This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35332e302f32342d3234203d3e20383334.roa
File: 33372e3233302e35332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LJjDLfCs5wTTRbnfZky63zUmlz4I1ikN4AWyH20u4rU=
Subject key identifier: DE:F8:11:07:54:39:C8:97:8D:79:19:1B:AA:2A:5B:BF:71:3D:9C:EE
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 72A57C5A216A802B49C74059964157A5EF906852
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35332e302f32342d3234203d3e20383334.roa
Signing time: Mon 15 Dec 2025 00:07:29 +0000
ROA not before: Mon 15 Dec 2025 00:02:29 +0000
ROA not after: Mon 14 Dec 2026 00:07:29 +0000
asID: 834
IP address blocks: 37.230.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 10:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a5:7c:5a:21:6a:80:2b:49:c7:40:59:96:41:57:a5:ef:90:68:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Dec 15 00:02:29 2025 GMT
Not After : Dec 14 00:07:29 2026 GMT
Subject: CN=DEF811075439C8978D79191BAA2A5BBF713D9CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:a7:76:15:42:0e:06:dd:ef:da:c2:68:c5:
57:0f:2d:6a:9b:d8:f1:4e:9a:c8:7e:a0:61:da:36:
95:23:42:42:8b:66:17:43:64:43:1a:1e:d3:78:0f:
04:c9:1e:b1:ee:66:11:b3:f3:8c:e9:a9:4c:d9:53:
e3:7c:0f:b2:05:e7:fd:35:d2:fc:19:74:6e:c8:17:
4c:b4:31:c6:80:d2:d8:e1:76:f6:32:46:13:e1:4e:
61:6e:7b:7e:21:9f:e6:82:a2:b8:3b:48:2f:39:69:
4e:d1:a1:59:93:ed:41:50:6e:c2:d7:b2:6d:00:bc:
5a:0e:bf:23:f6:71:ac:b6:9e:2d:0a:f5:bc:d4:09:
e1:92:a8:6b:2f:4b:98:4a:c8:74:44:d4:73:ae:c2:
0c:36:85:9b:71:92:fa:38:87:26:b6:ea:01:14:72:
79:18:f2:2c:56:27:d6:93:bf:f7:f0:eb:dc:81:d6:
21:56:8f:d9:d1:05:cb:6b:86:0c:e1:a9:eb:21:20:
e4:19:be:69:0e:cb:58:14:d0:76:49:a4:61:9a:76:
e4:65:23:39:de:e9:ce:12:fe:8d:1c:94:44:20:bf:
e5:1c:01:c1:7a:4f:e7:2f:45:21:1a:65:2f:ca:d6:
18:ed:ac:22:12:8a:e5:e8:6a:1a:be:e9:6b:20:a2:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:11:07:54:39:C8:97:8D:79:19:1B:AA:2A:5B:BF:71:3D:9C:EE
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
71:71:d5:59:1a:2a:d3:aa:f1:5b:4d:1f:83:ca:c4:ab:e9:6f:
b0:f1:d4:98:cd:4b:11:d2:7d:47:6a:d4:ae:4d:ad:ab:44:a1:
9e:15:54:40:15:fa:69:07:bf:81:68:f8:0c:af:77:17:5e:2e:
91:a3:55:5f:41:fb:87:cd:1d:89:d1:7f:b8:67:98:3a:8f:c0:
84:42:0c:cb:a9:b1:51:0d:ac:20:58:86:c7:bc:de:30:b2:59:
f4:ad:1f:b3:f5:60:25:53:6e:87:eb:b9:5e:12:c1:ff:54:71:
98:1f:25:ae:95:8a:9c:49:89:e9:0d:3b:d5:72:79:f4:48:43:
60:b8:2a:b6:23:bc:1e:ec:2e:47:ad:7a:1d:8d:ca:f7:d6:d7:
73:d5:0a:de:ad:c3:4d:be:0f:76:cb:92:47:c1:f9:92:23:58:
6f:92:20:fb:99:d8:01:29:b7:d6:a5:14:38:ce:72:10:a4:03:
30:14:7c:02:35:d2:23:43:e7:1c:94:5e:ad:45:8a:97:9c:9b:
b3:64:ba:a6:ed:6f:07:a5:31:56:40:35:70:b6:ca:31:71:c7:
1e:7e:5c:91:90:07:8d:d2:74:43:8e:30:fa:87:54:e3:c1:f5:
3f:fa:c9:86:cc:e2:56:e6:e8:cd:37:90:38:f5:14:0f:c6:ac:
11:de:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:32:03 2025 by rpki-client