This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e203231383539.roa File: 3136392e34302e3132382e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: uXGyo3beQ7MOJRh4hvTjWH5GR0LHiuRm6K98Ykhd7QI= Subject key identifier: E1:D0:9E:59:82:02:16:37:E6:12:6F:DD:B5:27:B1:CF:89:2E:24:B6 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 52B7EF9908A35A25851F19D205C3A73186FB7235 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e203231383539.roa Signing time: Mon 01 Dec 2025 09:48:24 +0000 ROA not before: Mon 01 Dec 2025 09:43:24 +0000 ROA not after: Mon 30 Nov 2026 09:48:24 +0000 asID: 21859 IP address blocks: 169.40.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:ef:99:08:a3:5a:25:85:1f:19:d2:05:c3:a7:31:86:fb:72:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 1 09:43:24 2025 GMT Not After : Nov 30 09:48:24 2026 GMT Subject: CN=E1D09E5982021637E6126FDDB527B1CF892E24B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:64:9b:cf:4a:2f:8c:3f:47:8a:1e:4c:ae: 3d:47:b8:c4:ef:47:d0:76:64:10:41:dd:ff:b9:47: ca:75:06:cd:15:d1:a6:be:ee:e9:57:1f:a0:ab:a2: 84:67:e7:8f:ff:fc:ad:6b:70:24:39:41:dd:10:47: ec:8d:72:da:29:a6:e1:08:8f:ef:2f:25:b1:2f:25: c6:eb:1e:a1:df:77:02:bf:2b:10:06:ab:3f:6a:07: a3:cd:55:8a:ea:6c:0b:fa:d1:83:e8:3e:34:ae:ee: 0b:81:fb:93:e8:0b:88:17:00:84:d5:b8:87:9c:22: 9b:43:f4:c8:75:c9:0d:6d:fe:44:4f:59:ed:b3:80: 47:6e:03:4c:67:fb:41:86:aa:31:20:6f:b1:eb:63: db:c8:36:49:ed:4d:fa:d1:f3:13:98:17:56:c4:ef: 75:cd:24:d9:60:e6:af:30:5a:28:fe:48:fc:41:eb: dd:10:8c:d7:32:c8:d3:7d:64:76:37:8d:3d:fa:db: 78:f7:f6:53:75:83:b6:78:ba:75:ab:36:e4:f7:ef: a7:67:e7:5b:0a:cd:ce:c7:df:2d:da:67:ce:ab:a2: b8:9c:bf:2b:4a:0e:6d:6f:bf:e5:97:cb:41:6e:61: 43:e1:d4:3c:cf:ff:f3:5f:9d:5a:31:83:5e:7d:42: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:9E:59:82:02:16:37:E6:12:6F:DD:B5:27:B1:CF:89:2E:24:B6 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.128.0/24 Signature Algorithm: sha256WithRSAEncryption 40:2e:ef:94:15:b2:1b:4e:34:c2:10:94:d6:e8:4d:c3:6c:ba: c8:1d:8f:63:23:b3:44:7f:b6:03:3b:2c:69:6a:fc:5f:43:e9: 69:0d:1a:d6:da:48:e3:c4:7c:f4:b3:b8:a5:0f:2e:c3:83:9f: f8:c8:99:03:26:51:f7:b1:0a:13:7d:9b:cc:1a:12:32:e0:c6: ba:fe:32:94:5d:9a:1b:d6:97:e6:3e:fe:ec:19:31:29:6b:95: 36:2a:d4:2c:93:89:72:99:69:4f:43:de:f8:f1:9d:ae:6e:6e: 29:f0:e9:dd:5e:a3:86:43:da:63:ad:c6:49:5b:2d:08:63:3a: c2:44:39:ac:55:3e:df:2c:18:cb:b1:08:58:db:f6:fc:1d:14: 05:a3:09:81:fc:e3:66:c4:81:47:09:40:b7:24:0d:a3:1f:22: 9e:53:24:59:a1:94:39:25:bd:c2:5b:c3:0a:57:07:d3:7a:20: 26:65:4c:21:f9:61:ba:e9:2f:28:e0:5c:28:91:d1:35:9e:c6: b1:ac:7d:c2:74:7e:52:b0:62:76:63:ee:b3:34:b5:60:08:d8: ce:0b:be:7e:f1:a0:07:67:e8:9f:58:fb:8f:67:1b:34:15:33: 60:87:4e:36:93:4c:12:a4:41:9e:20:fa:cd:b3:6c:0b:37:55: a9:16:4d:10 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUUrfvmQijWiWFHxnSBcOnMYb7cjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMDEwOTQzMjRaFw0yNjExMzAwOTQ4MjRaMDMxMTAvBgNV BAMTKEUxRDA5RTU5ODIwMjE2MzdFNjEyNkZEREI1MjdCMUNGODkyRTI0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfS2Sbz0ovjD9Hih5Mrj1HuMTv R9B2ZBBB3f+5R8p1Bs0V0aa+7ulXH6CrooRn54///K1rcCQ5Qd0QR+yNctoppuEI j+8vJbEvJcbrHqHfdwK/KxAGqz9qB6PNVYrqbAv60YPoPjSu7guB+5PoC4gXAITV uIecIptD9Mh1yQ1t/kRPWe2zgEduA0xn+0GGqjEgb7HrY9vINkntTfrR8xOYF1bE 73XNJNlg5q8wWij+SPxB690QjNcyyNN9ZHY3jT3623j39lN1g7Z4unWrNuT376dn 51sKzc7H3y3aZ86roricvytKDm1vv+WXy0FuYUPh1DzP//NfnVoxg159QknrAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU4dCeWYICFjfmEm/dtSexz4kuJLYwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkogDANBgkqhkiG 9w0BAQsFAAOCAQEAQC7vlBWyG040whCU1uhNw2y6yB2PYyOzRH+2AzssaWr8X0Pp aQ0a1tpI48R89LO4pQ8uw4Of+MiZAyZR97EKE32bzBoSMuDGuv4ylF2aG9aX5j7+ 7BkxKWuVNirULJOJcplpT0Pe+PGdrm5uKfDp3V6jhkPaY63GSVstCGM6wkQ5rFU+ 3ywYy7EIWNv2/B0UBaMJgfzjZsSBRwlAtyQNox8inlMkWaGUOSW9wlvDClcH03og JmVMIflhuukvKOBcKJHRNZ7Gsax9wnR+UrBidmPuszS1YAjYzgu+fvGgB2fon1j7 j2cbNBUzYIdONpNMEqRBniD6zbNsCzdVqRZNEA== -----END CERTIFICATE-----Generated at Fri Dec 5 05:58:29 2025 by rpki-client