This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
File: AS49999.roa (raw, json)
Hash identifier: WYJ96VXwWNzNlyNcytqAmyDIhvW5H5hRQTc+WSlWIqo=
Subject key identifier: B8:1E:DD:1D:AD:FF:F2:EA:15:04:A3:24:C2:98:B1:38:57:7E:A5:72
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5839CE5A81D2CDDDE159F75D7F741DA4DF1C066D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
Signing time: Tue 02 Dec 2025 12:55:12 +0000
ROA not before: Tue 02 Dec 2025 12:50:12 +0000
ROA not after: Tue 01 Dec 2026 12:55:12 +0000
asID: 49999
IP address blocks: 89.117.88.0/22 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:39:ce:5a:81:d2:cd:dd:e1:59:f7:5d:7f:74:1d:a4:df:1c:06:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 2 12:50:12 2025 GMT
Not After : Dec 1 12:55:12 2026 GMT
Subject: CN=B81EDD1DADFFF2EA1504A324C298B138577EA572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:13:d6:51:8d:30:b2:9c:3f:02:da:7b:91:
6f:c8:48:1a:48:f6:7d:0d:fa:51:4b:77:78:06:bb:
5a:07:c7:d2:9b:74:67:8c:74:57:cb:4d:c7:a0:0f:
02:de:47:25:ad:9b:d7:89:ce:5c:ea:9f:3a:a0:fb:
3f:32:50:0b:5f:f4:9c:67:40:77:41:5b:87:e8:8c:
d1:b8:1d:4a:40:bf:67:47:53:8e:56:98:52:3d:a4:
e3:d4:77:89:e1:b6:e8:95:dc:97:8f:da:5d:63:5a:
65:8e:d2:9c:59:29:29:a0:ba:32:21:d3:ed:02:36:
aa:27:ee:9a:46:ea:bd:1a:be:40:7e:a0:b6:42:56:
6b:a6:d4:8a:ba:91:aa:9d:06:29:e4:0d:37:b9:4b:
38:e3:4c:6b:5e:50:82:d4:99:59:08:b6:b9:28:2f:
6c:3f:68:aa:8f:24:f5:d7:7e:51:c3:c3:3d:38:de:
9d:dd:c1:03:5e:2c:36:ea:70:02:1c:88:59:7e:05:
00:df:23:68:ee:db:9f:2b:d5:5d:a7:88:72:09:85:
c0:d3:b2:cf:da:97:64:1d:63:5b:31:5a:a3:6b:97:
56:35:39:82:50:a6:d2:ee:e3:37:13:18:c7:b2:d2:
8c:5e:c8:fb:b9:60:7f:7e:eb:b9:00:26:f1:41:fa:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:DD:1D:AD:FF:F2:EA:15:04:A3:24:C2:98:B1:38:57:7E:A5:72
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.88.0/22
89.117.112.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f6:5c:89:d3:69:c9:85:09:d9:ad:75:51:23:59:1c:39:9c:
85:5e:fa:8a:dd:45:7b:10:26:75:4a:ef:10:d3:0a:c8:12:d8:
c3:2f:10:70:51:fb:cd:fb:ad:63:9f:f5:a8:fb:6c:ce:7e:2b:
85:7c:31:3f:29:5b:40:cb:40:cd:5c:d3:81:5e:ef:45:ce:e0:
69:46:09:1d:2e:8d:f5:bd:c2:8d:7d:d6:f0:e2:32:37:6c:31:
e8:0c:f3:f6:d4:c6:f1:a9:3f:3d:30:d7:1c:b9:c2:32:21:9f:
18:85:aa:9b:2c:b4:2e:95:c0:e4:ef:d8:a0:f4:d5:d1:41:a9:
e2:96:d3:25:3e:80:ef:3b:d4:d3:cb:53:b2:86:8d:76:07:6c:
d9:25:70:7c:d7:28:30:8d:4c:8f:f1:9a:8d:5e:51:77:93:cc:
b7:6b:44:e4:d1:ea:77:d5:c4:2e:44:4d:24:4c:60:97:fe:d2:
ee:dc:b1:30:ae:de:d9:ec:7d:ff:ce:1e:5f:74:ab:1d:e6:df:
df:0f:06:24:e0:68:26:a7:38:10:5c:57:3a:4f:7e:3f:6d:a7:
4d:25:65:a7:0e:54:76:3b:78:b0:69:01:34:22:ce:20:3c:b3:
ce:6f:9c:ea:42:03:9a:6f:af:5b:9f:4a:4d:3a:c6:20:c5:91:
b9:c4:f1:92
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUWDnOWoHSzd3hWfddf3QdpN8cBm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTEyMDIxMjUwMTJaFw0yNjEyMDExMjU1MTJaMDMxMTAvBgNV
BAMTKEI4MUVERDFEQURGRkYyRUExNTA0QTMyNEMyOThCMTM4NTc3RUE1NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LxPWUY0wspw/Atp7kW/ISBpI
9n0N+lFLd3gGu1oHx9KbdGeMdFfLTcegDwLeRyWtm9eJzlzqnzqg+z8yUAtf9Jxn
QHdBW4fojNG4HUpAv2dHU45WmFI9pOPUd4nhtuiV3JeP2l1jWmWO0pxZKSmgujIh
0+0CNqon7ppG6r0avkB+oLZCVmum1Iq6kaqdBinkDTe5SzjjTGteUILUmVkItrko
L2w/aKqPJPXXflHDwz043p3dwQNeLDbqcAIciFl+BQDfI2ju258r1V2niHIJhcDT
ss/al2QdY1sxWqNrl1Y1OYJQptLu4zcTGMey0oxeyPu5YH9+67kAJvFB+vWFAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUuB7dHa3/8uoVBKMkwpixOFd+pXIwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzQ5OTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWXVYAwQCWXVwAwQCWXV4
MA0GCSqGSIb3DQEBCwUAA4IBAQBi9lyJ02nJhQnZrXVRI1kcOZyFXvqK3UV7ECZ1
Su8Q0wrIEtjDLxBwUfvN+61jn/Wo+2zOfiuFfDE/KVtAy0DNXNOBXu9FzuBpRgkd
Lo31vcKNfdbw4jI3bDHoDPP21MbxqT89MNccucIyIZ8YhaqbLLQulcDk79ig9NXR
QaniltMlPoDvO9TTy1Oyho12B2zZJXB81ygwjUyP8ZqNXlF3k8y3a0Tk0ep31cQu
RE0kTGCX/tLu3LEwrt7Z7H3/zh5fdKsd5t/fDwYk4GgmpzgQXFc6T34/badNJWWn
DlR2O3iwaQE0Is4gPLPOb5zqQgOab69bn0pNOsYgxZG5xPGS
-----END CERTIFICATE-----
Generated at Fri Dec 5 20:07:30 2025 by rpki-client