Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          mUydzlAmXyvQbqE/9Wi9XDjfvymnXd8tJc6RqppzPtE=
Subject key identifier:   55:0E:5A:F3:FB:6B:D8:D8:B3:75:0F:3C:9C:9A:B4:9E:B4:7B:22:F2
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6E43344F7C069849DB1B62CB8826B0C676848A00
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
Signing time:             Tue 03 Nov 2026 13:49:39 +0000
ROA not before:           Tue 03 Nov 2026 13:44:39 +0000
ROA not after:            Tue 02 Nov 2027 13:49:39 +0000
asID:                     7029
IP address blocks:        86.38.4.0/23 maxlen: 24
                          86.38.184.0/23 maxlen: 24
                          86.38.186.0/23 maxlen: 24
                          89.116.242.0/23 maxlen: 24
                          89.116.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 22:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:43:34:4f:7c:06:98:49:db:1b:62:cb:88:26:b0:c6:76:84:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov  3 13:44:39 2026 GMT
            Not After : Nov  2 13:49:39 2027 GMT
        Subject: CN=550E5AF3FB6BD8D8B3750F3C9C9AB49EB47B22F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c1:c2:4c:60:c5:4b:7c:3e:cd:b1:35:53:f1:
                    ff:32:4c:5d:df:75:e8:0e:c5:16:32:38:df:45:d6:
                    e2:cd:29:a0:15:4c:50:dc:0c:7a:82:b8:dc:99:28:
                    c9:c4:a2:c7:92:61:c1:2f:09:44:b0:8f:bc:b1:5d:
                    ab:d9:66:74:85:4d:1f:e4:37:35:df:e2:fc:d4:c5:
                    aa:6c:eb:ce:f9:9e:e6:a6:0d:db:58:68:29:93:af:
                    06:58:3a:e2:5d:c7:61:99:1b:9a:cb:aa:1f:9f:c9:
                    dc:d7:a6:93:82:23:f8:e1:21:17:ff:6a:05:74:ec:
                    2c:f1:84:5b:02:b7:25:9c:19:da:25:80:39:be:78:
                    55:98:4d:6e:10:c9:01:3f:4e:ae:f9:38:93:20:02:
                    1f:cb:81:ce:64:3d:da:1a:52:39:61:eb:a5:c5:08:
                    23:d0:5d:ba:34:8f:35:ea:75:3a:d3:5f:36:31:32:
                    61:7f:13:55:20:8b:17:9e:37:8d:c8:b4:db:eb:37:
                    96:63:f5:28:50:01:7a:a4:ee:95:ac:d6:cf:43:65:
                    df:83:96:40:49:b7:0c:59:44:f8:3c:bd:ea:9c:95:
                    7c:99:d1:23:c7:1e:b3:0a:d3:a4:dd:6b:2b:c5:cb:
                    ab:05:0f:b8:c7:fc:2b:b9:60:1d:56:9f:cd:b5:bd:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:5A:F3:FB:6B:D8:D8:B3:75:0F:3C:9C:9A:B4:9E:B4:7B:22:F2
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.4.0/23
                  86.38.184.0/22
                  89.116.242.0/23
                  89.116.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:96:a7:c2:fa:85:18:2a:25:cf:7b:6e:91:4c:2e:ed:d2:
         7c:3c:42:9b:62:4c:5c:c9:63:40:22:2a:1f:bc:59:f3:10:ab:
         06:17:e5:12:37:4d:d6:f8:8f:a8:93:5d:e5:6d:7b:09:4c:e7:
         e0:f1:7a:4f:5b:e1:84:12:df:4c:38:dd:bc:2f:29:b7:d9:c7:
         45:5e:26:cc:35:7f:4a:1c:72:45:e3:9c:d7:86:8f:d7:23:e6:
         79:e7:a5:fa:37:fc:4b:94:eb:77:e1:c9:70:c4:84:00:3e:2a:
         9e:aa:4d:94:6f:a7:23:06:20:34:c6:89:fa:6f:44:67:09:f3:
         ed:b9:ec:52:c7:44:46:68:2e:3d:e3:f0:96:f8:55:5f:61:46:
         50:51:41:69:10:ee:64:74:c1:d4:1a:8a:c6:f3:17:74:7e:0b:
         37:18:f9:53:59:cb:32:b5:2f:f0:89:10:0a:84:e8:9b:b5:60:
         ed:1d:bf:b3:af:5c:49:4c:b8:3d:dd:d3:71:cc:76:ee:77:42:
         41:a7:30:29:e7:16:27:75:01:3b:a4:63:ad:79:fd:01:bf:6c:
         2b:64:3b:5d:43:64:f2:06:55:d0:fb:fa:d1:75:42:f5:51:c2:
         6b:a6:4e:82:25:35:1b:d7:55:dc:be:82:6c:ef:3e:32:7c:4d:
         64:7f:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:08:55 2026 by rpki-client