This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa
File: AS205886.roa (raw, json)
Hash identifier: /TbZm66dwK5RFvep8BPS7CPpGKbgJ+hUlsIkQCF40O8=
Subject key identifier: C2:8A:94:98:FB:1C:3E:28:FA:A2:BB:90:8D:1D:BA:A0:AF:8D:9D:98
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 7C560F8145E2C67C533C3E7BFDFEACC2D36F83E1
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa
Signing time: Fri 28 Nov 2025 06:26:54 +0000
ROA not before: Fri 28 Nov 2025 06:21:54 +0000
ROA not after: Fri 27 Nov 2026 06:26:54 +0000
asID: 205886
IP address blocks: 89.116.172.0/24 maxlen: 24
89.117.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 03:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:56:0f:81:45:e2:c6:7c:53:3c:3e:7b:fd:fe:ac:c2:d3:6f:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 28 06:21:54 2025 GMT
Not After : Nov 27 06:26:54 2026 GMT
Subject: CN=C28A9498FB1C3E28FAA2BB908D1DBAA0AF8D9D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:25:5b:ad:3c:00:12:97:6d:38:74:14:88:
c2:b0:2d:97:28:68:4c:d2:8a:30:07:1b:0d:40:20:
bb:b2:db:cd:50:ce:a7:45:2b:dc:56:9f:80:a4:8a:
e8:99:69:4b:01:66:cb:31:d1:6f:45:38:a5:e0:da:
56:f5:7b:c9:88:10:86:35:41:f2:08:b7:8d:e6:00:
35:c4:92:58:77:d4:5c:37:3b:3b:f0:7f:17:26:92:
c3:79:09:5a:1c:3d:ce:96:66:22:80:f6:71:13:75:
ed:d7:31:c0:d1:1b:28:91:0c:90:a1:10:d7:14:67:
b7:68:05:77:60:97:54:6a:a8:67:e4:42:a9:ff:a1:
1f:6d:54:80:28:99:cc:02:e0:c7:1b:51:a4:58:f1:
af:78:9e:a7:7d:50:8f:c8:80:2c:26:a1:2d:68:c1:
d2:38:94:c6:9d:98:11:78:20:df:9e:a1:65:17:21:
43:32:a3:89:c8:55:c3:6e:4e:78:7a:57:f0:f8:38:
aa:57:98:44:3a:e6:ea:af:12:ed:15:7b:ae:41:1f:
63:0b:8f:76:73:67:28:d1:83:6a:05:bb:64:8e:dc:
7c:58:ad:3c:11:90:4c:65:49:3f:6f:b9:67:c6:c5:
4b:f5:f7:4d:e3:58:4e:96:15:f3:96:2b:c7:dd:ad:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8A:94:98:FB:1C:3E:28:FA:A2:BB:90:8D:1D:BA:A0:AF:8D:9D:98
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.172.0/24
89.117.129.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:42:7f:62:4b:54:e1:5e:6f:2b:46:a7:8f:73:7c:f9:98:fc:
7d:1e:9e:a2:cd:db:54:e8:15:55:e4:39:de:2b:e2:80:f4:a0:
78:fa:b4:58:df:f3:64:f4:ff:b1:fe:94:ca:5b:d1:44:1f:27:
a5:3d:94:4d:f7:e3:03:d1:65:cb:c2:19:d9:e0:0a:dc:07:2d:
ac:ee:f3:92:66:8b:72:70:10:97:24:86:fe:41:a3:46:53:36:
6f:bd:cc:01:74:1e:a4:80:b1:8b:59:bf:c4:55:1d:0d:72:4d:
8c:bb:02:11:e3:fd:c0:cf:dd:37:d2:95:95:ce:51:47:2b:ac:
0d:18:e3:92:5e:22:60:f1:88:5b:f1:28:6e:1e:b9:2c:f7:1f:
ac:74:31:8d:94:1e:90:df:20:3e:37:d7:c3:d4:f0:e7:ce:81:
14:0c:b8:8a:75:ce:78:39:e1:a8:38:41:39:40:fc:bb:d8:ee:
a1:73:bd:39:85:56:cd:a6:1c:5f:e5:dc:b5:7b:34:96:6e:4b:
ca:41:bc:ae:da:88:19:3d:ed:73:d6:51:a7:d7:1a:05:27:b0:
60:d0:9d:31:ff:67:d6:c8:21:24:bc:82:df:e0:7f:b0:4c:3e:
cd:50:94:90:70:70:91:ab:42:92:1c:01:3d:31:85:b5:38:b2:
72:e0:cd:9b
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUfFYPgUXixnxTPD57/f6swtNvg+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTExMjgwNjIxNTRaFw0yNjExMjcwNjI2NTRaMDMxMTAvBgNV
BAMTKEMyOEE5NDk4RkIxQzNFMjhGQUEyQkI5MDhEMURCQUEwQUY4RDlEOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7iVbrTwAEpdtOHQUiMKwLZco
aEzSijAHGw1AILuy281QzqdFK9xWn4CkiuiZaUsBZssx0W9FOKXg2lb1e8mIEIY1
QfIIt43mADXEklh31Fw3OzvwfxcmksN5CVocPc6WZiKA9nETde3XMcDRGyiRDJCh
ENcUZ7doBXdgl1RqqGfkQqn/oR9tVIAomcwC4McbUaRY8a94nqd9UI/IgCwmoS1o
wdI4lMadmBF4IN+eoWUXIUMyo4nIVcNuTnh6V/D4OKpXmEQ65uqvEu0Ve65BH2ML
j3ZzZyjRg2oFu2SO3HxYrTwRkExlST9vuWfGxUv1903jWE6WFfOWK8fdrQH5AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUwoqUmPscPij6oruQjR26oK+NnZgwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIwNTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0rAMEAFl1gTANBgkq
hkiG9w0BAQsFAAOCAQEAy0J/YktU4V5vK0anj3N8+Zj8fR6eos3bVOgVVeQ53ivi
gPSgePq0WN/zZPT/sf6UylvRRB8npT2UTffjA9Fly8IZ2eAK3ActrO7zkmaLcnAQ
lySG/kGjRlM2b73MAXQepICxi1m/xFUdDXJNjLsCEeP9wM/dN9KVlc5RRyusDRjj
kl4iYPGIW/Eobh65LPcfrHQxjZQekN8gPjfXw9Tw586BFAy4inXOeDnhqDhBOUD8
u9juoXO9OYVWzaYcX+XctXs0lm5LykG8rtqIGT3tc9ZRp9caBSewYNCdMf9n1sgh
JLyC3+B/sEw+zVCUkHBwkatCkhwBPTGFtTiycuDNmw==
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:47:20 2025 by rpki-client