This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa
File: AS211439.roa (raw, json)
Hash identifier: 2AxkWLzlCRCNHzYW3419GngLkfZ4R/dycwKKNnm/euw=
Subject key identifier: 29:B6:33:D9:57:07:4B:90:93:C5:E0:14:5D:DE:0A:F6:CA:F1:07:07
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 41EF766FC1FC5F7BE084391088F5B416FEAD7895
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa
Signing time: Wed 26 Nov 2025 15:55:12 +0000
ROA not before: Wed 26 Nov 2025 15:50:12 +0000
ROA not after: Wed 25 Nov 2026 15:55:12 +0000
asID: 211439
IP address blocks: 86.38.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ef:76:6f:c1:fc:5f:7b:e0:84:39:10:88:f5:b4:16:fe:ad:78:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 26 15:50:12 2025 GMT
Not After : Nov 25 15:55:12 2026 GMT
Subject: CN=29B633D957074B9093C5E0145DDE0AF6CAF10707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:43:88:83:8f:c7:c0:e7:d4:1b:52:aa:29:
0a:83:c2:e5:fc:39:69:28:a4:98:02:56:a7:f6:60:
12:c4:db:5b:56:80:77:30:da:46:32:7d:41:1a:f7:
d8:f1:bb:d6:0d:55:d0:62:ad:c2:86:53:d3:32:bd:
10:6e:f8:f2:f3:67:30:80:3a:f2:d9:20:6d:85:20:
ff:dd:41:39:1e:aa:84:10:da:d1:d0:d5:8f:b7:fc:
09:92:e4:fd:77:fa:66:7b:b1:8d:b9:0a:3c:91:0f:
41:d1:aa:14:87:37:4a:5f:93:c3:db:53:81:42:15:
99:61:bd:25:43:fa:83:68:13:4a:c4:21:0c:eb:fe:
1f:fc:0d:27:d0:0e:de:39:0c:dc:7e:01:c1:c4:74:
2d:59:a7:19:56:33:e6:3d:38:0d:87:7e:a0:75:5c:
18:5b:1c:30:9b:54:16:6b:6d:cf:66:bb:1c:8a:c4:
eb:e9:be:27:8a:c4:66:fa:c1:31:73:71:cb:de:92:
81:c9:6f:d0:99:c2:22:3a:48:2b:4e:0e:91:f1:e9:
0b:27:f0:2b:20:c6:52:a9:8c:3e:86:58:44:7b:29:
9e:9c:a8:1f:a8:63:46:29:f0:d4:19:fe:a7:b2:d2:
6d:c3:4b:4c:48:86:08:0c:d7:80:ca:da:cb:61:9a:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:33:D9:57:07:4B:90:93:C5:E0:14:5D:DE:0A:F6:CA:F1:07:07
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.24.0/24
Signature Algorithm: sha256WithRSAEncryption
08:84:8c:80:07:ab:c4:2c:d1:8f:13:ff:de:0b:72:da:8b:36:
75:2a:85:07:0e:c9:ae:83:1f:d7:a3:54:75:09:50:b1:d1:1f:
07:a5:16:ec:7d:62:f1:d8:3c:14:7b:b3:62:a2:3f:5d:73:4c:
86:9e:10:d9:17:2f:6a:7b:21:06:3b:30:4c:83:1f:36:25:3d:
0a:7c:cf:d7:39:1f:f9:e8:a3:d8:a9:da:c1:d9:65:67:f4:ff:
a1:23:13:c1:e6:f5:b8:7d:d2:4f:1e:e1:ba:0e:fa:28:f7:73:
50:11:62:5e:40:a7:4d:20:d7:84:58:a5:90:52:00:7e:d9:9f:
6e:52:77:cf:b9:7c:d7:3b:43:11:fe:4f:62:6a:2f:c6:3d:87:
55:28:57:3d:4b:89:bc:76:b6:ea:64:9a:49:e5:76:89:51:60:
76:92:ec:04:39:99:2b:d7:83:5a:76:81:17:76:cb:ca:4c:c1:
33:04:57:30:b3:13:85:8f:14:de:64:9f:dd:62:14:2d:11:04:
85:0a:3b:b3:be:10:f9:22:5f:bc:bc:8d:e0:07:89:1f:67:38:
61:e6:d1:4b:8d:56:0e:92:8d:1f:d8:1e:f2:ed:e3:a3:ba:ab:
c9:59:36:8e:da:3d:80:c9:12:07:11:bf:1c:6a:6e:20:15:fe:
80:7c:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:12:35 2025 by rpki-client