This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa File: 33372e312e3232372e302f32342d3234203d3e20333933393432.roa (raw, json) Hash identifier: HjqKXH2iFp4ZKBx5Vj70KKLJ49wGN3rextTxSxUBAgE= Subject key identifier: 20:AC:E8:F6:57:09:4C:C8:24:16:0F:80:25:BE:A6:1E:6A:AA:37:7C Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 6A5BB717680BD70AC60769D5FD4456994FED6393 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa Signing time: Wed 26 Nov 2025 02:55:12 +0000 ROA not before: Wed 26 Nov 2025 02:50:12 +0000 ROA not after: Wed 25 Nov 2026 02:55:12 +0000 asID: 393942 IP address blocks: 37.1.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5b:b7:17:68:0b:d7:0a:c6:07:69:d5:fd:44:56:99:4f:ed:63:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 26 02:50:12 2025 GMT Not After : Nov 25 02:55:12 2026 GMT Subject: CN=20ACE8F657094CC824160F8025BEA61E6AAA377C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:9c:9e:2b:91:77:48:82:67:76:e7:cc:8a: fe:1c:9e:d0:d6:95:72:81:9b:ae:5d:b0:36:45:db: 0e:b5:8a:3d:7d:99:d8:d9:05:86:d2:1b:32:e5:3d: 2e:c6:87:82:1b:4e:f5:42:05:db:ea:8b:11:94:df: ea:06:c1:a8:4c:70:c4:f9:e2:ea:ff:26:81:6c:da: 8c:22:96:1f:04:78:34:5e:bb:9e:45:ea:1e:86:9c: 38:eb:9c:30:49:40:06:5c:3c:8b:1a:fe:59:c6:d7: 33:37:89:19:b9:dc:64:77:bc:62:4e:38:18:e0:ca: 05:f5:1d:56:66:ea:5f:cc:ae:6d:ca:c4:ab:31:36: 9a:33:af:aa:13:5f:db:b5:1d:ff:a0:0f:ca:9b:05: 90:7e:84:a1:47:97:6e:1d:0f:e8:26:ce:9a:24:23: 5b:66:6b:cd:a4:8d:d5:88:79:08:e1:bc:bf:af:3c: 1a:17:43:b2:f9:78:04:18:5d:c6:ba:ee:c6:39:f8: e2:fc:b9:82:76:d0:c6:c6:48:be:40:02:a6:fe:16: b1:33:54:49:d2:c1:a4:4d:65:a0:20:8f:1c:3c:20: 39:06:75:cf:81:fe:33:9e:d2:a7:8e:16:40:e9:26: a8:1c:80:d9:32:9d:38:56:cb:6d:66:2a:8b:07:85: c6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AC:E8:F6:57:09:4C:C8:24:16:0F:80:25:BE:A6:1E:6A:AA:37:7C X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.227.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:af:c0:8f:64:36:18:d6:77:ec:af:98:39:ca:8d:c0:f9:04: 5a:80:39:47:f4:a3:84:12:a3:e7:bf:a0:0c:75:c4:c7:66:e3: fc:39:06:ef:1a:57:83:e8:41:0d:46:88:2e:bd:87:69:a2:03: 13:cf:1a:02:d9:d5:e1:d5:7e:22:6f:2f:b5:65:08:16:cb:4c: 03:1f:17:0d:46:d3:65:71:a0:a5:ef:91:8b:d2:4c:01:55:7f: 05:5c:f7:ff:18:d4:97:b4:ca:f7:86:50:ab:ad:e5:3c:9f:0f: dc:3f:f6:99:1e:9b:e0:62:7c:9b:fe:5a:ad:99:f5:b0:46:33: 39:7c:93:94:6d:46:e7:a5:af:82:f9:d3:32:aa:a4:1b:4f:2e: 22:07:cf:1e:bc:12:60:ec:23:3b:28:6a:a0:20:b0:da:c1:ba: b2:3f:e6:92:74:8f:bf:64:0f:73:ed:12:55:a7:16:a4:70:d4: 8c:66:3e:c8:08:44:56:8a:d5:bd:05:f4:ae:cc:36:c8:1e:04: 06:7c:a2:81:1c:71:7b:1e:00:31:14:ec:6b:d3:44:80:d1:70: ee:6e:ef:59:f8:41:3c:fa:0c:ee:4e:41:03:6b:78:8f:21:b2: e3:7a:58:23:f8:d0:37:80:19:90:0c:61:9d:95:2f:07:43:26: c0:d5:87:9f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUalu3F2gL1wrGB2nV/URWmU/tY5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTExMjYwMjUwMTJaFw0yNjExMjUwMjU1MTJaMDMxMTAvBgNV BAMTKDIwQUNFOEY2NTcwOTRDQzgyNDE2MEY4MDI1QkVBNjFFNkFBQTM3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZZyeK5F3SIJndufMiv4cntDW lXKBm65dsDZF2w61ij19mdjZBYbSGzLlPS7Gh4IbTvVCBdvqixGU3+oGwahMcMT5 4ur/JoFs2owilh8EeDReu55F6h6GnDjrnDBJQAZcPIsa/lnG1zM3iRm53GR3vGJO OBjgygX1HVZm6l/Mrm3KxKsxNpozr6oTX9u1Hf+gD8qbBZB+hKFHl24dD+gmzpok I1tma82kjdWIeQjhvL+vPBoXQ7L5eAQYXca67sY5+OL8uYJ20MbGSL5AAqb+FrEz VEnSwaRNZaAgjxw8IDkGdc+B/jOe0qeOFkDpJqgcgNkynThWy21mKosHhcbtAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUIKzo9lcJTMgkFg+AJb6mHmqqN3wwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzcyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM5MzMzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlAeMwDQYJKoZIhvcN AQELBQADggEBACyvwI9kNhjWd+yvmDnKjcD5BFqAOUf0o4QSo+e/oAx1xMdm4/w5 Bu8aV4PoQQ1GiC69h2miAxPPGgLZ1eHVfiJvL7VlCBbLTAMfFw1G02VxoKXvkYvS TAFVfwVc9/8Y1Je0yveGUKut5TyfD9w/9pkem+BifJv+Wq2Z9bBGMzl8k5RtRuel r4L50zKqpBtPLiIHzx68EmDsIzsoaqAgsNrBurI/5pJ0j79kD3PtElWnFqRw1Ixm PsgIRFaK1b0F9K7MNsgeBAZ8ooEccXseADEU7GvTRIDRcO5u71n4QTz6DO5OQQNr eI8hsuN6WCP40DeAGZAMYZ2VLwdDJsDVh58= -----END CERTIFICATE-----Generated at Fri Dec 5 05:17:33 2025 by rpki-client