Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: mB+9MqJ6ppBatvFKM+Flv6fHG+ryeWD9jr7ZpiMFGRI=
Subject key identifier: E0:D0:7A:0F:90:DF:60:F2:D1:A7:F2:CC:43:F2:C0:8A:65:36:57:B0
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 08FDA698CCAC022AB5CD728274C88773C788B903
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
Signing time: Fri 17 Apr 2026 01:19:15 +0000
ROA not before: Fri 17 Apr 2026 01:14:15 +0000
ROA not after: Fri 16 Apr 2027 01:19:15 +0000
asID: 834
IP address blocks: 13.141.20.0/22 maxlen: 24
13.141.24.0/22 maxlen: 24
13.141.32.0/22 maxlen: 24
13.141.56.0/21 maxlen: 24
13.141.64.0/19 maxlen: 24
13.141.96.0/22 maxlen: 24
13.141.104.0/21 maxlen: 24
13.141.112.0/21 maxlen: 24
13.141.120.0/22 maxlen: 24
169.40.35.0/24 maxlen: 24
169.40.39.0/24 maxlen: 24
169.40.57.0/24 maxlen: 24
169.40.58.0/24 maxlen: 24
169.40.68.0/22 maxlen: 24
169.40.72.0/21 maxlen: 24
169.40.107.0/24 maxlen: 24
169.40.110.0/24 maxlen: 24
169.40.112.0/24 maxlen: 24
169.40.115.0/24 maxlen: 24
169.40.119.0/24 maxlen: 24
169.40.122.0/23 maxlen: 24
169.40.137.0/24 maxlen: 24
169.40.140.0/24 maxlen: 24
169.40.150.0/24 maxlen: 24
169.40.155.0/24 maxlen: 24
169.40.160.0/22 maxlen: 24
169.40.208.0/20 maxlen: 24
169.40.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fd:a6:98:cc:ac:02:2a:b5:cd:72:82:74:c8:87:73:c7:88:b9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Apr 17 01:14:15 2026 GMT
Not After : Apr 16 01:19:15 2027 GMT
Subject: CN=E0D07A0F90DF60F2D1A7F2CC43F2C08A653657B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:b8:88:c2:e4:09:08:e3:68:47:05:a6:45:
81:95:4c:63:7f:4a:4b:89:9e:2b:86:c0:b6:91:e8:
01:29:d2:12:23:a1:54:96:d7:84:46:3e:ae:9d:f7:
97:3f:24:39:1c:ce:9a:4a:b8:97:97:43:a6:30:13:
b1:79:d5:73:f7:1a:55:a8:ee:20:de:60:2e:d1:e4:
76:5e:cb:40:e7:b6:f6:05:3c:10:fb:e6:eb:e5:9f:
8e:47:9e:90:19:cc:d7:aa:42:0c:0e:0e:d9:3d:d5:
83:40:76:cf:14:67:11:f2:c0:99:d6:da:7d:2a:bc:
fe:6c:b3:8e:3d:b7:cb:b1:0c:7d:68:cf:48:f9:11:
f3:8f:32:f2:54:97:3a:9d:42:7c:13:1f:2f:17:16:
d6:75:91:12:48:fb:58:5a:96:42:7a:c9:26:ab:c8:
c4:af:b8:64:ed:f2:40:ce:7a:1c:8d:8c:96:a7:fd:
20:4f:87:51:6f:e9:66:47:7b:fc:03:8f:c1:55:c2:
bb:e3:84:56:54:41:4d:92:35:c7:66:53:04:ef:a7:
33:5e:d7:1c:94:17:6f:2e:89:f9:6b:2a:88:e0:2e:
d0:34:5b:5d:af:94:84:cf:68:ef:ce:90:94:55:e5:
ea:98:f0:e3:7d:a4:5a:ec:ae:3e:71:a9:2f:74:93:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:7A:0F:90:DF:60:F2:D1:A7:F2:CC:43:F2:C0:8A:65:36:57:B0
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.141.20.0-13.141.27.255
13.141.32.0/22
13.141.56.0-13.141.99.255
13.141.104.0-13.141.123.255
169.40.35.0/24
