This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: yFhFRYfmpr9PWvrWRe4RL0ay1+t8Qa2obqTznyP0yY0=
Subject key identifier: 2A:0A:84:93:E6:1A:7C:6B:C0:BF:AC:80:F8:FB:59:0E:DC:A3:5A:5C
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 18B148918322AE4162BA734B98A2A6C9E85664A7
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa
Signing time: Fri 10 Oct 2025 13:20:26 +0000
ROA not before: Fri 10 Oct 2025 13:15:26 +0000
ROA not after: Fri 09 Oct 2026 13:20:26 +0000
asID: 262287
IP address blocks: 86.38.32.0/24 maxlen: 24
86.38.185.0/24 maxlen: 24
86.38.186.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.68.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.155.0/24 maxlen: 24
89.117.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 19:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b1:48:91:83:22:ae:41:62:ba:73:4b:98:a2:a6:c9:e8:56:64:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Oct 10 13:15:26 2025 GMT
Not After : Oct 9 13:20:26 2026 GMT
Subject: CN=2A0A8493E61A7C6BC0BFAC80F8FB590EDCA35A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:03:de:7a:69:6f:38:c8:7e:8f:2d:86:95:
60:1e:3a:1c:22:69:b7:1c:1c:53:50:6e:5b:99:19:
9a:cc:19:36:e3:3e:1a:7b:32:25:91:fb:dc:97:19:
b6:e7:39:d3:ac:9b:a1:4b:dd:b6:60:43:1c:9a:8e:
0e:c0:c9:51:13:37:90:9e:34:ba:18:28:50:35:32:
fc:ae:42:33:6f:66:db:e9:6c:27:09:fc:3e:51:b2:
94:9c:2a:43:81:9d:29:99:44:09:3d:c5:99:a1:c1:
41:8b:06:fd:66:96:20:d4:b9:49:ca:0a:b0:5b:b4:
04:18:0f:46:d9:58:cb:94:bb:bb:b6:38:ed:a4:7f:
fa:d9:10:0d:ef:4f:17:78:01:de:b4:6f:f4:5b:f6:
2e:9b:98:d9:1a:75:cb:95:f9:68:ef:08:de:87:e4:
cf:e2:d4:5c:d0:5c:09:a7:f2:ab:59:c0:33:ca:43:
aa:fa:44:6a:45:3c:34:22:49:67:aa:fa:72:2b:97:
d1:7d:77:95:b1:b4:c5:6b:47:67:bb:68:6e:21:e9:
86:cf:56:e9:9d:ad:b7:06:fb:f7:b7:58:39:50:2d:
cf:f5:c7:64:66:7f:19:4a:fe:ac:ad:68:a7:99:f6:
19:88:8b:16:df:5d:57:a3:89:26:23:d7:64:1d:a3:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0A:84:93:E6:1A:7C:6B:C0:BF:AC:80:F8:FB:59:0E:DC:A3:5A:5C
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
86.38.185.0-86.38.186.255
89.116.60.0/23
89.116.63.0/24
89.116.68.0/24
89.116.154.0/24
89.116.158.0/24
89.116.218.0/24
89.116.253.0/24
89.117.101.0/24
89.117.155.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c8:c2:ef:44:5f:46:5c:1e:36:27:e7:b9:e7:71:f0:29:cb:
bf:ed:4f:9b:4d:31:6b:ac:96:96:32:91:c6:48:9d:5e:df:94:
b3:a9:bb:b2:f8:e5:d5:49:42:73:6c:0d:93:0d:28:23:cd:25:
2e:22:a3:ff:6b:18:7b:3a:ea:01:2e:4e:f9:a4:32:78:46:20:
25:d0:ac:fe:f6:fe:52:4d:69:e0:ab:7b:52:e9:93:5b:80:a6:
b0:27:c4:66:bf:1f:8b:36:16:13:98:75:4d:07:7e:71:3c:28:
c1:5a:cd:d6:c2:f1:be:49:4b:29:44:eb:6d:be:17:c3:50:dd:
cd:71:d6:4d:db:eb:7b:0b:65:ae:4d:62:4a:4c:81:fb:a7:d5:
ca:5a:f1:a5:9b:9b:bb:c5:6f:e7:eb:3c:8f:af:37:45:1d:73:
32:a4:65:5d:e9:14:e0:a6:d1:fc:55:aa:74:2e:0c:9e:f0:44:
c1:ab:48:9c:ce:f9:a1:38:09:61:03:4a:b9:42:cc:48:cb:3e:
47:53:ef:b8:73:c1:5b:94:57:ac:e0:5b:6c:4d:f5:58:a0:a7:
98:b4:24:da:27:8f:87:6e:44:9c:7a:a5:4b:c3:16:11:4e:1e:
61:02:9d:a0:53:49:0f:41:9a:50:d2:4b:19:b6:e9:2c:66:13:
53:a9:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:11:48 2025 by rpki-client