This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203539343332.roa
File: 3136392e34302e3133372e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: wuVnKCym1OW6tL99DD5oT7wAVkzEKm+jbtKzkZhNrjE=
Subject key identifier: 65:07:0E:D3:77:28:D5:ED:B5:98:FD:8E:AD:17:F2:0C:FA:55:2F:A2
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 2AB548052C2B7E78FD959E7707B9F752FDC7914A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203539343332.roa
Signing time: Sat 29 Nov 2025 16:23:48 +0000
ROA not before: Sat 29 Nov 2025 16:18:48 +0000
ROA not after: Sat 28 Nov 2026 16:23:48 +0000
asID: 59432
IP address blocks: 169.40.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 13:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b5:48:05:2c:2b:7e:78:fd:95:9e:77:07:b9:f7:52:fd:c7:91:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Nov 29 16:18:48 2025 GMT
Not After : Nov 28 16:23:48 2026 GMT
Subject: CN=65070ED37728D5EDB598FD8EAD17F20CFA552FA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:60:ef:e3:31:a2:d2:47:31:87:c5:c9:52:
e2:89:ae:51:c6:35:80:0f:4c:bc:e3:5b:ea:ce:c5:
ab:04:d8:24:84:5f:b7:38:c5:a5:8e:59:ad:4f:88:
e1:c4:fb:c8:01:ff:0d:7c:f0:83:da:6e:43:f7:09:
07:3f:66:a7:4e:7c:36:21:48:ba:9c:ab:00:cc:7a:
43:3a:74:0a:dc:1a:31:83:43:c5:64:20:55:ff:4a:
fd:3b:2c:14:33:51:ec:18:ab:48:43:c6:da:54:f8:
a8:6e:a2:4a:bf:a0:55:c6:0c:fc:42:86:03:07:10:
bf:6c:01:5c:58:06:a2:88:0b:35:06:45:24:5a:98:
70:a5:e5:49:5a:bd:c7:46:e8:99:bc:8f:a1:8e:9b:
bb:ac:73:9b:4c:53:2d:d0:37:44:6d:66:ae:f0:67:
6b:c5:d3:4b:4b:00:28:76:ca:52:8e:c4:b1:37:bd:
12:20:e9:b5:c7:66:ac:d2:44:a6:78:ae:38:33:e4:
17:c1:e2:47:fc:fe:b6:d2:63:ae:20:7e:4d:25:1b:
1d:a9:26:cc:0f:38:4e:39:e6:93:8d:e6:c3:4f:e5:
8e:8e:c7:c7:e6:25:69:ad:d0:1c:24:5b:b5:ea:26:
90:91:9e:ae:77:52:68:2a:12:24:93:7b:13:aa:2b:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:0E:D3:77:28:D5:ED:B5:98:FD:8E:AD:17:F2:0C:FA:55:2F:A2
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.137.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2c:f0:72:3a:d1:30:b0:60:2e:5c:8a:1e:4a:4d:8a:00:81:
2e:8b:e3:e1:b6:d0:ca:01:cd:03:71:3f:d7:08:1a:d0:5d:78:
49:91:8a:e4:f2:b1:7d:a4:34:67:03:2a:78:4f:07:1f:80:47:
cf:da:53:af:36:1d:c7:21:75:74:a5:f8:74:c0:35:10:ed:71:
45:28:b1:8a:29:fb:18:e4:ce:13:7c:8c:f7:d5:9e:34:a1:b1:
ca:5d:52:19:21:6b:d6:b7:4c:d9:da:6e:57:f3:8f:ac:b7:53:
a4:78:80:b2:58:5f:cd:44:5e:95:b2:79:f6:c5:3b:dc:e1:16:
66:5f:66:0c:36:78:5d:7e:b1:94:46:fa:d4:ea:4d:74:0c:65:
3b:25:31:ae:d3:1d:8c:3a:e4:b7:b9:6f:b1:e4:a7:f1:f6:bf:
b9:3b:0e:9e:d8:88:d1:3d:18:b8:97:a9:6b:3f:d0:3c:00:f4:
5a:74:2e:25:fc:5a:2b:9e:7a:a6:74:5c:44:2f:04:67:c4:70:
1c:bd:1d:92:a3:59:5c:ca:e5:60:96:ec:26:ed:78:f5:67:40:
48:4f:77:53:eb:e8:9b:eb:29:b0:32:72:f8:00:64:3b:e2:ca:
1f:1d:9c:c5:e1:48:2e:77:3e:12:07:89:f7:a0:7c:f3:dd:96:
0c:3a:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:10 2025 by rpki-client