Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402276.roa
File:                     AS402276.roa (raw, json)
Hash identifier:          oKEBzve5EGk2blW3jq9+Hgogput9obLsXiZOqCqV6zA=
Subject key identifier:   1E:14:D2:B7:37:2A:3C:45:85:68:93:4F:86:19:2D:05:AD:44:D9:64
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       251866865D3B36885B0247DA0F0C1E6467535049
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402276.roa
Signing time:             Tue 14 Apr 2026 01:19:21 +0000
ROA not before:           Tue 14 Apr 2026 01:14:21 +0000
ROA not after:            Tue 13 Apr 2027 01:19:21 +0000
asID:                     402276
IP address blocks:        89.116.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:18:66:86:5d:3b:36:88:5b:02:47:da:0f:0c:1e:64:67:53:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Apr 14 01:14:21 2026 GMT
            Not After : Apr 13 01:19:21 2027 GMT
        Subject: CN=1E14D2B7372A3C458568934F86192D05AD44D964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:b6:4c:56:34:24:d2:62:84:94:b8:2a:1b:
                    a4:bc:fb:42:ba:92:b4:3f:13:3c:90:9e:89:a2:5f:
                    31:33:5e:34:bc:c8:76:08:bb:6a:dd:b5:fe:2a:d2:
                    44:6f:0d:5f:5f:8f:84:fc:4a:9d:da:df:6b:32:29:
                    15:83:44:1d:91:09:d8:10:99:b8:37:7f:f4:6c:4d:
                    a4:f2:9f:d5:76:13:0e:88:5a:14:9a:67:6f:a3:cd:
                    5e:0b:b1:7a:e0:e4:54:fc:d9:26:9d:2c:64:80:65:
                    eb:14:ba:73:5c:7e:f2:02:62:f6:cf:aa:65:c7:63:
                    e1:c1:47:74:1c:6b:aa:1a:f3:fe:b8:13:90:cb:d6:
                    bd:ed:da:4e:7b:d1:a7:a7:35:4f:b3:c7:00:6d:89:
                    34:eb:c1:f9:80:9a:a0:a3:f0:e3:a7:f3:56:3c:71:
                    e6:aa:7e:da:20:8e:fd:83:85:41:d2:2b:1a:75:3c:
                    99:bf:6f:c6:2a:53:df:4c:a9:12:af:20:01:45:dd:
                    aa:c3:8a:ba:8d:71:b4:bc:6f:a0:13:b4:2e:fe:df:
                    72:e9:55:c8:3e:95:8f:14:2c:13:e4:ea:57:32:ab:
                    5d:9a:17:61:95:64:a7:98:11:bc:3e:17:73:57:19:
                    ce:f3:82:1b:99:59:62:14:01:47:88:f9:dd:92:5b:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:14:D2:B7:37:2A:3C:45:85:68:93:4F:86:19:2D:05:AD:44:D9:64
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402276.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:32:df:aa:f3:23:71:9c:b6:37:51:6c:64:af:f5:94:4a:f5:
         84:e8:f0:57:8b:e0:5e:f0:79:82:0d:79:5e:44:73:80:af:31:
         ab:2e:7d:c7:7c:c4:1d:af:61:07:58:04:a4:9c:7e:73:88:7f:
         ee:6c:64:c3:5b:18:bd:2b:db:30:12:85:58:a8:fc:48:26:35:
         48:9b:1f:8a:99:e8:29:54:7d:d7:2e:05:d5:79:38:6e:89:43:
         9c:ca:91:6a:49:de:66:37:f2:8f:a1:61:d5:e2:88:fe:ec:aa:
         71:36:fa:92:a9:16:c1:07:92:e1:86:b6:12:75:16:00:a9:fa:
         b4:f7:69:72:74:8f:b4:b2:89:22:56:84:a9:3f:30:0f:8a:a5:
         c5:00:9f:f7:3f:e6:72:ee:11:30:07:ef:f0:d9:5a:5f:5d:1b:
         61:df:7c:65:97:2b:9f:d2:eb:c3:ce:e8:35:9c:9f:bd:cd:06:
         d7:db:43:57:29:2c:d7:e3:bb:b1:ec:ee:c9:44:77:82:92:74:
         0b:de:7a:16:bc:70:a4:fc:56:90:0e:0a:8d:a1:d6:19:19:45:
         fe:3d:de:f1:af:f6:ca:a2:31:3b:23:13:11:e8:0f:ce:7d:80:
         23:37:26:26:3f:cd:2e:d2:9d:3c:58:3f:45:fc:06:96:ac:1a:
         0e:61:86:4d
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUJRhmhl07NohbAkfaDwweZGdTUEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA0MTQwMTE0MjFaFw0yNzA0MTMwMTE5MjFaMDMxMTAvBgNV
BAMTKDFFMTREMkI3MzcyQTNDNDU4NTY4OTM0Rjg2MTkyRDA1QUQ0NEQ5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzLZMVjQk0mKElLgqG6S8+0K6
krQ/EzyQnomiXzEzXjS8yHYIu2rdtf4q0kRvDV9fj4T8Sp3a32syKRWDRB2RCdgQ
mbg3f/RsTaTyn9V2Ew6IWhSaZ2+jzV4LsXrg5FT82SadLGSAZesUunNcfvICYvbP
qmXHY+HBR3Qca6oa8/64E5DL1r3t2k570aenNU+zxwBtiTTrwfmAmqCj8OOn81Y8
ceaqftogjv2DhUHSKxp1PJm/b8YqU99MqRKvIAFF3arDirqNcbS8b6ATtC7+33Lp
Vcg+lY8ULBPk6lcyq12aF2GVZKeYEbw+F3NXGc7zghuZWWIUAUeI+d2SW0gfAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUHhTStzcqPEWFaJNPhhktBa1E2WQwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQwMjI3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0yDANBgkqhkiG9w0B
AQsFAAOCAQEAwzLfqvMjcZy2N1FsZK/1lEr1hOjwV4vgXvB5gg15XkRzgK8xqy59
x3zEHa9hB1gEpJx+c4h/7mxkw1sYvSvbMBKFWKj8SCY1SJsfipnoKVR91y4F1Xk4
bolDnMqRakneZjfyj6Fh1eKI/uyqcTb6kqkWwQeS4Ya2EnUWAKn6tPdpcnSPtLKJ
IlaEqT8wD4qlxQCf9z/mcu4RMAfv8NlaX10bYd98ZZcrn9Lrw87oNZyfvc0G19tD
Vyks1+O7sezuyUR3gpJ0C956FrxwpPxWkA4KjaHWGRlF/j3e8a/2yqIxOyMTEegP
zn2AIzcmJj/NLtKdPFg/RfwGlqwaDmGGTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:34:40 2026 by rpki-client