This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e20383334.roa File: 3136392e34302e3133382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: bQ8ghOhsT/yacvdlBMnGe/biBZAgITjLT+XqVzLBiJk= Subject key identifier: 5C:FF:50:0C:02:4D:1C:C8:E3:E4:FD:B0:4D:E6:88:B9:8B:8C:99:7F Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 5654EB89893446B6CD689D0332F776CA7DB8247C Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e20383334.roa Signing time: Fri 28 Nov 2025 23:14:35 +0000 ROA not before: Fri 28 Nov 2025 23:09:35 +0000 ROA not after: Fri 27 Nov 2026 23:14:35 +0000 asID: 834 IP address blocks: 169.40.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:54:eb:89:89:34:46:b6:cd:68:9d:03:32:f7:76:ca:7d:b8:24:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 28 23:09:35 2025 GMT Not After : Nov 27 23:14:35 2026 GMT Subject: CN=5CFF500C024D1CC8E3E4FDB04DE688B98B8C997F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:65:ab:45:8a:84:38:14:3a:7f:13:a6:be: bb:3b:0f:a8:bf:ec:ef:43:ee:f8:e8:40:68:7e:81: dc:e8:46:f9:bd:29:d0:90:ba:8d:30:4b:ee:40:48: e2:89:38:aa:b6:dd:e8:6c:97:0d:f5:07:0d:2d:9c: fb:ec:84:7e:8b:0e:4b:49:c4:79:10:ce:82:89:f2: 42:5e:06:e4:52:3a:eb:94:c7:b9:2e:5f:04:91:7e: 27:4f:a0:1f:51:84:8a:a3:da:50:49:30:fb:af:06: fa:f5:bb:cd:07:99:57:ca:db:5a:0d:e0:12:6b:58: aa:74:0f:9e:99:2f:a5:da:cf:6f:43:1c:b8:bb:0b: 04:d1:18:67:09:49:93:4f:33:e6:b8:cd:c0:e0:f1: d8:8c:3a:aa:87:84:d4:b4:eb:5e:b4:13:7b:3c:4a: 95:0c:a9:8c:44:96:71:1b:72:68:60:14:d5:cb:84: 54:89:25:ef:ca:f4:6d:58:2c:93:6b:c2:c2:51:dc: a7:f9:4b:f0:b1:6e:23:62:4c:2f:df:78:57:32:ba: 36:32:d3:1a:ce:b9:aa:b1:97:9e:1c:95:d6:aa:42: 94:8f:b5:8e:12:08:e6:d2:8a:a2:54:56:1c:3b:19: 21:ec:4d:35:ff:33:cc:ba:2a:31:e9:89:13:2f:5a: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:50:0C:02:4D:1C:C8:E3:E4:FD:B0:4D:E6:88:B9:8B:8C:99:7F X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.138.0/23 Signature Algorithm: sha256WithRSAEncryption 39:3f:e3:e5:72:ee:e0:df:0d:5e:70:a7:ef:26:3e:11:ee:32: 8c:e5:4d:76:f5:ac:52:f8:f7:a9:4e:37:93:ba:46:90:10:c1: 70:45:4b:36:9e:be:1f:ed:bb:94:f1:de:48:61:65:df:36:a0: 7f:ec:23:4c:ac:2c:a1:b3:d2:3a:95:cc:7b:0a:ec:ca:e2:f7: f2:df:e0:69:c0:d8:fb:30:d2:12:ae:8e:50:fe:c7:06:c4:6f: 8d:43:e9:59:ec:e1:90:11:a2:a2:13:9d:15:e2:91:70:11:a0: 73:0d:72:c8:4f:e9:23:6f:0d:39:ab:95:b8:7a:89:f6:80:c5: 35:02:b3:5e:31:5d:28:fa:2f:45:20:3c:15:6d:2d:53:ff:a0: 3a:4a:3f:96:6b:9b:98:ab:dc:95:ca:57:bd:97:e6:86:0f:c6: 9d:a5:8e:04:b4:35:b5:3a:10:6e:d3:ba:2c:0b:8b:af:a3:3b: 9f:f2:57:1d:a9:11:71:9c:94:11:47:20:d3:9d:d6:37:56:ac: 6f:a0:31:dd:e9:10:0c:7a:24:90:6c:87:4f:a5:b8:b9:17:d0: 56:15:0b:45:9d:ce:46:34:14:26:8a:99:c2:3b:5b:9d:e4:8a: ab:a5:e0:b5:ab:38:23:1e:c9:79:70:8c:4b:1e:f1:30:00:4c: c3:20:43:c0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUVlTriYk0RrbNaJ0DMvd2yn24JHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTExMjgyMzA5MzVaFw0yNjExMjcyMzE0MzVaMDMxMTAvBgNV BAMTKDVDRkY1MDBDMDI0RDFDQzhFM0U0RkRCMDRERTY4OEI5OEI4Qzk5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQWWrRYqEOBQ6fxOmvrs7D6i/ 7O9D7vjoQGh+gdzoRvm9KdCQuo0wS+5ASOKJOKq23ehslw31Bw0tnPvshH6LDktJ xHkQzoKJ8kJeBuRSOuuUx7kuXwSRfidPoB9RhIqj2lBJMPuvBvr1u80HmVfK21oN 4BJrWKp0D56ZL6Xaz29DHLi7CwTRGGcJSZNPM+a4zcDg8diMOqqHhNS06160E3s8 SpUMqYxElnEbcmhgFNXLhFSJJe/K9G1YLJNrwsJR3Kf5S/CxbiNiTC/feFcyujYy 0xrOuaqxl54cldaqQpSPtY4SCObSiqJUVhw7GSHsTTX/M8y6KjHpiRMvWjDTAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUXP9QDAJNHMjj5P2wTeaIuYuMmX8wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqSiKMA0GCSqGSIb3DQEB CwUAA4IBAQA5P+Plcu7g3w1ecKfvJj4R7jKM5U129axS+PepTjeTukaQEMFwRUs2 nr4f7buU8d5IYWXfNqB/7CNMrCyhs9I6lcx7CuzK4vfy3+BpwNj7MNISro5Q/scG xG+NQ+lZ7OGQEaKiE50V4pFwEaBzDXLIT+kjbw05q5W4eon2gMU1ArNeMV0o+i9F IDwVbS1T/6A6Sj+Wa5uYq9yVyle9l+aGD8adpY4EtDW1OhBu07osC4uvozuf8lcd qRFxnJQRRyDTndY3VqxvoDHd6RAMeiSQbIdPpbi5F9BWFQtFnc5GNBQmipnCO1ud 5IqrpeC1qzgjHsl5cIxLHvEwAEzDIEPA -----END CERTIFICATE-----Generated at Fri Dec 5 05:58:09 2025 by rpki-client