Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa
File:                     38392e3138352e32362e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          KDnyOWXegW/L5OQfXNPaKvndTB+yxHWpI5O6mX6urpQ=
Subject key identifier:   3A:EF:07:92:81:68:0D:3D:D0:3F:22:B6:8A:F5:31:49:B4:0C:B6:5F
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       0F7D91BA8F6727D655ED071884A3041399CF7FCF
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa
Signing time:             Mon 23 Feb 2026 15:06:35 +0000
ROA not before:           Mon 23 Feb 2026 15:01:35 +0000
ROA not after:            Mon 22 Feb 2027 15:06:35 +0000
asID:                     202662
IP address blocks:        89.185.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7d:91:ba:8f:67:27:d6:55:ed:07:18:84:a3:04:13:99:cf:7f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:35 2026 GMT
            Not After : Feb 22 15:06:35 2027 GMT
        Subject: CN=3AEF079281680D3DD03F22B68AF53149B40CB65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:08:be:ff:65:1c:3a:aa:63:c5:d4:83:14:8e:
                    a5:57:81:9d:c9:30:b9:51:96:8e:f7:6b:a5:04:42:
                    d1:46:ad:c2:f8:a5:65:dc:f7:35:b9:d4:3f:8d:95:
                    ad:f3:fc:37:87:a0:b5:5f:1b:d9:0a:ff:53:f9:b8:
                    11:f2:fd:d1:40:f1:f3:a3:2d:c2:85:d0:b0:d5:73:
                    81:70:8a:b4:7b:db:db:ae:a9:05:ce:d8:c5:10:57:
                    5e:4e:3a:0d:58:42:1b:4c:84:cd:1a:16:09:9d:ac:
                    bc:a7:c2:43:fc:d4:f4:cb:7c:a2:62:ca:3c:7e:46:
                    ac:46:50:e8:14:e4:55:b5:16:84:69:fd:df:65:41:
                    33:44:55:f3:04:4d:ac:64:a2:69:f1:aa:9c:03:a0:
                    be:fb:1e:f3:42:a6:db:71:7a:a5:d5:b9:5d:26:5d:
                    07:90:bb:0a:50:85:58:51:fb:50:c0:4c:f5:a5:20:
                    cc:90:38:e7:e2:ae:e1:d8:52:3f:f1:4c:25:87:60:
                    ba:4b:5b:83:ac:8b:89:cd:d5:5e:a2:33:71:aa:35:
                    37:c0:46:28:c8:c5:22:b5:77:b3:ba:f7:24:4b:18:
                    45:ff:9c:a9:52:8c:da:19:c9:f3:b3:05:5d:35:65:
                    c7:55:98:22:19:b4:fe:ba:ef:a3:51:89:cd:ef:48:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:07:92:81:68:0D:3D:D0:3F:22:B6:8A:F5:31:49:B4:0C:B6:5F
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:5f:99:e1:b5:2f:ae:4b:4d:6c:93:7e:82:81:a5:ea:bc:29:
         21:47:4f:53:4e:c9:2a:30:57:db:3f:85:31:d7:d3:0e:24:32:
         fe:b0:23:a4:9a:8f:61:bd:fb:9d:ff:f0:d0:33:4f:db:28:71:
         95:6d:d2:61:03:17:e4:a6:7c:64:87:35:db:b6:4d:9e:ed:81:
         e8:7c:80:22:f0:42:d1:25:a4:2e:af:38:e6:d5:c7:83:75:d8:
         3d:24:f7:b4:0f:16:9d:a0:1a:5e:5a:8c:7a:d0:80:b9:cc:fc:
         4b:8c:e7:56:70:14:70:a3:df:40:ba:28:d3:46:0c:66:85:d6:
         e5:ba:d5:8a:83:b7:a0:77:d0:94:5e:3f:c4:c1:07:8e:00:85:
         c0:ae:98:f2:d2:27:76:85:0f:a3:03:f7:39:42:c6:b0:b5:d3:
         16:33:70:94:30:14:58:e4:f0:2b:04:d1:8c:4c:18:ed:6a:52:
         99:1d:d7:55:c8:ed:e2:16:1a:1a:2e:7d:4f:1e:2e:b8:d5:70:
         d9:e9:0e:fa:e4:9b:a2:8a:02:87:d1:70:aa:48:e9:e5:e1:28:
         1c:10:e8:ce:01:24:e2:81:bf:09:1e:81:f6:2e:34:e0:d4:5d:
         3b:75:d8:cf:6e:35:4b:2b:44:42:50:86:d3:66:b3:fb:86:49:
         89:5c:bf:0b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUD32Ruo9nJ9ZV7QcYhKMEE5nPf88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzVaFw0yNzAyMjIxNTA2MzVaMDMxMTAvBgNV
BAMTKDNBRUYwNzkyODE2ODBEM0REMDNGMjJCNjhBRjUzMTQ5QjQwQ0I2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCL7/ZRw6qmPF1IMUjqVXgZ3J
MLlRlo73a6UEQtFGrcL4pWXc9zW51D+Nla3z/DeHoLVfG9kK/1P5uBHy/dFA8fOj
LcKF0LDVc4FwirR729uuqQXO2MUQV15OOg1YQhtMhM0aFgmdrLynwkP81PTLfKJi
yjx+RqxGUOgU5FW1FoRp/d9lQTNEVfMETaxkomnxqpwDoL77HvNCpttxeqXVuV0m
XQeQuwpQhVhR+1DATPWlIMyQOOfiruHYUj/xTCWHYLpLW4Osi4nN1V6iM3GqNTfA
RijIxSK1d7O69yRLGEX/nKlSjNoZyfOzBV01ZcdVmCIZtP6676NRic3vSL/bAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQUOu8HkoFoDT3QPyK2ivUxSbQMtl8wHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMjM2MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5GjANBgkqhkiG
9w0BAQsFAAOCAQEArl+Z4bUvrktNbJN+goGl6rwpIUdPU07JKjBX2z+FMdfTDiQy
/rAjpJqPYb37nf/w0DNP2yhxlW3SYQMX5KZ8ZIc127ZNnu2B6HyAIvBC0SWkLq84
5tXHg3XYPST3tA8WnaAaXlqMetCAucz8S4znVnAUcKPfQLoo00YMZoXW5brVioO3
oHfQlF4/xMEHjgCFwK6Y8tIndoUPowP3OULGsLXTFjNwlDAUWOTwKwTRjEwY7WpS
mR3XVcjt4hYaGi59Tx4uuNVw2ekO+uSboooCh9Fwqkjp5eEoHBDozgEk4oG/CR6B
9i404NRdO3XYz241SytEQlCG02az+4ZJiVy/Cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:11:07 2026 by rpki-client