This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: BVpiDrBClY5/2hpbw3vuOcYvpRKv46RAbXPQJk9Ptuk= Subject key identifier: A5:8C:EE:01:66:04:27:97:D8:65:68:A3:E5:9F:BA:5F:79:F8:40:6B Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 469055B717B6720FBFF44F6A6C67E9CB33F78A47 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa Signing time: Thu 17 Jul 2025 10:40:10 +0000 ROA not before: Thu 17 Jul 2025 10:35:10 +0000 ROA not after: Thu 16 Jul 2026 10:40:10 +0000 asID: 395793 IP address blocks: 109.107.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:90:55:b7:17:b6:72:0f:bf:f4:4f:6a:6c:67:e9:cb:33:f7:8a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 17 10:35:10 2025 GMT Not After : Jul 16 10:40:10 2026 GMT Subject: CN=A58CEE0166042797D86568A3E59FBA5F79F8406B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:3f:d4:cd:59:d8:24:0d:20:7c:30:bd:25: dd:cf:d0:1e:ca:c6:d5:49:b4:21:79:16:3c:e2:a3: df:d4:85:da:58:f2:9e:e7:ba:b4:c4:3b:80:49:62: a8:2a:ca:39:44:ea:c2:b0:27:1c:43:54:4c:94:1d: 4c:fb:97:ae:9e:6d:01:a5:7b:86:3a:b1:8a:4f:f3: 63:a7:e9:e6:11:c9:1d:62:8b:32:f6:4d:9b:df:0b: 15:67:14:69:72:23:01:29:01:eb:ee:f1:6d:51:96: 5a:df:96:98:99:c9:37:96:c8:67:95:34:83:48:fe: e8:80:e5:ee:42:af:19:64:3b:10:7f:18:fe:be:03: c3:e0:52:fa:33:93:7b:25:c4:bc:00:f8:53:5d:d3: 11:8b:d6:cd:cc:ee:c3:2e:a6:e9:23:ca:35:39:62: 34:d8:eb:87:90:cf:d1:31:c9:84:77:f9:9b:c0:0c: f0:9a:ec:82:23:dc:52:f7:47:9a:17:13:4b:5d:ff: e1:08:24:a1:d0:ab:13:d7:25:c7:50:42:e4:d8:47: 53:26:5a:ee:76:04:6f:f9:ab:11:45:80:90:ef:5c: 7d:03:ac:7e:98:7c:c7:31:5d:ac:ea:95:00:d6:4f: 0c:0d:4a:d6:4f:0f:f9:57:65:5a:9f:61:c0:b9:06: 07:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8C:EE:01:66:04:27:97:D8:65:68:A3:E5:9F:BA:5F:79:F8:40:6B X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.60.0/24 Signature Algorithm: sha256WithRSAEncryption 56:b0:aa:bc:07:ca:e4:03:e3:ed:d9:94:16:b7:9c:1e:54:8b: 05:ad:ce:ae:4f:1d:bb:27:5e:60:d7:d4:ec:95:44:5f:d7:14: 38:ed:d6:b6:18:a8:e2:aa:45:c8:dc:5f:bc:1b:bd:04:3c:62: 61:5d:be:d1:a6:b8:89:a0:88:a6:ef:35:32:1d:8c:30:e1:29: 3a:07:13:97:e0:97:cd:58:62:89:0a:0d:88:07:13:b6:ad:25: 4f:a1:8e:0c:a9:9c:e2:69:0e:9f:ac:b7:e5:19:20:be:d1:08: f1:bb:97:72:55:b4:7c:d8:f7:8c:d7:12:81:e4:23:b6:f5:82: 4e:f8:d4:f6:b5:eb:1d:a4:cb:f9:96:d6:a2:a7:d6:09:31:88: 6a:fd:d4:dc:09:2f:2e:b5:bc:92:51:88:05:08:e7:de:18:02: 6d:c8:99:3d:7f:46:64:ba:08:2a:9e:95:35:82:58:e2:86:41: 27:4d:21:4b:27:46:86:c6:a6:cc:2a:f7:6c:82:8e:0b:42:eb: eb:8a:0b:18:d4:44:4a:02:e7:74:46:28:61:9d:f1:30:18:73: 24:59:c6:ec:30:f6:47:a3:72:14:3f:18:39:96:f1:44:23:a4: 17:a4:26:ac:25:51:b4:e7:c3:ef:4b:a6:18:b8:81:cf:51:43: 2c:bb:dc:6a -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIURpBVtxe2cg+/9E9qbGfpyzP3ikcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA3MTcxMDM1MTBaFw0yNjA3MTYxMDQwMTBaMDMxMTAvBgNV BAMTKEE1OENFRTAxNjYwNDI3OTdEODY1NjhBM0U1OUZCQTVGNzlGODQwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnD/UzVnYJA0gfDC9Jd3P0B7K xtVJtCF5Fjzio9/UhdpY8p7nurTEO4BJYqgqyjlE6sKwJxxDVEyUHUz7l66ebQGl e4Y6sYpP82On6eYRyR1iizL2TZvfCxVnFGlyIwEpAevu8W1RllrflpiZyTeWyGeV NINI/uiA5e5CrxlkOxB/GP6+A8PgUvozk3slxLwA+FNd0xGL1s3M7sMupukjyjU5 YjTY64eQz9ExyYR3+ZvADPCa7IIj3FL3R5oXE0td/+EIJKHQqxPXJcdQQuTYR1Mm Wu52BG/5qxFFgJDvXH0DrH6YfMcxXazqlQDWTwwNStZPD/lXZVqfYcC5BgfzAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUpYzuAWYEJ5fYZWij5Z+6X3n4QGswHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs8MA0GCSqG SIb3DQEBCwUAA4IBAQBWsKq8B8rkA+Pt2ZQWt5weVIsFrc6uTx27J15g19TslURf 1xQ47da2GKjiqkXI3F+8G70EPGJhXb7RpriJoIim7zUyHYww4Sk6BxOX4JfNWGKJ Cg2IBxO2rSVPoY4MqZziaQ6frLflGSC+0Qjxu5dyVbR82PeM1xKB5CO29YJO+NT2 tesdpMv5ltaip9YJMYhq/dTcCS8utbySUYgFCOfeGAJtyJk9f0ZkuggqnpU1glji hkEnTSFLJ0aGxqbMKvdsgo4LQuvrigsY1ERKAud0RihhnfEwGHMkWcbsMPZHo3IU Pxg5lvFEI6QXpCasJVG058PvS6YYuIHPUUMsu9xq -----END CERTIFICATE-----Generated at Fri Dec 5 05:17:54 2025 by rpki-client