This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e203633313939.roa File: 3136392e34302e3135392e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: l7jnUMhX4tvOQUTfvh4G+pHF//FKnAy9oCydmHKmdfo= Subject key identifier: 15:2F:10:A0:1D:58:6A:A9:42:4E:83:8F:F4:03:91:0E:EB:11:65:56 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 64AA09DBA56F2F9C5EC890A4D5E2E7246CA95730 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e203633313939.roa Signing time: Sat 29 Nov 2025 11:12:00 +0000 ROA not before: Sat 29 Nov 2025 11:07:00 +0000 ROA not after: Sat 28 Nov 2026 11:12:00 +0000 asID: 63199 IP address blocks: 169.40.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:aa:09:db:a5:6f:2f:9c:5e:c8:90:a4:d5:e2:e7:24:6c:a9:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Nov 29 11:07:00 2025 GMT Not After : Nov 28 11:12:00 2026 GMT Subject: CN=152F10A01D586AA9424E838FF403910EEB116556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:d2:d7:e3:94:c4:9a:ce:53:39:a7:9e:46: e9:79:ce:16:a1:42:b7:b1:ff:d3:24:72:0a:6a:3b: c9:d1:d3:68:78:12:80:11:61:7c:1c:b5:42:9b:00: 41:6d:42:14:72:31:56:ac:3b:b6:a8:df:9c:22:e9: 15:aa:91:78:40:88:7b:95:ba:1b:78:e4:34:db:37: d5:b2:4b:c0:2e:c9:16:fc:8f:b8:7f:d2:a0:e3:ca: 74:77:36:96:8a:57:7b:eb:17:43:ba:ca:7d:45:50: 1b:6f:36:74:c2:1a:ff:d5:08:fe:97:fb:aa:4b:44: 31:23:39:33:7f:d6:37:04:84:0c:4d:4e:e6:17:7b: c9:8c:7b:13:7f:a7:3f:27:96:df:5a:ef:96:87:1f: 48:42:d9:cb:30:a8:eb:d8:b5:58:41:e2:fb:79:6d: 74:f4:0a:ae:e4:fb:2c:39:24:8a:63:6f:67:6b:a6: 64:3e:44:3b:ae:49:70:90:a6:37:c1:25:a5:40:90: 35:05:9c:a5:3e:3c:56:35:3a:f8:dd:c6:d7:d8:c7: a1:75:1f:c0:00:ac:70:04:b0:41:c7:09:bb:49:7a: f7:90:84:8c:d2:55:b2:63:e7:0a:6d:9d:a7:03:81: f6:01:6a:81:a2:43:05:4a:bc:1e:08:de:88:d8:83: 36:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2F:10:A0:1D:58:6A:A9:42:4E:83:8F:F4:03:91:0E:EB:11:65:56 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.159.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ee:af:0d:3a:02:01:6f:4b:79:ec:a4:5a:3a:d3:c0:27:e7: 32:23:8d:b9:f2:72:7a:1e:c4:14:c4:35:56:f4:6b:6b:73:1d: 2a:ee:8f:44:8e:0a:6f:cb:63:7c:ea:d8:44:24:f4:9b:c5:f8: e2:c8:dd:45:d8:d4:08:cd:c8:14:8b:16:52:cc:59:3d:86:57: ff:28:7e:33:a1:b2:ad:97:6a:54:4b:90:4e:ec:91:12:73:ff: b5:4b:20:77:98:6c:70:7a:7e:99:42:9d:4d:a4:36:cb:95:5e: 3e:bf:eb:72:40:ea:7f:af:4b:a8:f5:35:d4:b4:25:ea:f3:f7: 72:09:82:49:97:d6:ae:9e:28:b3:cf:43:a8:52:27:ed:03:aa: 39:83:db:88:a6:cb:60:48:3b:bc:64:44:68:c5:3a:68:61:63: 9b:08:9c:ae:c4:f1:c2:de:fb:d8:d1:df:ad:7d:4e:96:14:82: d9:42:a6:10:df:68:b2:5b:e4:ef:e5:1c:a8:44:ac:e5:dc:2d: a2:21:eb:3f:cf:51:6d:e7:a2:63:60:9f:9e:5f:24:42:9c:a4: cd:4e:00:9b:e0:13:4b:cc:1f:bb:35:30:50:28:b2:6e:1e:a8: 8c:ca:22:b3:06:62:2d:05:b9:c0:b3:9d:12:20:33:ad:48:e1: 97:f1:a1:7a -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUZKoJ26VvL5xeyJCk1eLnJGypVzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTExMjkxMTA3MDBaFw0yNjExMjgxMTEyMDBaMDMxMTAvBgNV BAMTKDE1MkYxMEEwMUQ1ODZBQTk0MjRFODM4RkY0MDM5MTBFRUIxMTY1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCtLX45TEms5TOaeeRul5zhah Qrex/9MkcgpqO8nR02h4EoARYXwctUKbAEFtQhRyMVasO7ao35wi6RWqkXhAiHuV uht45DTbN9WyS8AuyRb8j7h/0qDjynR3NpaKV3vrF0O6yn1FUBtvNnTCGv/VCP6X +6pLRDEjOTN/1jcEhAxNTuYXe8mMexN/pz8nlt9a75aHH0hC2cswqOvYtVhB4vt5 bXT0Cq7k+yw5JIpjb2drpmQ+RDuuSXCQpjfBJaVAkDUFnKU+PFY1OvjdxtfYx6F1 H8AArHAEsEHHCbtJeveQhIzSVbJj5wptnacDgfYBaoGiQwVKvB4I3ojYgzYtAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUFS8QoB1YaqlCToOP9AORDusRZVYwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkonzANBgkqhkiG 9w0BAQsFAAOCAQEAB+6vDToCAW9LeeykWjrTwCfnMiONufJyeh7EFMQ1VvRra3Md Ku6PRI4Kb8tjfOrYRCT0m8X44sjdRdjUCM3IFIsWUsxZPYZX/yh+M6GyrZdqVEuQ TuyREnP/tUsgd5hscHp+mUKdTaQ2y5VePr/rckDqf69LqPU11LQl6vP3cgmCSZfW rp4os89DqFIn7QOqOYPbiKbLYEg7vGREaMU6aGFjmwicrsTxwt772NHfrX1OlhSC 2UKmEN9oslvk7+UcqESs5dwtoiHrP89RbeeiY2Cfnl8kQpykzU4Am+ATS8wfuzUw UCiybh6ojMoiswZiLQW5wLOdEiAzrUjhl/Gheg== -----END CERTIFICATE-----Generated at Fri Dec 5 05:59:17 2025 by rpki-client