This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: ZAbuyeUz510Mn31BTCJ+ePIQf3k6g1YGGx2NExGuV9Y=
Subject key identifier: CF:4E:3E:CD:96:AD:B1:1E:CE:C0:F6:7F:97:09:B1:B6:7F:EA:27:EB
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 652E2F9B74D0B02713528A45265801D85D4DF554
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214432.roa
Signing time: Tue 13 Jan 2026 13:12:07 +0000
ROA not before: Tue 13 Jan 2026 13:07:07 +0000
ROA not after: Tue 12 Jan 2027 13:12:07 +0000
asID: 214432
IP address blocks: 89.117.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 11:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2e:2f:9b:74:d0:b0:27:13:52:8a:45:26:58:01:d8:5d:4d:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 13 13:07:07 2026 GMT
Not After : Jan 12 13:12:07 2027 GMT
Subject: CN=CF4E3ECD96ADB11ECEC0F67F9709B1B67FEA27EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:e7:50:00:25:4c:8c:61:e5:43:1f:b4:78:
7a:dd:9d:7e:e8:8a:70:9b:e6:ff:6a:48:9c:59:e2:
cc:67:a3:22:82:34:59:e9:7c:02:03:63:4c:88:9e:
36:5b:c7:8a:80:ba:50:9b:26:f3:42:2b:b8:65:90:
f5:e9:29:0b:c4:71:ac:3f:9c:9a:4a:e5:71:64:8a:
b0:b9:28:62:26:71:dd:32:9b:e8:79:6b:5d:c1:ae:
20:ca:98:f4:23:2c:ce:1e:c6:0a:a1:1b:90:a7:00:
c9:a8:c7:50:76:01:40:83:b9:11:25:77:ee:a6:32:
9b:87:7b:9f:8e:8a:21:9a:cc:28:69:f4:f9:b3:18:
2b:8a:ce:c6:9d:18:de:b0:cf:d7:b6:16:ac:9a:98:
7b:07:68:19:32:a4:79:60:80:03:4e:56:8c:6d:22:
66:16:ca:0a:36:f0:c1:b2:a3:5d:56:de:6e:f6:58:
d9:d9:bb:b3:05:39:a9:ad:b8:b1:32:01:c1:64:3a:
95:b8:a8:43:21:ac:38:f5:2b:47:30:95:36:46:ed:
b4:0d:72:4e:2c:b3:1b:f3:3d:2c:48:c4:6c:e4:8f:
73:e1:70:f1:18:8f:1e:19:cb:f9:de:cc:11:b6:85:
10:93:ab:83:df:1b:eb:d1:5c:5e:77:08:de:e8:c6:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4E:3E:CD:96:AD:B1:1E:CE:C0:F6:7F:97:09:B1:B6:7F:EA:27:EB
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:13:ee:05:1e:4a:d3:cd:06:80:1b:e5:92:33:f6:89:d5:e2:
2c:ec:59:73:75:d3:08:76:74:6c:36:d7:49:ec:3f:3f:eb:8b:
c6:9d:7b:bf:90:22:41:67:4e:2d:29:70:6b:6c:8f:93:75:8a:
50:f9:49:fe:31:cf:e5:2a:0b:5a:37:2d:80:a3:39:16:7b:ec:
04:9a:b7:15:d3:fd:49:4d:df:b7:91:dc:c5:27:d3:5c:3e:d5:
c3:9f:b3:a4:92:13:11:2e:97:ad:f7:91:e9:ad:23:c8:b6:df:
32:62:aa:4f:af:56:70:f2:9b:bf:04:86:05:4e:67:2a:62:3d:
7d:48:43:1e:ea:46:57:a8:de:e8:fb:a3:67:7d:2d:67:48:4f:
9b:40:d7:8f:2f:c6:3e:41:01:66:2a:cd:d6:01:50:ea:ae:48:
0b:09:4c:a0:47:a8:c8:d9:fd:2f:6b:18:71:f1:ed:40:35:57:
f3:21:bd:84:ec:5a:bd:93:7f:75:80:c6:c2:d9:79:a7:c6:4b:
45:83:28:60:30:67:01:7d:eb:a4:ed:44:71:17:08:a7:0f:25:
e4:86:ae:57:f1:08:be:76:15:fc:1c:7a:cc:a8:d4:03:5a:12:
d3:c7:b7:c8:4d:f3:04:04:0b:cb:02:d0:ff:48:04:9f:20:e7:
9c:62:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:02 2026 by rpki-client