This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3232342e302f32302d3234203d3e20383334.roa File: 3136392e34302e3232342e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: gz2j8Jt0qL4r3P02vG7Z72el2b2V1bPm653Zj2czelE= Subject key identifier: CC:E4:0F:D0:CF:43:24:CC:EF:9B:B8:AF:CF:DD:9E:CA:25:9D:1D:FC Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 122C5BE880E0C33348C2D9EC06572FEC567AC6BA Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3232342e302f32302d3234203d3e20383334.roa Signing time: Thu 04 Dec 2025 09:52:53 +0000 ROA not before: Thu 04 Dec 2025 09:47:53 +0000 ROA not after: Thu 03 Dec 2026 09:52:53 +0000 asID: 834 IP address blocks: 169.40.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 13:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2c:5b:e8:80:e0:c3:33:48:c2:d9:ec:06:57:2f:ec:56:7a:c6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 4 09:47:53 2025 GMT Not After : Dec 3 09:52:53 2026 GMT Subject: CN=CCE40FD0CF4324CCEF9BB8AFCFDD9ECA259D1DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:4d:fa:dc:c0:49:6e:0d:3e:b7:27:ba:43: e3:e9:cb:46:41:bd:bb:14:8c:e6:be:8a:31:f2:96: f6:ab:99:a9:95:f4:e6:da:8f:a0:41:1b:2b:e5:c1: 58:6e:85:d6:40:11:f9:d1:79:7b:b5:2d:3b:1e:ca: 04:31:7c:75:17:f1:05:dc:e9:5b:a4:88:7a:44:9d: b2:9c:bb:01:e2:39:c9:8e:b6:55:ab:6a:da:6b:48: cf:dd:9b:36:82:2d:79:9f:22:45:e7:11:d9:c9:13: 23:82:e0:25:5f:6e:ae:e5:2f:e0:58:ca:f2:3e:9f: 34:4b:5d:63:02:ef:f8:5d:6f:2b:de:82:06:ee:ff: e3:b0:44:af:22:69:68:f3:ee:e6:85:fe:32:e8:45: c7:02:28:48:c4:92:8d:30:f2:02:af:35:45:46:52: 8e:99:37:c7:bb:03:08:c3:c8:c3:60:60:7f:aa:7a: 66:1e:25:2b:31:47:82:a9:70:b7:49:19:78:bc:73: 34:a6:70:a0:4d:ee:2d:ad:c9:c6:52:1a:f4:2f:63: a4:9c:e1:c6:9b:c7:8f:d9:a5:45:f2:70:b0:25:80: 4b:6c:a9:98:f6:13:00:29:ba:f1:e7:d6:b7:37:ed: 4b:28:6f:93:f2:35:a8:95:f3:e7:82:56:06:03:9e: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:0F:D0:CF:43:24:CC:EF:9B:B8:AF:CF:DD:9E:CA:25:9D:1D:FC X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3232342e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.224.0/20 Signature Algorithm: sha256WithRSAEncryption 87:34:14:4f:75:ac:84:20:47:40:84:c5:43:28:3d:82:2b:9c: e5:64:86:46:81:12:ea:f5:4e:2a:eb:d3:c2:35:c2:07:ef:72: 0e:4a:58:ec:69:54:66:42:72:58:e4:d7:93:29:c3:35:23:b8: 15:c2:df:e5:bd:57:70:57:29:29:b8:02:55:3b:f0:29:88:53: 54:8a:dd:32:ec:15:c6:2c:ee:ec:2e:8a:0a:2b:36:a3:77:80: 0b:45:64:89:37:23:06:c7:13:6a:d3:e5:1d:69:b4:34:34:11: ad:b1:b7:c5:a9:25:15:5b:29:a7:1b:41:1b:3a:84:97:ac:a8: 4b:02:71:63:5e:47:f7:61:59:aa:86:20:e7:8c:6b:23:e0:26: 9d:f0:68:24:d8:bc:9e:3a:1c:3d:0a:7c:3c:43:c1:f0:e1:3a: 3c:c4:41:cd:e4:0b:32:3b:b2:c2:27:f6:67:f6:12:27:79:21: 80:c9:46:16:9f:89:98:5a:f7:67:39:62:54:46:26:f3:6c:a0: a3:44:a6:74:0d:27:8d:15:a1:95:79:00:51:fa:32:79:e1:2d: fa:28:34:8f:52:67:9c:4d:3e:9e:e0:ad:64:96:b8:be:84:14: ff:b0:56:42:f3:84:59:3b:b6:b1:89:a6:69:ca:e8:fb:08:c1: f2:13:42:aa -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUEixb6IDgwzNIwtnsBlcv7FZ6xrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMDQwOTQ3NTNaFw0yNjEyMDMwOTUyNTNaMDMxMTAvBgNV BAMTKENDRTQwRkQwQ0Y0MzI0Q0NFRjlCQjhBRkNGREQ5RUNBMjU5RDFERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCimE363MBJbg0+tye6Q+Ppy0ZB vbsUjOa+ijHylvarmamV9Obaj6BBGyvlwVhuhdZAEfnReXu1LTseygQxfHUX8QXc 6VukiHpEnbKcuwHiOcmOtlWratprSM/dmzaCLXmfIkXnEdnJEyOC4CVfbq7lL+BY yvI+nzRLXWMC7/hdbyveggbu/+OwRK8iaWjz7uaF/jLoRccCKEjEko0w8gKvNUVG Uo6ZN8e7AwjDyMNgYH+qemYeJSsxR4KpcLdJGXi8czSmcKBN7i2tycZSGvQvY6Sc 4cabx4/ZpUXycLAlgEtsqZj2EwApuvHn1rc37Usob5PyNaiV8+eCVgYDnkh5AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzOQP0M9DJMzvm7ivz92eyiWdHfwwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzIzMjM0MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqSjgMA0GCSqGSIb3DQEB CwUAA4IBAQCHNBRPdayEIEdAhMVDKD2CK5zlZIZGgRLq9U4q69PCNcIH73IOSljs aVRmQnJY5NeTKcM1I7gVwt/lvVdwVykpuAJVO/ApiFNUit0y7BXGLO7sLooKKzaj d4ALRWSJNyMGxxNq0+UdabQ0NBGtsbfFqSUVWymnG0EbOoSXrKhLAnFjXkf3YVmq hiDnjGsj4Cad8Ggk2LyeOhw9Cnw8Q8Hw4To8xEHN5AsyO7LCJ/Zn9hIneSGAyUYW n4mYWvdnOWJURibzbKCjRKZ0DSeNFaGVeQBR+jJ54S36KDSPUmecTT6e4K1klri+ hBT/sFZC84RZO7axiaZpyuj7CMHyE0Kq -----END CERTIFICATE-----Generated at Fri Dec 5 05:57:57 2025 by rpki-client