This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: Jxb6A+OapE2pA/A7iriuY4u+BVXsYK/nMsWKds7Ltng= Subject key identifier: C4:B7:4C:0A:73:5D:E6:BD:D8:C6:BC:B4:90:D6:51:20:22:B1:EC:1E Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 342D09E1A338454F99B3D9DDF3E36361A18660FA Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa Signing time: Fri 21 Nov 2025 11:02:10 +0000 ROA not before: Fri 21 Nov 2025 10:57:10 +0000 ROA not after: Fri 20 Nov 2026 11:02:10 +0000 asID: 25198 IP address blocks: 89.116.203.0/24 maxlen: 24 89.117.65.0/24 maxlen: 24 89.117.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:2d:09:e1:a3:38:45:4f:99:b3:d9:dd:f3:e3:63:61:a1:86:60:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 21 10:57:10 2025 GMT Not After : Nov 20 11:02:10 2026 GMT Subject: CN=C4B74C0A735DE6BDD8C6BCB490D6512022B1EC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:21:84:ec:0a:f8:e7:8e:ab:a9:02:a2:58: 13:ee:5a:31:ce:f9:be:43:b4:09:07:04:53:95:ed: b0:ec:8a:32:d4:61:d4:7c:d5:d9:9a:31:56:8f:d6: dc:00:bd:73:24:43:fe:40:f0:22:63:c0:da:86:c4: 8d:0e:9a:fb:87:d6:ef:c9:c3:5f:3c:e1:30:9a:3e: 3e:fa:d7:2e:2f:6c:9b:01:9e:a6:8e:93:ac:a8:c5: 8d:3d:a3:c6:f8:06:b4:9f:2e:78:cb:50:e6:84:17: 51:a2:eb:d8:a8:d4:fd:e1:b8:99:34:78:98:b0:eb: 39:b7:21:00:93:b5:5c:3e:86:40:52:d2:1c:45:36: 03:56:c3:62:7d:48:42:83:c2:8b:9f:c2:79:f3:de: 0c:5a:f2:f3:da:7e:1b:05:15:6e:13:33:ad:37:26: 9e:80:bd:f1:44:32:ed:11:0a:93:07:b2:f6:e7:a0: 1d:43:8b:8f:ce:41:6d:61:b1:04:3c:d6:5a:a6:c8: 17:8e:52:dc:ac:33:82:18:ad:21:93:16:bf:cf:55: 32:94:15:55:70:65:cc:3b:e8:a3:1c:65:4c:22:bd: e2:54:85:3b:f1:53:cc:74:62:d6:1e:db:54:72:6f: 19:11:20:18:df:03:9a:fe:ea:af:81:59:4d:d9:53: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:4C:0A:73:5D:E6:BD:D8:C6:BC:B4:90:D6:51:20:22:B1:EC:1E X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.203.0/24 89.117.65.0/24 89.117.129.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:06:91:79:68:72:37:c0:c4:52:b4:73:54:f7:24:15:90:51: 7c:09:5c:88:50:de:8a:7e:17:cc:29:9b:3e:14:0b:ee:70:ee: e4:09:d9:46:1c:f0:c4:45:c6:dc:ff:3e:ed:94:2d:14:11:bc: 48:0e:90:57:89:be:6d:34:5a:4e:42:cd:29:af:75:af:aa:24: e7:6f:dc:49:0a:c9:28:da:ab:a1:14:53:d2:b8:d8:a0:8c:99: 75:67:7d:a0:ab:3f:fb:5f:ed:5f:9c:f7:bb:7f:6a:03:6f:50: 2b:b6:c0:c1:5e:f5:c4:7a:f6:29:ed:98:14:f2:d9:5c:42:ac: ed:7c:c5:ba:13:de:24:2c:45:c2:23:d7:83:b8:43:12:c6:49: 43:fc:f5:07:82:8e:46:50:40:a8:91:d8:1e:31:55:d1:a7:65: 2c:27:9b:ab:aa:3c:b8:ff:af:78:27:61:ae:a7:72:61:38:9a: ed:20:ee:a1:ea:d1:29:97:3f:6b:d2:72:a4:90:36:a5:16:da: ac:19:c5:f6:f3:21:e6:2c:88:65:ff:48:0c:56:73:9d:28:74: de:47:17:42:49:1a:7e:b0:c7:cf:ff:6f:e9:4e:75:53:bd:9b: 78:1f:49:8a:97:c6:71:1c:3a:32:3d:26:87:7c:bd:b5:1d:99: 44:2f:16:f9 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUNC0J4aM4RU+Zs9nd8+NjYaGGYPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTExMjExMDU3MTBaFw0yNjExMjAxMTAyMTBaMDMxMTAvBgNV BAMTKEM0Qjc0QzBBNzM1REU2QkREOEM2QkNCNDkwRDY1MTIwMjJCMUVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmfyGE7Ar4546rqQKiWBPuWjHO +b5DtAkHBFOV7bDsijLUYdR81dmaMVaP1twAvXMkQ/5A8CJjwNqGxI0OmvuH1u/J w1884TCaPj761y4vbJsBnqaOk6yoxY09o8b4BrSfLnjLUOaEF1Gi69io1P3huJk0 eJiw6zm3IQCTtVw+hkBS0hxFNgNWw2J9SEKDwoufwnnz3gxa8vPafhsFFW4TM603 Jp6AvfFEMu0RCpMHsvbnoB1Di4/OQW1hsQQ81lqmyBeOUtysM4IYrSGTFr/PVTKU FVVwZcw76KMcZUwiveJUhTvxU8x0YtYe21RybxkRIBjfA5r+6q+BWU3ZU7D/AgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUxLdMCnNd5r3Yxry0kNZRICKx7B4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWXTLAwQAWXVBAwQAWXWB MA0GCSqGSIb3DQEBCwUAA4IBAQCeBpF5aHI3wMRStHNU9yQVkFF8CVyIUN6KfhfM KZs+FAvucO7kCdlGHPDERcbc/z7tlC0UEbxIDpBXib5tNFpOQs0pr3WvqiTnb9xJ Csko2quhFFPSuNigjJl1Z32gqz/7X+1fnPe7f2oDb1ArtsDBXvXEevYp7ZgU8tlc QqztfMW6E94kLEXCI9eDuEMSxklD/PUHgo5GUECokdgeMVXRp2UsJ5urqjy4/694 J2Gup3JhOJrtIO6h6tEplz9r0nKkkDalFtqsGcX28yHmLIhl/0gMVnOdKHTeRxdC SRp+sMfP/2/pTnVTvZt4H0mKl8ZxHDoyPSaHfL21HZlELxb5 -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:46 2025 by rpki-client