$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: aDh5OTY5cxtRn0utchxe62EyCctZAGtUE0OBHjdvb/8= Subject key identifier: D2:18:BF:5E:7A:7D:4F:46:33:E9:DE:6E:28:87:B4:02:86:9F:A6:19 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 441C17C067C0433D853CE90CE88CEFCA6ECE4873 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa Signing time: Tue 20 Oct 2026 04:16:08 +0000 ROA not before: Tue 20 Oct 2026 04:11:08 +0000 ROA not after: Tue 19 Oct 2027 04:16:08 +0000 asID: 9009 IP address blocks: 169.40.116.0/24 maxlen: 24 169.40.130.0/23 maxlen: 24 169.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1c:17:c0:67:c0:43:3d:85:3c:e9:0c:e8:8c:ef:ca:6e:ce:48:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Oct 20 04:11:08 2026 GMT Not After : Oct 19 04:16:08 2027 GMT Subject: CN=D218BF5E7A7D4F4633E9DE6E2887B402869FA619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1d:cd:7e:f3:03:d9:d2:29:90:0b:94:e9:43: d7:a2:b7:07:a1:b5:46:c2:cf:52:d3:f8:db:f6:c4: 99:49:b8:8d:08:80:5c:cb:8f:7f:27:4a:d1:91:ef: 82:2a:e0:de:18:8e:9d:5e:f2:72:6c:f0:15:4f:3b: cc:69:29:82:2d:eb:eb:51:f2:d4:8c:c1:de:0c:74: 0e:ea:f1:4d:5f:77:ec:16:27:34:5d:9e:e9:50:8c: 37:8e:1e:26:ba:a3:1a:ac:c5:cf:d9:48:16:4d:c2: 75:5e:71:a2:db:4e:9c:1c:a9:d2:8d:a1:6c:69:a9: 92:50:08:64:c3:f7:48:54:9f:fe:f6:3a:5b:a1:36: ed:50:20:87:eb:6a:42:63:9b:dd:f6:87:c6:6f:74: c2:80:e2:5c:64:a0:da:10:a4:d3:3e:7b:c4:2d:04: 7e:af:0b:d2:e1:ac:d6:d2:08:f6:35:da:75:10:fb: 17:0e:f6:83:24:19:e2:b2:6c:8a:91:10:34:8e:8a: ea:25:6b:1e:5a:4a:a1:96:4a:aa:f5:48:70:02:8a: 4c:35:09:8a:b2:9f:7c:0f:f8:a7:6f:1e:b5:eb:0d: dd:bb:8d:ae:95:e1:77:15:98:b0:ff:5f:72:a6:15: f9:f7:e4:59:20:e3:b5:73:a1:66:42:b3:a2:c0:3d: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:BF:5E:7A:7D:4F:46:33:E9:DE:6E:28:87:B4:02:86:9F:A6:19 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.116.0/24 169.40.130.0/23 169.40.154.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:b0:26:46:ed:8a:75:7f:44:bc:33:6d:9d:0f:0f:06:a8:1c: c9:7d:39:c0:5e:65:76:16:c8:a7:2d:6d:32:7a:2d:a5:9a:0f: c2:34:12:50:36:bd:2a:7c:bf:e1:d8:09:3c:d8:2e:67:71:73: 4f:68:72:e3:b9:d0:b8:e1:9e:3b:e5:ee:c9:68:35:9b:29:27: a1:e7:88:b4:0a:de:8d:e0:a4:f3:13:fd:77:98:33:71:0f:11: 92:f6:15:f2:90:00:09:39:f9:8a:4a:9b:62:84:b2:7f:cd:13: 19:15:71:c1:ea:f1:c2:24:28:1a:6a:37:78:a4:8d:bf:dc:17: 44:6c:e4:af:0d:68:15:df:2a:9a:9b:34:08:77:52:80:80:fc: dd:62:40:ec:7a:4c:19:09:e4:9b:ef:8b:b6:6b:3d:19:55:75: 81:ee:d3:e1:11:98:6e:09:c9:de:dc:91:95:cb:84:3f:93:1e: 95:a0:48:4e:d7:81:71:a6:cd:1e:96:e0:2b:b2:b2:41:62:67: 4b:42:59:46:b8:91:fb:ed:bc:84:e1:97:09:cc:d4:a0:d4:87: d6:54:27:04:1f:94:c9:b6:13:8f:fd:fc:39:50:8f:7d:9f:36: aa:19:ff:b8:04:d6:14:d4:7d:33:22:b1:eb:a5:8d:89:9f:51: 29:bc:b9:06 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURBwXwGfAQz2FPOkM6Izvym7OSHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjEwMjAwNDExMDhaFw0yNzEwMTkwNDE2MDhaMDMxMTAvBgNV BAMTKEQyMThCRjVFN0E3RDRGNDYzM0U5REU2RTI4ODdCNDAyODY5RkE2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHc1+8wPZ0imQC5TpQ9eitweh tUbCz1LT+Nv2xJlJuI0IgFzLj38nStGR74Iq4N4Yjp1e8nJs8BVPO8xpKYIt6+tR 8tSMwd4MdA7q8U1fd+wWJzRdnulQjDeOHia6oxqsxc/ZSBZNwnVecaLbTpwcqdKN oWxpqZJQCGTD90hUn/72OluhNu1QIIfrakJjm932h8ZvdMKA4lxkoNoQpNM+e8Qt BH6vC9LhrNbSCPY12nUQ+xcO9oMkGeKybIqREDSOiuolax5aSqGWSqr1SHACikw1 CYqyn3wP+KdvHrXrDd27ja6V4XcVmLD/X3KmFfn35Fkg47VzoWZCs6LAPZANAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU0hi/Xnp9T0Yz6d5uKIe0AoafphkwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACpKHQDBAGpKIIDBACpKJow DQYJKoZIhvcNAQELBQADggEBAIuwJkbtinV/RLwzbZ0PDwaoHMl9OcBeZXYWyKct bTJ6LaWaD8I0ElA2vSp8v+HYCTzYLmdxc09ocuO50Ljhnjvl7sloNZspJ6HniLQK 3o3gpPMT/XeYM3EPEZL2FfKQAAk5+YpKm2KEsn/NExkVccHq8cIkKBpqN3ikjb/c F0Rs5K8NaBXfKpqbNAh3UoCA/N1iQOx6TBkJ5Jvvi7ZrPRlVdYHu0+ERmG4Jyd7c kZXLhD+THpWgSE7XgXGmzR6W4CuyskFiZ0tCWUa4kfvtvIThlwnM1KDUh9ZUJwQf lMm2E4/9/DlQj32fNqoZ/7gE1hTUfTMiseuljYmfUSm8uQY= -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:16 2026 by rpki-client