Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
File:                     AS55720.roa (raw, json)
Hash identifier:          MWJjaD98dYmgExM1fda2KZwfrq+C+uu3lRDchv/IpQU=
Subject key identifier:   BC:4F:20:E3:38:67:8A:77:7B:61:2C:8B:1A:AF:58:38:56:11:3B:60
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       08E6539D7C0118F0E344E4199B1B26CF2CB0A8A7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa
Signing time:             Thu 29 Jan 2026 07:55:36 +0000
ROA not before:           Thu 29 Jan 2026 07:50:36 +0000
ROA not after:            Thu 28 Jan 2027 07:55:36 +0000
asID:                     55720
IP address blocks:        89.116.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 10:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e6:53:9d:7c:01:18:f0:e3:44:e4:19:9b:1b:26:cf:2c:b0:a8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 29 07:50:36 2026 GMT
            Not After : Jan 28 07:55:36 2027 GMT
        Subject: CN=BC4F20E338678A777B612C8B1AAF583856113B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:a5:72:a1:db:f7:cb:29:0a:d0:82:9d:e0:
                    c2:40:3b:05:1f:99:ba:39:aa:c6:1c:8f:59:f5:4e:
                    86:7b:76:36:90:20:3b:70:30:ab:1d:a8:bb:f4:63:
                    22:2b:cd:f0:48:2b:04:9f:87:cc:f6:3e:e2:f6:fb:
                    fd:a3:62:5c:1e:91:c7:aa:fd:d0:64:53:ba:35:eb:
                    3b:13:f9:39:36:e6:2e:c1:ca:e2:10:1d:75:4a:e3:
                    85:ba:ca:38:7f:68:2a:70:6b:b0:19:77:93:19:9b:
                    f9:f1:6d:b7:53:a2:0d:19:29:e2:fc:b5:46:21:07:
                    0c:26:79:8d:36:66:16:8e:51:8b:9c:52:34:50:04:
                    6a:d4:39:e8:0c:17:51:72:2e:8c:21:7b:cc:ac:01:
                    df:e2:6b:6b:55:21:df:c9:a0:6b:8a:18:77:c8:cb:
                    54:26:9e:93:4e:f8:fc:65:98:1c:29:71:9d:45:31:
                    41:8d:cd:c4:5d:96:41:8e:df:2f:07:a5:49:f0:07:
                    77:f4:f7:97:55:5f:df:05:09:ee:21:9b:53:ca:47:
                    a7:94:8c:c9:d5:be:df:6e:7d:ef:14:ac:61:84:42:
                    06:64:f1:8d:5b:2e:50:a8:c3:5b:78:7c:9f:c8:a2:
                    f0:88:71:56:cb:3b:67:5e:07:5e:08:a2:55:10:1b:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4F:20:E3:38:67:8A:77:7B:61:2C:8B:1A:AF:58:38:56:11:3B:60
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS55720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:d6:56:05:73:9b:79:1b:96:f8:f5:62:cc:39:db:c8:1a:0d:
         89:53:dc:e2:b6:cd:52:a2:4e:0d:83:cb:13:24:55:f2:98:8f:
         9f:ce:ba:e4:b3:7e:f1:26:98:3e:2d:86:fc:6c:b7:49:45:18:
         29:3f:91:ec:53:d6:2e:3b:11:2e:85:c2:d0:8c:d9:3c:d0:db:
         4e:ce:67:0c:48:e7:52:44:b5:2a:03:8e:c2:a3:a1:7b:a4:87:
         4d:98:5f:7a:69:f1:f0:83:ac:a8:92:03:65:b2:02:30:b1:77:
         bc:5f:7c:46:af:ba:cf:9e:30:24:dc:ae:3c:42:bf:77:71:32:
         31:65:2c:bf:7b:03:a9:49:60:fe:18:ba:d9:79:9f:69:a8:19:
         73:18:26:f9:1c:50:21:dd:f2:45:42:46:8d:45:49:59:f2:22:
         4e:75:f2:e0:af:82:e6:6e:0a:88:79:90:dc:6b:24:4f:f3:ce:
         3d:96:5e:10:04:cf:58:bb:2d:92:75:ca:b2:ba:54:5f:c4:7f:
         1b:35:82:69:16:82:ef:5b:e8:d2:0f:0b:01:ab:20:18:3f:aa:
         d5:ed:de:38:6a:44:98:2f:51:99:f0:91:cc:26:0f:e5:f4:98:
         94:92:06:cf:5b:ab:55:d1:52:66:b8:e3:00:d8:8d:8f:f0:b9:
         af:51:d6:f9
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUCOZTnXwBGPDjROQZmxsmzyywqKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjAxMjkwNzUwMzZaFw0yNzAxMjgwNzU1MzZaMDMxMTAvBgNV
BAMTKEJDNEYyMEUzMzg2NzhBNzc3QjYxMkM4QjFBQUY1ODM4NTYxMTNCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BqVyodv3yykK0IKd4MJAOwUf
mbo5qsYcj1n1ToZ7djaQIDtwMKsdqLv0YyIrzfBIKwSfh8z2PuL2+/2jYlwekceq
/dBkU7o16zsT+Tk25i7ByuIQHXVK44W6yjh/aCpwa7AZd5MZm/nxbbdTog0ZKeL8
tUYhBwwmeY02ZhaOUYucUjRQBGrUOegMF1FyLowhe8ysAd/ia2tVId/JoGuKGHfI
y1QmnpNO+PxlmBwpcZ1FMUGNzcRdlkGO3y8HpUnwB3f095dVX98FCe4hm1PKR6eU
jMnVvt9ufe8UrGGEQgZk8Y1bLlCow1t4fJ/IovCIcVbLO2deB14IolUQG/M/AgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUvE8g4zhnind7YSyLGq9YOFYRO2AwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzU1NzIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSMMA0GCSqGSIb3DQEB
CwUAA4IBAQDY1lYFc5t5G5b49WLMOdvIGg2JU9zits1Sok4Ng8sTJFXymI+fzrrk
s37xJpg+LYb8bLdJRRgpP5HsU9YuOxEuhcLQjNk80NtOzmcMSOdSRLUqA47Co6F7
pIdNmF96afHwg6yokgNlsgIwsXe8X3xGr7rPnjAk3K48Qr93cTIxZSy/ewOpSWD+
GLrZeZ9pqBlzGCb5HFAh3fJFQkaNRUlZ8iJOdfLgr4LmbgqIeZDcayRP8849ll4Q
BM9Yuy2SdcqyulRfxH8bNYJpFoLvW+jSDwsBqyAYP6rV7d44akSYL1GZ8JHMJg/l
9JiUkgbPW6tV0VJmuOMA2I2P8LmvUdb5
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:49:15 2026 by rpki-client