This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203239383032.roa File: 33372e312e3232392e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: 6MVjgZ49/HrIxI9R5uZV0UhG3dBCQj3OFno/DPkfy+w= Subject key identifier: D4:8D:7F:2A:9C:55:CC:11:EE:37:D7:8F:91:E4:CC:32:F8:A2:25:CC Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2D7CEAFFF82ED38F881143E53457FC3519AA3969 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:42 +0000 ROA not before: Thu 29 Jan 2026 10:52:42 +0000 ROA not after: Thu 28 Jan 2027 10:57:42 +0000 asID: 29802 IP address blocks: 37.1.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 08:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7c:ea:ff:f8:2e:d3:8f:88:11:43:e5:34:57:fc:35:19:aa:39:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jan 29 10:52:42 2026 GMT Not After : Jan 28 10:57:42 2027 GMT Subject: CN=D48D7F2A9C55CC11EE37D78F91E4CC32F8A225CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:94:2c:ef:27:37:b5:66:13:45:4c:fa:e8: 90:64:a0:32:75:2a:3a:88:54:d1:85:95:0e:15:64: 46:20:b5:2b:b7:1a:6d:15:f0:d2:61:94:3b:3c:34: 7b:08:64:f3:16:39:5f:9d:66:21:9d:3c:01:7a:21: 12:32:06:cb:70:87:03:7d:af:52:c0:59:56:3e:b0: 53:94:43:99:db:95:0a:be:ef:a9:fe:28:5e:6c:4e: c6:04:8f:aa:de:95:9f:ec:b0:be:35:81:96:0c:80: a2:f4:c6:6d:fa:f7:25:dc:a0:81:16:2e:75:1a:d5: 47:07:f7:a2:79:2f:ce:43:1d:14:b4:8b:0c:22:fc: 04:77:6a:96:62:3b:a3:03:cd:26:6b:35:47:d1:be: 38:bd:e2:16:b7:e3:9b:14:3c:2e:43:b7:3d:72:d9: 12:ee:7a:79:f8:e6:fb:d2:64:04:c3:88:55:b3:8c: 8b:0b:9c:f0:28:36:05:ac:41:e8:aa:fa:45:2a:f8: bd:12:ff:9b:92:ab:30:e9:9b:46:78:40:f7:76:af: f5:ef:d0:5a:5b:6b:0e:0a:44:8b:82:fd:ad:88:ca: b2:90:27:72:eb:47:32:25:8c:8a:32:e2:02:12:4a: 9d:d4:a9:96:e4:c4:d7:c0:d5:70:c7:63:7f:25:cb: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:7F:2A:9C:55:CC:11:EE:37:D7:8F:91:E4:CC:32:F8:A2:25:CC X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.229.0/24 Signature Algorithm: sha256WithRSAEncryption 21:a7:d1:60:60:3c:3c:10:b3:79:bf:91:a1:56:b3:64:f1:cd: 10:15:d0:b5:08:6a:f1:68:bc:fd:04:b5:65:f6:d2:5f:80:bd: 3f:43:65:ba:24:c9:4a:3f:aa:62:e9:65:53:4d:07:ff:1c:b4: 17:51:72:80:35:74:4d:69:fd:5a:40:f9:31:34:20:18:20:4f: 05:11:40:6e:6e:04:0b:7d:b2:18:1a:b3:05:72:52:90:af:ec: 9b:c8:5d:67:3e:33:96:40:01:17:eb:5c:c4:b9:3a:d4:b1:68: 46:d8:19:28:b3:46:a4:f9:96:d6:42:a0:a9:a5:1c:67:ec:a6: 78:e6:b1:e1:5b:10:03:d4:67:5f:6a:df:46:e7:ab:94:ef:12: b2:48:48:f8:ee:73:33:c1:b0:bd:2a:53:c5:67:53:6e:a7:72: 34:12:69:64:20:9e:85:b7:88:ec:46:97:12:a9:1c:96:c8:d8: c5:ae:7b:ce:4f:c5:08:6a:f5:76:ca:fa:57:61:ca:34:5c:30: 78:67:51:b3:25:9f:81:df:d8:0a:b6:4f:85:04:47:d8:71:47: c2:62:29:75:17:d4:02:8b:7a:47:11:58:9d:0e:13:8e:c6:3c: 93:59:c9:be:4a:2d:33:7a:16:59:e9:92:b5:58:f3:33:0a:54: 16:a7:72:e6 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIULXzq//gu04+IEUPlNFf8NRmqOWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAxMjkxMDUyNDJaFw0yNzAxMjgxMDU3NDJaMDMxMTAvBgNV BAMTKEQ0OEQ3RjJBOUM1NUNDMTFFRTM3RDc4RjkxRTRDQzMyRjhBMjI1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxF5Qs7yc3tWYTRUz66JBkoDJ1 KjqIVNGFlQ4VZEYgtSu3Gm0V8NJhlDs8NHsIZPMWOV+dZiGdPAF6IRIyBstwhwN9 r1LAWVY+sFOUQ5nblQq+76n+KF5sTsYEj6relZ/ssL41gZYMgKL0xm369yXcoIEW LnUa1UcH96J5L85DHRS0iwwi/AR3apZiO6MDzSZrNUfRvji94ha345sUPC5Dtz1y 2RLuenn45vvSZATDiFWzjIsLnPAoNgWsQeiq+kUq+L0S/5uSqzDpm0Z4QPd2r/Xv 0Fpbaw4KRIuC/a2IyrKQJ3LrRzIljIoy4gISSp3UqZbkxNfA1XDHY38lywTvAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU1I1/KpxVzBHuN9ePkeTMMviiJcwwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzkyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHlMA0GCSqGSIb3DQEB CwUAA4IBAQAhp9FgYDw8ELN5v5GhVrNk8c0QFdC1CGrxaLz9BLVl9tJfgL0/Q2W6 JMlKP6pi6WVTTQf/HLQXUXKANXRNaf1aQPkxNCAYIE8FEUBubgQLfbIYGrMFclKQ r+ybyF1nPjOWQAEX61zEuTrUsWhG2Bkos0ak+ZbWQqCppRxn7KZ45rHhWxAD1Gdf at9G56uU7xKySEj47nMzwbC9KlPFZ1Nup3I0EmlkIJ6Ft4jsRpcSqRyWyNjFrnvO T8UIavV2yvpXYco0XDB4Z1GzJZ+B39gKtk+FBEfYcUfCYil1F9QCi3pHEVidDhOO xjyTWcm+Si0zehZZ6ZK1WPMzClQWp3Lm -----END CERTIFICATE-----Generated at Thu Jan 29 17:47:31 2026 by rpki-client