This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e2035363530.roa File: 3136392e34302e3132392e302f32342d3234203d3e2035363530.roa (raw, json) Hash identifier: lawcq7XfWN/fnJMT3UdhjJAutwI5BEGQpGQnmG2+5FA= Subject key identifier: 3C:E5:FC:66:90:5D:BB:CE:84:C3:44:1B:90:CF:28:FC:6B:61:CD:73 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 12A11E1BC39747D15F5B61D2F40B5B1246F498BB Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e2035363530.roa Signing time: Thu 04 Dec 2025 09:50:02 +0000 ROA not before: Thu 04 Dec 2025 09:45:02 +0000 ROA not after: Thu 03 Dec 2026 09:50:02 +0000 asID: 5650 IP address blocks: 169.40.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a1:1e:1b:c3:97:47:d1:5f:5b:61:d2:f4:0b:5b:12:46:f4:98:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 4 09:45:02 2025 GMT Not After : Dec 3 09:50:02 2026 GMT Subject: CN=3CE5FC66905DBBCE84C3441B90CF28FC6B61CD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:ec:58:d4:3d:8b:19:4c:82:09:95:f2:8c: d1:7a:6c:55:b0:54:6e:49:15:14:50:9c:2f:55:ef: 45:0c:6d:f8:cc:08:4f:26:12:a1:ca:7e:e0:8f:a1: 05:57:47:b8:6b:b8:21:e5:83:93:c6:da:42:55:a2: 06:b0:d4:19:ab:33:df:23:c0:b0:df:28:27:00:ab: 0e:20:d0:a5:54:12:ae:4e:e4:d1:cf:18:68:a0:9e: 2c:e0:ce:72:80:67:fc:35:03:63:14:3c:dc:73:4b: c2:10:c1:de:d0:c0:f8:6c:8c:3c:69:ee:82:61:86: 7a:79:fe:5a:27:ae:29:fa:63:13:91:1f:27:c1:5d: f0:09:ad:f2:27:15:ea:4a:07:ac:4d:ab:77:ce:69: 06:75:84:0c:30:ff:01:ce:eb:7c:1d:10:1d:15:02: 30:0b:a7:f2:a8:af:9c:3e:21:a4:41:8d:c3:f7:fd: e0:ef:04:56:a7:47:1c:06:f7:eb:d8:44:50:a6:de: ed:56:20:45:4f:a1:92:05:86:0b:2d:83:61:f5:b6: 36:89:e2:f5:fb:39:59:19:6f:2c:e8:58:9c:19:82: d7:54:25:f3:97:29:d5:d1:dc:cb:f3:6b:fb:cf:53: b9:cd:d0:ef:69:32:5d:ee:ff:ab:8f:cf:e0:ad:39: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:FC:66:90:5D:BB:CE:84:C3:44:1B:90:CF:28:FC:6B:61:CD:73 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.129.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:6f:5e:0b:50:75:e0:72:06:57:c3:07:de:5d:ea:de:97:d1: b4:fa:54:d9:67:cf:d0:fc:47:60:f5:54:2e:f4:a7:18:71:c1: 6a:68:5b:db:2d:d8:ed:c7:e4:cb:24:3a:5c:01:2c:e2:ce:12: 2f:6f:9f:6c:6c:96:fc:98:86:86:23:c8:54:f3:73:4d:9b:8c: f1:f8:7a:df:a7:ff:c7:6d:f2:63:f6:7c:b4:55:d6:fb:a0:40: 0c:1a:de:11:4e:dc:e4:9c:d4:99:92:64:94:3a:84:d0:08:62: f4:9c:fc:05:91:94:e6:87:58:ef:87:4c:44:7a:bf:a7:38:d1: 7f:6b:69:1e:ae:88:0b:6b:ef:ea:00:db:57:33:b9:c2:6a:b8: a7:85:ca:de:c7:c0:2f:eb:28:9e:bd:2c:75:4f:3a:01:3e:24: 14:8a:e4:0a:5e:79:dd:9e:71:2b:8b:c5:1a:c7:40:e5:58:78: 5d:32:86:b4:a3:f5:e5:7f:f9:bf:99:14:23:02:25:c0:d3:91: 95:1c:87:b9:e8:09:50:a5:d8:73:0b:99:fa:98:b6:a7:7c:de: 99:1f:bd:20:65:d2:92:f3:3f:31:be:3e:f3:9d:85:40:94:d3: 7e:86:2f:26:0b:d9:82:47:8d:13:ca:8d:b5:a3:81:01:cd:4a: de:3a:c7:5b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUEqEeG8OXR9FfW2HS9AtbEkb0mLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMDQwOTQ1MDJaFw0yNjEyMDMwOTUwMDJaMDMxMTAvBgNV BAMTKDNDRTVGQzY2OTA1REJCQ0U4NEMzNDQxQjkwQ0YyOEZDNkI2MUNENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsuxY1D2LGUyCCZXyjNF6bFWw VG5JFRRQnC9V70UMbfjMCE8mEqHKfuCPoQVXR7hruCHlg5PG2kJVogaw1BmrM98j wLDfKCcAqw4g0KVUEq5O5NHPGGignizgznKAZ/w1A2MUPNxzS8IQwd7QwPhsjDxp 7oJhhnp5/lonrin6YxORHyfBXfAJrfInFepKB6xNq3fOaQZ1hAww/wHO63wdEB0V AjALp/Kor5w+IaRBjcP3/eDvBFanRxwG9+vYRFCm3u1WIEVPoZIFhgstg2H1tjaJ 4vX7OVkZbyzoWJwZgtdUJfOXKdXR3Mvza/vPU7nN0O9pMl3u/6uPz+CtOd3fAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUPOX8ZpBdu86Ew0QbkM8o/GthzXMwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKIEwDQYJKoZIhvcN AQELBQADggEBAItvXgtQdeByBlfDB95d6t6X0bT6VNlnz9D8R2D1VC70pxhxwWpo W9st2O3H5MskOlwBLOLOEi9vn2xslvyYhoYjyFTzc02bjPH4et+n/8dt8mP2fLRV 1vugQAwa3hFO3OSc1JmSZJQ6hNAIYvSc/AWRlOaHWO+HTER6v6c40X9raR6uiAtr 7+oA21czucJquKeFyt7HwC/rKJ69LHVPOgE+JBSK5Apeed2ecSuLxRrHQOVYeF0y hrSj9eV/+b+ZFCMCJcDTkZUch7noCVCl2HMLmfqYtqd83pkfvSBl0pLzPzG+PvOd hUCU036GLyYL2YJHjRPKjbWjgQHNSt46x1s= -----END CERTIFICATE-----Generated at Fri Dec 5 05:57:57 2025 by rpki-client