc:e0:
c5:b2:4a:ee:b0:fe:54:c4:ad:21:c2:12:9f:b4:01:c4:66:b7:
93:2b:b3:92:f7:fd:1e:24:41:1e:2b:20:ed:26:71:83:98:dc:
38:fd:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:25:05 2026 by rpki-client