This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20383334.roa File: 3136392e34302e3135382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: DsTBb1ZaibueZNQCQOywB/Ow9cuH8IRLDYedkEYQ5EE= Subject key identifier: 27:05:33:87:13:58:F8:6A:2B:E5:41:DB:2B:45:36:B6:03:3F:7A:24 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 4E052D3B24767F990E8077221902423889E7FC79 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20383334.roa Signing time: Fri 28 Nov 2025 23:14:35 +0000 ROA not before: Fri 28 Nov 2025 23:09:35 +0000 ROA not after: Fri 27 Nov 2026 23:14:35 +0000 asID: 834 IP address blocks: 169.40.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:05:2d:3b:24:76:7f:99:0e:80:77:22:19:02:42:38:89:e7:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 28 23:09:35 2025 GMT Not After : Nov 27 23:14:35 2026 GMT Subject: CN=270533871358F86A2BE541DB2B4536B6033F7A24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:2e:67:3b:88:6e:54:61:85:f2:9c:c2:6b: 38:4c:b6:1e:68:4b:26:3e:b7:76:ba:e5:17:70:bf: ed:59:4d:03:e6:69:e2:65:23:b8:e6:82:8a:f3:29: 32:c4:0d:70:13:84:22:f9:2b:ec:b8:17:a2:cf:bf: 41:dc:85:01:d8:1c:18:35:9b:d1:d1:96:18:6f:6c: db:79:70:ad:f0:5e:00:39:93:30:02:e4:9e:78:62: 31:39:67:fe:01:95:53:f7:f5:b2:b5:7c:7b:94:f2: fe:06:e4:83:a3:f9:1d:97:e6:1b:58:c7:69:80:1e: 69:36:bd:f1:3d:74:d7:99:c6:27:81:9e:73:7c:f6: 62:06:62:ed:ac:e2:0a:97:31:6f:6c:12:b3:7d:80: 2d:38:03:ab:03:ac:a5:3b:30:8c:99:06:32:8a:1d: 6c:42:5b:2c:bd:6d:86:8e:41:fe:c5:af:29:2f:a0: d5:d4:0a:f9:26:c3:ec:5e:e1:fc:ce:37:bf:06:1a: 9c:3f:b0:98:81:72:06:a8:fe:6c:db:be:db:e7:06: c7:17:20:bf:17:90:3c:1a:dc:20:78:a0:08:61:b3: 69:7b:1d:34:2a:57:54:0d:99:a0:0b:02:90:09:f1: 2a:19:7b:94:69:b5:0b:97:6f:e2:b0:f2:12:20:1b: d0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:33:87:13:58:F8:6A:2B:E5:41:DB:2B:45:36:B6:03:3F:7A:24 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.158.0/24 Signature Algorithm: sha256WithRSAEncryption 02:43:10:e3:91:d3:51:88:2e:ca:29:fa:2c:06:1d:43:18:ca: 8e:04:e9:4a:21:a2:dc:02:b4:96:07:27:8c:42:1f:ea:81:40: c6:31:b4:fa:49:a4:54:78:45:01:e0:db:40:40:e8:20:33:e9: b3:5e:ed:3b:dc:f3:9b:0f:32:a2:27:bc:02:99:8c:21:7a:60: fb:26:f5:59:a4:69:8e:aa:1f:6f:55:d6:bd:fe:e3:9d:cd:e0: aa:5c:59:e0:e8:78:72:ee:60:48:5a:80:55:f8:c0:ba:7b:5c: 0f:67:ad:fa:2f:90:4a:28:f9:ca:6d:d1:5a:68:a8:99:26:90: 4d:91:7b:ea:65:88:29:5b:76:54:70:4d:18:b9:02:22:65:f4: 15:49:f1:57:03:65:5f:62:7e:95:e6:ba:08:b3:17:7a:88:18: 7a:84:31:b6:19:5c:19:fa:10:68:23:ba:f8:46:e7:e6:a1:7e: 57:4f:bf:0a:6d:45:b9:ab:c7:24:62:e2:f6:54:d5:7a:6a:87: 5e:7c:ea:de:ab:15:cd:f8:93:c9:9d:65:6e:ab:55:8f:c6:a5: 20:2b:b6:7c:12:db:36:c9:91:46:9c:fa:e2:18:47:9e:e1:80: 68:42:30:cf:44:db:3c:fb:88:2e:6e:2a:05:f0:4a:b0:1e:e6: b6:4e:56:e5 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUTgUtOyR2f5kOgHciGQJCOInn/HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTExMjgyMzA5MzVaFw0yNjExMjcyMzE0MzVaMDMxMTAvBgNV BAMTKDI3MDUzMzg3MTM1OEY4NkEyQkU1NDFEQjJCNDUzNkI2MDMzRjdBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK0S5nO4huVGGF8pzCazhMth5o SyY+t3a65Rdwv+1ZTQPmaeJlI7jmgorzKTLEDXAThCL5K+y4F6LPv0HchQHYHBg1 m9HRlhhvbNt5cK3wXgA5kzAC5J54YjE5Z/4BlVP39bK1fHuU8v4G5IOj+R2X5htY x2mAHmk2vfE9dNeZxieBnnN89mIGYu2s4gqXMW9sErN9gC04A6sDrKU7MIyZBjKK HWxCWyy9bYaOQf7FrykvoNXUCvkmw+xe4fzON78GGpw/sJiBcgao/mzbvtvnBscX IL8XkDwa3CB4oAhhs2l7HTQqV1QNmaALApAJ8SoZe5RptQuXb+Kw8hIgG9CnAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUJwUzhxNY+Gor5UHbK0U2tgM/eiQwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSieMA0GCSqGSIb3DQEB CwUAA4IBAQACQxDjkdNRiC7KKfosBh1DGMqOBOlKIaLcArSWByeMQh/qgUDGMbT6 SaRUeEUB4NtAQOggM+mzXu073PObDzKiJ7wCmYwhemD7JvVZpGmOqh9vVda9/uOd zeCqXFng6Hhy7mBIWoBV+MC6e1wPZ636L5BKKPnKbdFaaKiZJpBNkXvqZYgpW3ZU cE0YuQIiZfQVSfFXA2VfYn6V5roIsxd6iBh6hDG2GVwZ+hBoI7r4RufmoX5XT78K bUW5q8ckYuL2VNV6aodefOreqxXN+JPJnWVuq1WPxqUgK7Z8Ets2yZFGnPriGEee 4YBoQjDPRNs8+4gubioF8EqwHua2Tlbl -----END CERTIFICATE-----Generated at Fri Dec 5 05:58:10 2025 by rpki-client