This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: wF8ck221XUvH980aanvn0tUzcTb4x+mogQAagJCqmLI=
Subject key identifier: 66:C2:B1:E5:FA:B9:02:00:80:96:94:E9:38:69:4C:4A:92:C7:4B:91
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 54A5F9A3289B56BAD6CA3CD105199375DD5D7B2B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa
Signing time: Thu 27 Nov 2025 07:20:25 +0000
ROA not before: Thu 27 Nov 2025 07:15:25 +0000
ROA not after: Thu 26 Nov 2026 07:20:25 +0000
asID: 984
IP address blocks: 89.116.203.0/24 maxlen: 24
89.117.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a5:f9:a3:28:9b:56:ba:d6:ca:3c:d1:05:19:93:75:dd:5d:7b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 27 07:15:25 2025 GMT
Not After : Nov 26 07:20:25 2026 GMT
Subject: CN=66C2B1E5FAB90200809694E938694C4A92C74B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:c9:08:a4:64:bf:7e:eb:14:4d:63:9c:90:
c1:54:a1:66:e7:3d:33:5a:8e:16:13:96:2c:69:41:
79:37:b8:f9:07:c1:8b:77:a0:1a:71:9e:02:9a:d1:
57:c2:35:73:80:3e:50:f3:f6:13:ce:fc:d7:4d:d7:
c4:93:2e:98:8b:81:a7:d7:95:37:54:d3:d1:ea:40:
9e:ad:14:29:1e:70:5a:ed:5c:47:0c:44:1f:79:df:
0b:b8:08:bc:68:73:1a:a0:dc:2f:70:d8:24:71:60:
b5:bc:06:4c:8e:e7:89:8b:57:ad:fb:38:08:5f:9d:
45:19:b4:4f:41:e4:e6:0d:19:66:64:c1:6d:ad:d9:
ae:56:22:17:d5:6a:68:6e:91:a5:9f:08:b4:b1:ae:
5c:be:c0:9e:82:5d:56:96:eb:e1:de:fa:e5:95:3a:
28:62:18:19:9b:0e:c6:fd:79:e5:31:3f:e0:83:dd:
ef:31:2f:e2:1a:3f:f2:13:45:92:d7:50:2a:ac:fe:
ab:fd:85:71:71:6a:cc:a8:d5:1a:e0:f0:15:72:8b:
e1:eb:ca:64:0f:85:aa:4d:1a:e4:86:ce:94:2c:4f:
45:eb:40:5a:97:75:5c:ea:df:77:ff:cd:6d:46:88:
98:75:31:48:0c:3a:72:91:49:ba:ed:01:29:09:5a:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:B1:E5:FA:B9:02:00:80:96:94:E9:38:69:4C:4A:92:C7:4B:91
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.203.0/24
89.117.65.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f6:bd:81:4d:75:09:20:1f:30:70:86:a7:b7:22:69:44:e6:
63:cb:eb:37:87:0f:f6:f0:63:7a:b2:d4:83:93:9e:12:00:32:
67:3e:79:99:aa:21:a6:77:eb:30:48:68:a7:4e:5e:19:26:10:
b4:c3:03:aa:af:67:b1:df:7a:d2:21:9a:7e:34:a5:a9:a1:af:
c8:d9:48:71:ca:a6:2a:26:5b:fc:06:53:5b:9c:b8:50:24:f3:
70:e7:18:6a:be:cb:03:c5:50:62:ad:ab:1e:8d:57:fe:bc:02:
23:bb:54:5e:2c:e7:e5:9a:8a:75:9a:de:74:04:db:0c:11:8f:
d5:13:fe:09:e0:3a:d7:57:58:64:3e:2d:d9:c5:bd:d4:58:3b:
44:eb:56:84:2b:97:66:af:da:cc:4d:76:70:6e:df:0a:a6:5b:
be:3f:25:00:59:a7:c1:6f:b6:21:fd:bc:04:5e:ef:38:6a:dd:
88:c4:95:f8:eb:5b:28:a4:e3:3a:1f:39:fc:c1:63:7c:83:ef:
4b:d6:8e:f0:b4:35:16:e3:03:a6:81:c1:92:20:f0:b4:c3:49:
44:2b:8f:88:2f:33:7a:7f:b2:1b:3b:0b:26:af:74:11:de:52:
58:c0:f3:df:b4:cf:12:8f:77:90:e1:74:53:80:19:28:ec:de:
13:36:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 20:07:29 2025 by rpki-client