This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: FFNCndhFchs/X6zTnys1W33k1tFfqweasvXhauFpw+8=
Subject key identifier: D0:67:A6:DC:E2:C3:00:AB:B4:E1:1F:D1:4D:74:DE:5B:21:BF:B1:68
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 02D85F0CCD4EFAB897E055750CEB761A63A8BCEC
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa
Signing time: Fri 16 Jan 2026 00:20:32 +0000
ROA not before: Fri 16 Jan 2026 00:15:32 +0000
ROA not after: Fri 15 Jan 2027 00:20:32 +0000
asID: 25198
IP address blocks: 169.40.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 01:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d8:5f:0c:cd:4e:fa:b8:97:e0:55:75:0c:eb:76:1a:63:a8:bc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Jan 16 00:15:32 2026 GMT
Not After : Jan 15 00:20:32 2027 GMT
Subject: CN=D067A6DCE2C300ABB4E11FD14D74DE5B21BFB168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:ba:84:e6:2b:ca:5d:99:9d:de:9a:06:7b:
c7:1d:f8:fa:37:97:e0:9f:75:9b:ee:cc:10:c0:4b:
34:b2:96:7c:09:48:67:8e:1c:5e:1b:4d:8f:73:5a:
b2:42:0f:2b:bb:d4:b8:32:3a:cd:da:18:b5:e2:19:
89:ad:33:d5:fb:e1:95:18:df:31:a2:99:96:8b:24:
b2:57:5c:96:76:c0:2d:a9:33:ad:79:93:07:5b:c4:
5d:92:ec:c3:72:df:a6:13:95:eb:1a:ee:82:02:b8:
b4:ce:0d:89:83:ac:d0:27:7c:31:8b:7a:8c:5d:3d:
93:db:11:1a:6e:c4:a8:fa:0a:03:c5:30:61:36:a1:
be:cc:29:3e:6f:83:e4:17:ba:47:7b:c6:b7:40:b0:
27:ce:cb:f8:a9:42:22:34:c4:44:34:7c:58:cc:13:
c2:29:a4:55:71:99:1c:5c:7d:ea:66:84:ba:8a:89:
18:07:07:17:1a:f0:39:c3:78:1e:a8:94:17:90:3f:
84:1f:f2:b3:27:b9:37:84:c7:f2:a5:e8:d3:a5:ae:
b0:2c:62:db:6e:f3:68:e8:c0:47:aa:47:7a:fc:68:
27:e0:a6:c0:35:67:bd:d5:c6:6a:99:fb:a2:01:26:
19:fc:97:b2:9b:2a:8e:91:de:60:3d:ba:5c:e9:54:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:A6:DC:E2:C3:00:AB:B4:E1:1F:D1:4D:74:DE:5B:21:BF:B1:68
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.128.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:f5:5d:65:3f:fe:3b:58:4f:08:f4:10:69:d5:81:e3:4f:
ef:3c:43:55:ce:9c:45:26:2a:80:20:23:19:6d:73:3e:69:5b:
3d:c3:a5:12:5b:07:ac:3b:17:f6:53:78:31:ae:33:70:ec:86:
49:4b:68:1b:22:57:cc:cb:33:5e:e3:1a:41:c2:8b:72:4d:45:
28:cf:3f:2f:9b:b9:3e:0c:c9:71:9e:a0:7f:7b:e2:93:67:03:
0b:b3:23:62:a6:98:99:6c:e9:17:0e:64:f1:ef:94:ea:df:b7:
aa:12:03:d2:4d:05:e9:d2:41:ad:93:a4:6c:41:91:e2:13:0e:
84:5a:70:64:e4:e2:33:d2:4f:b6:e0:bc:6c:bf:36:41:af:4a:
53:d2:cd:16:dd:f9:6f:2e:b7:3b:44:d6:69:78:da:12:30:16:
cf:a4:95:99:38:8c:00:8a:12:47:ea:17:e3:50:ce:b7:09:24:
38:fa:47:d6:30:ea:8d:0f:53:bb:66:f5:0b:af:7a:61:a3:5c:
86:6e:65:ba:dd:f1:85:43:81:d7:43:5f:3a:58:96:4d:73:83:
94:97:f0:41:b1:80:e1:8c:74:81:cf:dd:c5:cc:b4:7e:4a:70:
42:2b:40:5f:7f:4e:4f:ac:90:5c:40:ac:16:e7:03:e6:04:94:
35:19:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:50:37 2026 by rpki-client