$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: mnZrVflB7gqVL5qg/DNtANMnFBB2IbJ+hZv/q0zaCrI= Subject key identifier: B9:6B:03:EC:BF:D3:EF:4F:A1:A4:E2:BE:62:68:2A:31:44:84:7D:5F Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0DFFA3EE249F1FA3077882AD17D5AD95AD8FF808 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa Signing time: Fri 04 Sep 2026 10:19:43 +0000 ROA not before: Fri 04 Sep 2026 10:14:43 +0000 ROA not after: Fri 03 Sep 2027 10:19:43 +0000 asID: 9304 IP address blocks: 13.141.20.0/22 maxlen: 24 169.40.34.0/23 maxlen: 24 169.40.38.0/23 maxlen: 24 169.40.48.0/23 maxlen: 24 169.40.58.0/23 maxlen: 24 169.40.96.0/24 maxlen: 24 169.40.102.0/23 maxlen: 23 169.40.107.0/24 maxlen: 24 169.40.112.0/24 maxlen: 24 169.40.122.0/24 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 23:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:a3:ee:24:9f:1f:a3:07:78:82:ad:17:d5:ad:95:ad:8f:f8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Sep 4 10:14:43 2026 GMT Not After : Sep 3 10:19:43 2027 GMT Subject: CN=B96B03ECBFD3EF4FA1A4E2BE62682A3144847D5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:d1:60:1e:ba:fb:cf:a4:f6:2c:5f:a1:62: ec:f3:37:12:bd:97:c2:f0:6c:b6:aa:b6:ed:60:2e: 94:e7:ae:a2:7b:30:41:1b:a8:a4:a7:5d:7f:e5:d9: 54:cd:ca:6c:1e:58:5d:a6:dd:56:bf:b8:4f:5d:71: 6e:38:ba:96:5a:13:8e:40:10:bb:37:bf:36:56:e0: fb:46:d5:cd:ee:e9:fe:06:d7:b1:6e:a5:3d:12:34: 4a:e3:a8:c4:af:c0:66:69:71:a2:c7:24:75:c9:21: 33:0c:23:3c:bb:e6:f4:c7:7b:88:61:49:1b:b1:1e: a1:1f:f2:31:8d:52:66:6c:e0:3c:9f:3d:37:1a:df: 86:bb:e5:67:db:bb:73:70:58:c9:1a:cb:3f:d5:f7: 47:89:02:50:a9:22:40:41:20:19:05:d4:b3:f0:9a: a6:28:f9:b8:0d:9a:0e:d1:e2:bc:7b:79:c0:32:ed: 76:4f:8a:07:78:3c:60:f5:1a:21:57:85:f2:9c:53: da:ba:79:ba:ee:f1:55:29:6e:fd:32:eb:63:7a:78: f9:38:44:57:35:db:1d:4b:05:34:38:79:98:40:ed: 88:77:b2:6d:84:3a:a4:63:c1:26:90:27:9f:13:ef: 51:b3:0f:4c:6d:99:d3:0c:b7:a6:61:71:de:a7:88: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6B:03:EC:BF:D3:EF:4F:A1:A4:E2:BE:62:68:2A:31:44:84:7D:5F X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.141.20.0/22 169.40.34.0/23 169.40.38.0/23 169.40.48.0/23 169.40.58.0/23 169.40.96.0/24 169.40.102.0/23 169.40.107.0/24 169.40.112.0/24 169.40.122.0/24 169.40.153.0/24 169.40.208.0/22 Signature Algorithm: sha256WithRSAEncryption 65:5d:93:21:3b:87:4c:6e:2f:9d:62:dd:38:11:2c:d6:da:f7: b3:17:df:c9:0f:38:6d:36:45:31:cb:7e:3e:e9:ca:ca:9b:df: f6:9a:b5:8f:64:6d:64:4f:35:db:ce:14:87:a4:df:d6:3e:08: bf:d4:3c:82:24:07:7e:f7:6e:2a:ce:dd:9e:18:71:c2:a8:bb: 34:2e:35:ac:86:96:7c:19:d9:82:c3:a9:d2:4f:5f:41:77:de: 8d:cc:9a:07:a8:c2:54:14:e8:60:ed:ba:fb:47:7e:96:a4:02: 93:ca:4c:0a:0b:99:53:0f:9a:8a:36:39:3e:75:f2:e0:ea:73: aa:ec:e3:6a:f3:b0:16:51:de:af:d5:a0:68:8c:06:d9:39:35: dc:4d:81:de:76:99:02:75:6c:9f:27:8b:5a:8d:e4:8d:b4:0b: d9:63:97:f2:56:c6:24:99:9f:f1:1f:69:e5:32:34:36:21:19: ea:1b:ba:3b:25:ef:90:40:3b:f8:f5:20:89:33:57:a8:90:21: 7b:a3:40:a6:53:31:e0:3d:c2:2e:cb:ab:8d:12:c3:ff:cf:d7: 75:ab:63:b1:6e:ae:f0:74:bb:6b:d8:10:de:34:4d:16:21:70: 04:7d:26:d5:5b:7d:dd:96:19:8b:bc:9d:a5:55:64:69:bd:60: c8:c5:ba:c8 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUDf+j7iSfH6MHeIKtF9Wtla2P+AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjA5MDQxMDE0NDNaFw0yNzA5MDMxMDE5NDNaMDMxMTAvBgNV BAMTKEI5NkIwM0VDQkZEM0VGNEZBMUE0RTJCRTYyNjgyQTMxNDQ4NDdENUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmtFgHrr7z6T2LF+hYuzzNxK9 l8LwbLaqtu1gLpTnrqJ7MEEbqKSnXX/l2VTNymweWF2m3Va/uE9dcW44upZaE45A ELs3vzZW4PtG1c3u6f4G17FupT0SNErjqMSvwGZpcaLHJHXJITMMIzy75vTHe4hh SRuxHqEf8jGNUmZs4DyfPTca34a75Wfbu3NwWMkayz/V90eJAlCpIkBBIBkF1LPw mqYo+bgNmg7R4rx7ecAy7XZPigd4PGD1GiFXhfKcU9q6ebru8VUpbv0y62N6ePk4 RFc12x1LBTQ4eZhA7Yh3sm2EOqRjwSaQJ58T71GzD0xtmdMMt6Zhcd6niNmnAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUuWsD7L/T70+hpOK+YmgqMUSEfV8wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgDBAINjRQDBAGpKCIDBAGpKCYD BAGpKDADBAGpKDoDBACpKGADBAGpKGYDBACpKGsDBACpKHADBACpKHoDBACpKJkD BAKpKNAwDQYJKoZIhvcNAQELBQADggEBAGVdkyE7h0xuL51i3TgRLNba97MX38kP OG02RTHLfj7pysqb3/aatY9kbWRPNdvOFIek39Y+CL/UPIIkB373birO3Z4YccKo uzQuNayGlnwZ2YLDqdJPX0F33o3MmgeowlQU6GDtuvtHfpakApPKTAoLmVMPmoo2 OT518uDqc6rs42rzsBZR3q/VoGiMBtk5NdxNgd52mQJ1bJ8ni1qN5I20C9ljl/JW xiSZn/EfaeUyNDYhGeobujsl75BAO/j1IIkzV6iQIXujQKZTMeA9wi7Lq40Sw//P 13WrY7FurvB0u2vYEN40TRYhcAR9JtVbfd2WGYu8naVVZGm9YMjFusg= -----END CERTIFICATE-----Generated at Sun Sep 20 11:45:19 2026 by rpki-client