169.40.39.0/24
169.40.57.0-169.40.58.255
169.40.68.0-169.40.79.255
169.40.107.0/24
169.40.110.0/24
169.40.112.0/24
169.40.115.0/24
169.40.119.0/24
169.40.122.0/23
169.40.137.0/24
169.40.140.0/24
169.40.150.0/24
169.40.155.0/24
169.40.160.0/22
169.40.208.0-169.40.239.255
Signature Algorithm: sha256WithRSAEncryption
57:5e:3a:38:ca:bd:83:e3:d5:0b:fb:b7:21:7a:da:c4:f1:a4:
07:b0:40:1f:9f:0e:ca:7a:53:29:b7:c3:fb:c5:42:74:7c:e6:
30:11:2c:13:15:c7:30:c2:05:32:7a:17:84:b5:fe:d4:62:d5:
bf:98:9d:17:99:f5:10:5c:82:59:89:f0:3e:99:80:d6:1d:8d:
24:01:58:b7:dc:9d:21:51:e0:4a:b0:52:85:53:67:99:2c:57:
bb:5c:39:86:8f:44:62:3c:a3:d4:48:5b:07:ea:24:6d:cf:e9:
20:3c:9d:13:11:91:27:05:5d:55:61:ba:24:e5:5e:c9:f8:b9:
51:46:01:41:c1:b1:b1:89:72:b0:61:7d:5b:35:d3:c9:61:41:
57:f8:36:3f:09:c6:1c:63:86:e2:04:e4:4f:17:0f:48:af:95:
cd:90:55:6b:13:f7:5b:54:7b:1c:fc:10:58:cb:a9:4a:11:4d:
41:4f:d5:09:56:2c:44:18:dc:5b:07:ac:7d:c7:6d:a1:83:fa:
d3:be:9b:b3:f9:89:dc:5b:ba:3a:f9:a5:c1:f6:ba:6f:9c:a7:
08:6a:c9:cc:ac:65:94:6b:3c:ea:35:ab:6a:cf:52:ea:8d:7b:
cc:41:3b:04:68:c4:5d:d6:a5:59:e3:fd:75:74:5d:3c:44:ff:
ca:81:fd:08
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUCP2mmMysAiq1zXKCdMiHc8eIuQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA0MTcwMTE0MTVaFw0yNzA0MTYwMTE5MTVaMDMxMTAvBgNV
BAMTKEUwRDA3QTBGOTBERjYwRjJEMUE3RjJDQzQzRjJDMDhBNjUzNjU3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS07iIwuQJCONoRwWmRYGVTGN/
SkuJniuGwLaR6AEp0hIjoVSW14RGPq6d95c/JDkczppKuJeXQ6YwE7F51XP3GlWo
7iDeYC7R5HZey0DntvYFPBD75uvln45HnpAZzNeqQgwODtk91YNAds8UZxHywJnW
2n0qvP5ss449t8uxDH1oz0j5EfOPMvJUlzqdQnwTHy8XFtZ1kRJI+1halkJ6ySar
yMSvuGTt8kDOehyNjJan/SBPh1Fv6WZHe/wDj8FVwrvjhFZUQU2SNcdmUwTvpzNe
1xyUF28uiflrKojgLtA0W12vlITPaO/OkJRV5eqY8ON9pFrsrj5xqS90k4dxAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQU4NB6D5DfYPLRp/LMQ/LAimU2V7AwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjCBxQYIKwYBBQUHAQcBAf8EgbUwgbIwga8EAgABMIGoMAwDBAINjRQDBAINjRgD
BAINjSAwDAMEAw2NOAMEAg2NYDAMAwQDDY1oAwQCDY14AwQAqSgjAwQAqSgnMAwD
BACpKDkDBACpKDowDAMEAqkoRAMEBKkoQAMEAKkoawMEAKkobgMEAKkocAMEAKko
cwMEAKkodwMEAakoegMEAKkoiQMEAKkojAMEAKkolgMEAKkomwMEAqkooDAMAwQE
qSjQAwQEqSjgMA0GCSqGSIb3DQEBCwUAA4IBAQBXXjo4yr2D49UL+7chetrE8aQH
sEAfnw7KelMpt8P7xUJ0fOYwESwTFccwwgUyeheEtf7UYtW/mJ0XmfUQXIJZifA+
mYDWHY0kAVi33J0hUeBKsFKFU2eZLFe7XDmGj0RiPKPUSFsH6iRtz+kgPJ0TEZEn
BV1VYbok5V7J+LlRRgFBwbGxiXKwYX1bNdPJYUFX+DY/CcYcY4biBORPFw9Ir5XN
kFVrE/dbVHsc/BBYy6lKEU1BT9UJVixEGNxbB6x9x22hg/rTvpuz+YncW7o6+aXB
9rpvnKcIasnMrGWUazzqNatqz1LqjXvMQTsEaMRd1qVZ4/11dF08RP/Kgf0I
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:49 2026 by rpki-client