This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e203133333335.roa File: 3136392e34302e3133332e302f32342d3234203d3e203133333335.roa (raw, json) Hash identifier: WkGKLAkV2iRoS0WQq3MGEnVuZ1wVFG2PCf1QDakkC9A= Subject key identifier: 5E:B5:0F:9E:B2:22:7B:AF:E2:20:CA:29:BD:1E:62:B5:93:B1:AF:52 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 4DDBB36B4655D04087FEA3CC7137C2BBC5DF2020 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e203133333335.roa Signing time: Fri 28 Nov 2025 17:10:28 +0000 ROA not before: Fri 28 Nov 2025 17:05:28 +0000 ROA not after: Fri 27 Nov 2026 17:10:28 +0000 asID: 13335 IP address blocks: 169.40.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 17:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:db:b3:6b:46:55:d0:40:87:fe:a3:cc:71:37:c2:bb:c5:df:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 28 17:05:28 2025 GMT Not After : Nov 27 17:10:28 2026 GMT Subject: CN=5EB50F9EB2227BAFE220CA29BD1E62B593B1AF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:11:00:7e:d6:d4:ec:65:48:81:95:4d:2b: a6:30:60:72:06:1a:13:95:32:c3:5f:37:7a:85:93: bb:7d:f9:24:5a:30:46:20:9b:88:26:5a:05:e5:3b: 93:fc:9c:f2:b9:9c:f4:56:bf:26:89:06:67:e1:bd: 0f:79:84:44:31:c2:f9:59:b8:54:1d:ac:cc:95:0f: 87:2c:31:12:e5:53:d0:17:12:ac:54:cf:3b:e2:14: 8f:41:07:62:b1:5e:c1:47:a0:aa:f2:34:4f:48:d4: 2c:0f:9a:0c:4b:d4:db:a1:aa:de:b0:3b:ba:4c:7d: 0b:81:4f:42:66:03:8b:c9:bd:8e:20:6b:5f:1b:ca: 14:84:42:68:01:73:86:96:e9:e6:32:35:54:31:6f: a2:94:6c:15:92:34:23:4c:07:a9:44:4e:00:01:fd: 1b:e1:27:0e:51:87:35:07:8a:a4:3d:dd:f1:9b:fd: 78:85:de:a4:86:6a:49:06:bc:85:48:23:ce:26:15: ff:b7:06:bb:c1:e9:89:7d:ce:e7:cf:a1:d6:88:a7: 14:e5:29:59:c8:f3:54:9d:55:ea:eb:3e:c9:51:20: d0:53:b7:db:c7:81:b2:99:52:bd:45:cf:72:90:9c: f8:00:65:95:76:ca:98:a0:29:54:56:99:85:e9:0e: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B5:0F:9E:B2:22:7B:AF:E2:20:CA:29:BD:1E:62:B5:93:B1:AF:52 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133332e302f32342d3234203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.133.0/24 Signature Algorithm: sha256WithRSAEncryption 64:0b:90:89:28:f8:d3:4d:dc:2f:27:d3:0d:74:56:ff:22:53: f0:31:02:0b:b1:79:dd:26:3a:11:59:e8:b7:08:b5:61:76:1b: 9e:d5:d0:28:8b:5b:9d:cc:8d:73:a7:d4:29:0f:7e:20:8e:92: ea:0a:74:60:22:d5:d2:71:b6:f1:2f:cc:d8:06:e7:4b:5b:62: ea:1f:69:9c:9a:3b:81:53:d2:64:00:66:62:ba:8f:40:04:d3: cb:64:b8:36:b9:bc:3a:d2:7b:ae:fd:a0:f6:ef:f0:49:6a:c1: 46:47:c4:aa:cf:d8:44:e7:d1:18:d6:8c:4e:a9:d5:a5:53:45: 51:bc:cd:b9:ab:d1:d5:f1:c9:72:db:c2:36:9a:6f:cc:7b:88: 18:ab:9c:35:06:01:db:71:1f:74:76:71:e3:6a:a2:b8:eb:79: 25:9f:5a:ca:29:98:ed:77:2e:06:83:f8:15:6e:6f:73:19:f6: cc:7a:98:1a:24:2c:92:ba:7e:3b:74:9d:b3:cb:48:75:13:9f: cd:1c:63:0c:d4:c4:30:b1:2a:ee:96:6f:97:a4:d8:60:83:f5: af:7a:7a:f9:7e:90:d5:b4:a4:b7:30:6b:24:46:a0:3b:d3:96: 6e:cf:33:85:41:f5:82:ec:a9:a2:b6:85:a3:31:35:35:a9:53: d4:4f:5d:82 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUTduza0ZV0ECH/qPMcTfCu8XfICAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTExMjgxNzA1MjhaFw0yNjExMjcxNzEwMjhaMDMxMTAvBgNV BAMTKDVFQjUwRjlFQjIyMjdCQUZFMjIwQ0EyOUJEMUU2MkI1OTNCMUFGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBBEAftbU7GVIgZVNK6YwYHIG GhOVMsNfN3qFk7t9+SRaMEYgm4gmWgXlO5P8nPK5nPRWvyaJBmfhvQ95hEQxwvlZ uFQdrMyVD4csMRLlU9AXEqxUzzviFI9BB2KxXsFHoKryNE9I1CwPmgxL1Nuhqt6w O7pMfQuBT0JmA4vJvY4ga18byhSEQmgBc4aW6eYyNVQxb6KUbBWSNCNMB6lETgAB /RvhJw5RhzUHiqQ93fGb/XiF3qSGakkGvIVII84mFf+3BrvB6Yl9zufPodaIpxTl KVnI81SdVerrPslRINBTt9vHgbKZUr1Fz3KQnPgAZZV2ypigKVRWmYXpDtB7AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUXrUPnrIie6/iIMopvR5itZOxr1IwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkohTANBgkqhkiG 9w0BAQsFAAOCAQEAZAuQiSj4003cLyfTDXRW/yJT8DECC7F53SY6EVnotwi1YXYb ntXQKItbncyNc6fUKQ9+II6S6gp0YCLV0nG28S/M2AbnS1ti6h9pnJo7gVPSZABm YrqPQATTy2S4Nrm8OtJ7rv2g9u/wSWrBRkfEqs/YROfRGNaMTqnVpVNFUbzNuavR 1fHJctvCNppvzHuIGKucNQYB23EfdHZx42qiuOt5JZ9ayimY7XcuBoP4FW5vcxn2 zHqYGiQskrp+O3Sds8tIdROfzRxjDNTEMLEq7pZvl6TYYIP1r3p6+X6Q1bSktzBr JEagO9OWbs8zhUH1guyporaFozE1NalT1E9dgg== -----END CERTIFICATE-----Generated at Thu Dec 4 07:32:14 2025 by rpki-client