Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401362.roa
File:                     AS401362.roa (raw, json)
Hash identifier:          Br5fFwuyfPhE90gNrnhMtPbGAeK2K5G5fbrEuUzBsQs=
Subject key identifier:   26:22:A8:E7:F2:C4:D0:7C:F2:7F:13:B6:04:70:07:0F:B9:6B:5C:CC
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       4E8F33C1BE809BA890C0B98E919285A3274818BD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401362.roa
Signing time:             Thu 10 Sep 2026 08:16:44 +0000
ROA not before:           Thu 10 Sep 2026 08:11:44 +0000
ROA not after:            Thu 09 Sep 2027 08:16:44 +0000
asID:                     401362
IP address blocks:        89.116.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8f:33:c1:be:80:9b:a8:90:c0:b9:8e:91:92:85:a3:27:48:18:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Sep 10 08:11:44 2026 GMT
            Not After : Sep  9 08:16:44 2027 GMT
        Subject: CN=2622A8E7F2C4D07CF27F13B60470070FB96B5CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:6c:a7:1e:97:90:e1:85:ed:a6:73:b5:86:
                    e7:5a:2a:89:64:30:f0:5f:29:31:c8:5e:a4:0a:c7:
                    86:4d:e0:60:29:f6:f5:0a:69:58:60:44:42:9c:ff:
                    0a:85:99:10:d8:a7:21:03:67:a0:0c:67:16:12:a6:
                    cc:8d:e4:d8:c8:9e:64:94:12:21:bc:a3:18:77:b9:
                    e3:48:6d:19:f7:8d:48:83:c8:aa:30:a6:10:21:8e:
                    26:d5:c7:b2:70:9e:96:31:52:ca:f8:10:7c:d7:da:
                    2f:57:cc:84:b7:9c:1e:95:66:09:61:f9:11:0d:0f:
                    96:60:39:4d:60:42:eb:53:4c:bd:0f:4e:05:55:d7:
                    ef:61:8c:c7:f9:d8:73:4a:d1:14:e1:aa:74:21:dd:
                    f5:46:ab:d6:09:6a:fa:66:df:de:59:55:5b:ec:00:
                    9a:73:60:cf:38:d2:ba:38:14:17:1b:36:50:ae:a6:
                    83:f5:aa:9b:41:60:a0:d5:1e:80:ef:2a:72:ae:70:
                    94:74:f1:2f:14:d7:d1:a5:15:c5:28:d4:73:b8:85:
                    86:6a:64:c8:bc:c6:d0:67:ec:15:f0:7c:eb:21:89:
                    6c:74:5e:f8:27:fc:55:49:a4:85:5c:ce:bc:10:a6:
                    64:9b:e3:b6:b4:5a:78:e8:86:6c:e3:1b:00:c0:e1:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:22:A8:E7:F2:C4:D0:7C:F2:7F:13:B6:04:70:07:0F:B9:6B:5C:CC
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:15:4a:f0:96:2c:13:29:ac:14:ba:fa:57:25:77:d5:df:fc:
         c4:7a:a6:06:0d:a4:b4:f0:39:11:bf:f4:71:83:a0:4a:9b:3e:
         51:c2:d2:cc:55:b9:b3:54:6b:ce:28:17:bf:40:dc:d2:39:aa:
         46:e0:33:17:74:43:a9:49:9d:d2:3f:7e:81:02:d3:38:e7:ae:
         ff:fc:bc:96:9c:39:3a:d6:21:35:e6:12:17:c9:cf:e1:52:3f:
         3d:77:44:3a:77:17:74:eb:c6:ec:b6:d4:17:bb:58:7b:7b:3f:
         0b:08:1b:80:d3:5b:db:81:63:12:4e:59:39:37:94:83:b5:26:
         0c:e9:0a:87:24:ce:09:9b:ea:d4:2b:fd:8e:14:46:12:b3:02:
         17:83:3d:8c:eb:46:b4:92:19:a6:ba:e5:4c:15:d7:ae:70:2c:
         a9:17:30:87:42:bc:06:37:e1:0b:5f:c6:e3:b7:00:98:10:99:
         3f:56:fc:07:fa:2d:64:00:97:7c:64:43:c3:e7:91:fe:5c:14:
         7e:06:7e:9f:2a:ad:08:18:6f:a2:ce:da:18:65:77:12:16:85:
         0f:db:e2:70:eb:da:be:10:6d:87:48:dd:d8:60:d5:b9:b4:d0:
         e5:0e:12:96:a2:ba:2c:d7:d5:fa:89:b1:53:e6:57:86:44:1b:
         1d:00:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:43:45 2026 by rpki-client