This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136382e302f32322d3234203d3e2035363530.roa File: 3136392e34302e3136382e302f32322d3234203d3e2035363530.roa (raw, json) Hash identifier: 3qv5mfa7YxI6BFJnn4JIm4UuWvHnuZ5Vr/haUvD4MLc= Subject key identifier: 38:90:07:08:74:63:0E:57:8A:2D:EE:07:6F:D2:6D:B0:79:67:90:AB Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0B74B5B688EBEB6F409EEAB41B5AC33A2A8D7957 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136382e302f32322d3234203d3e2035363530.roa Signing time: Thu 04 Dec 2025 09:50:04 +0000 ROA not before: Thu 04 Dec 2025 09:45:04 +0000 ROA not after: Thu 03 Dec 2026 09:50:04 +0000 asID: 5650 IP address blocks: 169.40.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:74:b5:b6:88:eb:eb:6f:40:9e:ea:b4:1b:5a:c3:3a:2a:8d:79:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 4 09:45:04 2025 GMT Not After : Dec 3 09:50:04 2026 GMT Subject: CN=3890070874630E578A2DEE076FD26DB0796790AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:54:d5:1d:10:5c:f4:30:53:3b:b5:6e:c8: 0c:f8:f0:46:67:59:c7:a8:53:70:89:3f:c4:30:0f: 26:b8:74:9d:9f:a3:24:71:30:df:86:bf:66:b0:a3: 07:db:27:8a:38:ea:de:43:de:14:cf:43:11:98:f6: 2f:6f:a1:91:3d:e3:b8:6c:09:0b:bb:d1:ab:32:dc: 2f:df:12:28:40:b8:6a:20:78:13:a5:8c:e7:ef:6b: f8:76:2e:b8:bc:87:9b:e9:82:11:e1:86:5c:d5:3e: dd:aa:8a:1e:7e:8e:2b:99:74:ad:82:b4:9f:9c:78: 1b:ad:4e:79:bb:07:95:56:9b:8f:30:ff:2e:e7:75: 7a:26:d8:5b:f9:e7:d4:c7:4f:ea:d8:f9:61:67:a3: 2d:b8:8d:89:80:2b:aa:09:2d:1f:dd:3a:d3:1d:1e: 7d:1d:f2:4f:01:ad:00:28:7d:00:91:75:a8:99:91: fa:b2:f4:e0:ef:ac:c7:5d:bb:b3:15:4b:7c:95:c7: 89:74:19:bd:88:2c:2e:38:cd:3d:a9:aa:15:ad:4f: 5a:5b:75:cb:35:3d:11:2a:79:e4:ff:92:6e:b9:19: d6:6e:15:97:ba:2b:99:cd:aa:60:50:cd:a6:af:bf: 28:f7:8e:35:bc:82:1b:cd:9a:48:91:16:f1:92:ac: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:90:07:08:74:63:0E:57:8A:2D:EE:07:6F:D2:6D:B0:79:67:90:AB X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136382e302f32322d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.168.0/22 Signature Algorithm: sha256WithRSAEncryption af:cb:20:3e:98:dc:e1:24:c6:64:b5:0a:28:42:45:e2:26:84: a5:69:5c:6b:ef:fd:df:b5:e1:df:82:73:b7:1e:68:13:e5:3f: c9:5e:99:44:ef:94:84:96:6a:1e:49:af:4a:12:3b:f5:d8:12: 70:66:06:e6:00:c8:ae:b9:50:e6:f4:b6:3c:48:fb:64:cc:39: 6d:a3:fc:c1:5f:9a:05:61:7c:48:e1:0a:68:bb:44:0f:a0:af: d2:c9:37:0d:40:b5:ff:30:42:84:1e:33:99:52:b1:82:84:86: 7f:c7:b1:c6:80:a0:06:85:36:79:f6:20:b1:03:5a:d9:10:59: db:88:08:58:09:fb:c6:32:0a:e1:5a:e4:32:e4:f4:d5:df:a7: 10:54:19:f1:d3:75:df:6f:c0:bf:5b:f0:d6:8b:5e:eb:e8:d1: 86:a3:f1:6c:8c:f6:e4:15:fb:28:99:da:a1:7a:2f:80:d5:35: 60:d0:69:c5:eb:f3:ca:af:41:06:d2:1f:d1:b0:18:50:1c:a2: 0b:16:d2:ad:cd:10:44:61:01:51:21:45:13:0c:a8:b5:3e:31: 8a:25:5e:f2:7f:7c:02:9a:22:59:a8:c3:70:f3:2a:87:bd:c2: 40:7e:cf:ba:8e:cf:fe:03:26:a7:6e:5b:fb:b7:2e:a8:30:7f: 37:5d:c1:51 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUC3S1tojr629Anuq0G1rDOiqNeVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMDQwOTQ1MDRaFw0yNjEyMDMwOTUwMDRaMDMxMTAvBgNV BAMTKDM4OTAwNzA4NzQ2MzBFNTc4QTJERUUwNzZGRDI2REIwNzk2NzkwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8lTVHRBc9DBTO7VuyAz48EZn WceoU3CJP8QwDya4dJ2foyRxMN+Gv2awowfbJ4o46t5D3hTPQxGY9i9voZE947hs CQu70asy3C/fEihAuGogeBOljOfva/h2Lri8h5vpghHhhlzVPt2qih5+jiuZdK2C tJ+ceButTnm7B5VWm48w/y7ndXom2Fv559THT+rY+WFnoy24jYmAK6oJLR/dOtMd Hn0d8k8BrQAofQCRdaiZkfqy9ODvrMddu7MVS3yVx4l0Gb2ILC44zT2pqhWtT1pb dcs1PREqeeT/km65GdZuFZe6K5nNqmBQzaavvyj3jjW8ghvNmkiRFvGSrJ2NAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUOJAHCHRjDleKLe4Hb9JtsHlnkKswHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKpKKgwDQYJKoZIhvcN AQELBQADggEBAK/LID6Y3OEkxmS1CihCReImhKVpXGvv/d+14d+Cc7ceaBPlP8le mUTvlISWah5Jr0oSO/XYEnBmBuYAyK65UOb0tjxI+2TMOW2j/MFfmgVhfEjhCmi7 RA+gr9LJNw1Atf8wQoQeM5lSsYKEhn/HscaAoAaFNnn2ILEDWtkQWduICFgJ+8Yy CuFa5DLk9NXfpxBUGfHTdd9vwL9b8NaLXuvo0Yaj8WyM9uQV+yiZ2qF6L4DVNWDQ acXr88qvQQbSH9GwGFAcogsW0q3NEERhAVEhRRMMqLU+MYolXvJ/fAKaIlmow3Dz Koe9wkB+z7qOz/4DJqduW/u3LqgwfzddwVE= -----END CERTIFICATE-----Generated at Fri Dec 5 05:57:59 2025 by rpki-client