This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42708.roa File: AS42708.roa (raw, json) Hash identifier: O14Bdwlrn8/0DaIBTUdLyBK20EpqGofkkDHeG5xt/Fc= Subject key identifier: 42:8E:D8:32:C4:21:E1:F2:0B:06:A6:50:03:A2:5C:95:F5:35:89:77 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 31066ECF5933230CE0708465AD1F359F32961BF9 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42708.roa Signing time: Thu 15 Jan 2026 14:29:38 +0000 ROA not before: Thu 15 Jan 2026 14:24:38 +0000 ROA not after: Thu 14 Jan 2027 14:29:38 +0000 asID: 42708 IP address blocks: 89.116.91.0/24 maxlen: 24 89.116.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:06:6e:cf:59:33:23:0c:e0:70:84:65:ad:1f:35:9f:32:96:1b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 15 14:24:38 2026 GMT Not After : Jan 14 14:29:38 2027 GMT Subject: CN=428ED832C421E1F20B06A65003A25C95F5358977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:8e:3d:15:c2:05:66:e4:13:12:3f:b0:a3: 7f:19:e7:fb:35:c7:40:df:ad:39:9e:4c:f4:bc:5d: c3:a2:ad:6c:0d:39:df:03:91:14:3e:fa:83:8a:3d: c6:bd:ea:a5:48:01:b9:bb:4b:03:4c:b8:07:4a:59: 5e:9e:5c:85:9d:88:ce:69:25:51:4e:4d:5d:bf:6f: 42:9b:fb:cf:35:94:fa:38:4a:d4:a1:77:a3:db:a3: b0:76:6e:49:1e:67:34:7d:4d:53:53:fd:48:ad:b5: dc:1d:cd:28:09:3d:e7:84:27:69:2d:ca:fc:88:b9: e7:72:69:80:e6:38:ce:e6:56:4b:6d:78:c3:de:29: 0a:7d:c5:85:3f:28:f2:5c:e8:df:b4:39:83:77:12: d7:1e:50:8e:28:7f:7d:d1:dc:3b:8e:c6:2f:a3:54: b5:76:d9:57:c4:57:36:18:79:f5:33:04:ea:4b:e9: 54:23:a9:d1:87:29:f6:97:79:79:35:30:f6:8d:91: d9:fa:5e:4e:13:03:d7:09:13:e4:cc:61:3c:59:de: 42:ba:0c:e1:f2:f0:3f:cd:d8:4d:17:0b:3b:a4:f9: 36:0d:da:7b:6b:10:56:2e:f3:4a:79:2b:2f:d2:6c: 74:29:25:6f:ea:6a:ee:66:0e:ed:1a:84:66:c5:fc: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:D8:32:C4:21:E1:F2:0B:06:A6:50:03:A2:5C:95:F5:35:89:77 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42708.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.91.0/24 89.116.241.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b0:b6:4b:e6:38:5c:1d:a9:fe:20:6d:13:85:0d:ef:71:b7: 0a:5a:ca:18:ac:6d:9b:a8:02:68:c6:fa:aa:39:37:f4:b8:83: 20:e3:ef:bd:53:fd:dd:61:3d:28:d6:51:bd:7f:3d:80:c7:4c: e1:61:28:01:09:11:3a:3a:43:fa:01:2a:c7:e4:e4:3e:08:e8: 3b:df:91:79:f8:c8:68:6c:a5:0c:71:f3:f6:69:95:54:98:0f: 12:9d:cd:e3:0e:87:74:3c:5e:15:2d:ee:0c:a2:d9:e3:67:5c: 51:b2:4a:d5:e1:90:fb:4b:83:fd:1f:f3:7c:ee:7d:62:2d:14: f8:e6:2a:64:58:10:96:38:54:fb:86:be:e3:66:fe:a0:44:60: eb:a7:50:fb:9a:c1:67:34:d0:bc:83:d0:69:52:01:ac:e1:0d: aa:c3:53:9e:43:2e:7e:17:4f:65:36:c3:2b:1f:2e:75:a7:28: 89:e1:a7:9d:1f:7c:d5:1e:cf:50:65:48:98:6d:26:11:47:21: f8:e3:12:a0:75:b8:2f:b0:26:8f:d7:c9:af:17:c9:31:9e:14: 6e:61:91:af:63:7a:38:7e:2f:49:40:a7:96:c2:5d:d3:e7:53: 74:b2:43:0f:79:3d:76:1e:1c:2c:75:34:7c:f5:7e:2d:c5:d4: b9:68:73:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMQZuz1kzIwzgcIRlrR81nzKWG/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAxMTUxNDI0MzhaFw0yNzAxMTQxNDI5MzhaMDMxMTAvBgNV BAMTKDQyOEVEODMyQzQyMUUxRjIwQjA2QTY1MDAzQTI1Qzk1RjUzNTg5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JI49FcIFZuQTEj+wo38Z5/s1 x0DfrTmeTPS8XcOirWwNOd8DkRQ++oOKPca96qVIAbm7SwNMuAdKWV6eXIWdiM5p JVFOTV2/b0Kb+881lPo4StShd6Pbo7B2bkkeZzR9TVNT/UittdwdzSgJPeeEJ2kt yvyIuedyaYDmOM7mVktteMPeKQp9xYU/KPJc6N+0OYN3EtceUI4of33R3DuOxi+j VLV22VfEVzYYefUzBOpL6VQjqdGHKfaXeXk1MPaNkdn6Xk4TA9cJE+TMYTxZ3kK6 DOHy8D/N2E0XCzuk+TYN2ntrEFYu80p5Ky/SbHQpJW/qau5mDu0ahGbF/OBjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQo7YMsQh4fILBqZQA6JclfU1iXcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQyNzA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXRbAwQAWXTxMA0GCSqG SIb3DQEBCwUAA4IBAQBrsLZL5jhcHan+IG0ThQ3vcbcKWsoYrG2bqAJoxvqqOTf0 uIMg4++9U/3dYT0o1lG9fz2Ax0zhYSgBCRE6OkP6ASrH5OQ+COg735F5+MhobKUM cfP2aZVUmA8Snc3jDod0PF4VLe4MotnjZ1xRskrV4ZD7S4P9H/N87n1iLRT45ipk WBCWOFT7hr7jZv6gRGDrp1D7msFnNNC8g9BpUgGs4Q2qw1OeQy5+F09lNsMrHy51 pyiJ4aedH3zVHs9QZUiYbSYRRyH44xKgdbgvsCaP18mvF8kxnhRuYZGvY3o4fi9J QKeWwl3T51N0skMPeT12HhwsdTR89X4txdS5aHPJ -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:27 2026 by rpki-client