This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: d7g+6xsMYlCa6+Fvyp69O7vUR/XM4UadgJ+IG2b4hZA=
Subject key identifier: A3:12:4A:B5:36:FF:05:AE:27:F4:0E:1A:B3:A8:BE:98:BC:65:0C:8A
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 151A018D9C5FFEA8279239BD236C15787E6D3521
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
Signing time: Mon 29 Dec 2025 00:00:28 +0000
ROA not before: Sun 28 Dec 2025 23:55:28 +0000
ROA not after: Mon 28 Dec 2026 00:00:28 +0000
asID: 14618
IP address blocks: 89.117.15.0/24 maxlen: 24
89.117.28.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
89.117.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 12:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1a:01:8d:9c:5f:fe:a8:27:92:39:bd:23:6c:15:78:7e:6d:35:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 28 23:55:28 2025 GMT
Not After : Dec 28 00:00:28 2026 GMT
Subject: CN=A3124AB536FF05AE27F40E1AB3A8BE98BC650C8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:15:e5:87:b2:3c:63:69:54:2a:eb:77:f6:
40:90:9a:43:ec:3e:5d:6b:ee:f2:97:17:9e:ea:87:
74:a0:2f:84:90:08:fd:9b:f4:1a:1f:95:1e:03:d7:
8c:92:f5:14:63:4f:76:d3:04:f2:58:8c:c2:18:a8:
3e:ea:56:60:15:3a:16:27:0c:fc:68:9f:2b:1b:e1:
3a:dd:99:ed:75:a9:42:b9:28:07:a6:42:a4:2f:5f:
a0:31:07:73:ad:0f:70:d4:24:e4:34:f6:eb:fa:c6:
cd:d3:bc:5c:db:f9:d5:69:ab:a2:fc:6b:0a:b1:40:
02:81:a3:7d:e7:58:ec:4c:a0:3e:fe:ff:dd:86:b0:
ee:10:71:a4:44:7c:52:4e:19:bf:25:ef:7b:94:e8:
04:bf:93:d6:d3:79:7f:5e:75:97:8c:14:55:69:a2:
63:e4:e0:97:f9:5b:8a:a2:1a:0d:af:c0:a4:50:26:
18:6b:87:60:fd:1b:13:19:91:85:b9:b6:0d:9d:86:
b3:3d:cd:94:15:28:ca:f7:07:87:e8:3a:80:da:b3:
c5:0f:89:7e:95:9c:b6:ad:f8:3a:67:50:57:1d:a5:
ee:e9:f0:d3:e4:46:db:8a:d4:80:9c:a1:d8:36:fd:
7d:e0:e9:27:60:95:85:70:90:0c:6c:c3:ff:32:86:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:4A:B5:36:FF:05:AE:27:F4:0E:1A:B3:A8:BE:98:BC:65:0C:8A
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.15.0/24
89.117.28.0/24
89.117.87.0/24
89.117.153.0/24
Signature Algorithm: sha256WithRSAEncryption
13:59:d2:e7:b6:1c:79:49:b5:65:93:b6:5f:35:81:50:9f:49:
5a:ab:2c:1e:99:e6:92:d0:b5:1f:18:1b:6f:be:9a:91:c3:fe:
dc:aa:04:26:67:fd:d5:4a:b6:2e:c9:66:d1:e7:9e:bf:76:49:
b8:3e:88:31:cb:08:c8:31:84:c8:63:2c:52:3c:7a:ce:eb:f2:
36:8c:93:cf:54:83:86:37:b3:15:f0:0d:31:b8:b9:c7:b3:9c:
c1:97:b2:ce:4c:e7:c1:ea:83:a2:97:56:af:91:2d:f3:69:7a:
c9:26:db:72:54:12:78:92:91:a6:4b:ac:f5:e0:67:de:2a:cc:
3d:e6:32:84:c0:dc:17:6c:2c:88:45:49:37:d8:f5:06:fa:ea:
9b:ed:2d:4f:9f:df:e4:3c:58:81:b9:40:f5:b1:45:a2:1a:ea:
de:5e:91:19:d7:5c:f7:76:45:c8:2a:f6:fe:b1:9c:64:6c:08:
06:de:96:3c:cc:34:23:a8:83:2b:bf:69:26:a3:9f:7d:32:06:
3f:73:01:15:c5:4b:e2:e7:f7:c7:da:3c:d0:5b:76:31:c8:72:
a8:d7:01:ac:cf:a4:33:3f:ad:91:3e:57:b8:cb:08:74:58:05:
c4:d5:c5:8e:69:48:ab:3b:ed:01:4f:7f:e6:ab:a2:53:13:64:
70:aa:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:19 2026 by rpki-client