This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203136353039.roa File: 352e38332e3230392e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: uCjkqOGJKeKGWQAvwEsoaowt6SFXDsmlvzAMR+X8meM= Subject key identifier: 3D:2E:4A:42:ED:E4:AF:CC:D4:3B:10:5B:D4:77:60:EE:64:FF:5F:65 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 0FDCAA6FBFF56559887F4B80A9D16DD90549B7A0 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203136353039.roa Signing time: Wed 31 Dec 2025 08:06:07 +0000 ROA not before: Wed 31 Dec 2025 08:01:07 +0000 ROA not after: Wed 30 Dec 2026 08:06:07 +0000 asID: 16509 IP address blocks: 5.83.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dc:aa:6f:bf:f5:65:59:88:7f:4b:80:a9:d1:6d:d9:05:49:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 31 08:01:07 2025 GMT Not After : Dec 30 08:06:07 2026 GMT Subject: CN=3D2E4A42EDE4AFCCD43B105BD47760EE64FF5F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:66:28:3e:9c:6c:9b:ef:d1:22:3d:56:82: 50:d6:8b:4c:25:56:1b:1a:3d:10:9a:06:de:33:00: fb:3c:f9:4d:6d:1b:9e:5f:e8:52:9a:71:fa:90:7a: 16:df:d9:de:e9:ee:ad:87:4e:a2:d4:45:f4:ad:53: 08:30:4a:9c:ea:a2:37:54:6e:67:79:14:fd:11:bb: b3:c2:b0:36:4e:bf:7b:fa:62:19:ac:ad:cf:d6:fa: ac:0d:ee:79:1c:db:db:e8:13:64:23:a7:4f:32:07: d5:70:e0:76:ab:87:c1:63:44:f4:ca:fb:f2:cc:ba: 54:a4:7d:68:de:13:76:be:7c:98:93:ba:80:e9:ea: d2:33:68:dd:93:dc:a6:a1:4e:11:64:c0:d4:cf:a4: 28:bd:5d:d4:76:03:3b:85:bb:39:90:6c:42:d8:3a: 83:7e:f2:b7:e5:a0:d7:52:9d:93:be:72:8f:e1:3b: 7e:20:d3:d8:7d:9e:c9:de:be:04:7a:48:44:d7:b0: f8:af:7b:b1:ec:b6:df:6f:f2:75:b0:b5:d4:64:e2: 92:00:14:dd:5c:f6:2a:8f:db:3c:0c:99:65:3c:5d: 6b:dc:94:83:d4:33:83:16:67:b5:5e:1a:ce:54:9c: 1b:0f:86:61:62:38:ad:06:c3:78:4d:a0:64:11:cd: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:4A:42:ED:E4:AF:CC:D4:3B:10:5B:D4:77:60:EE:64:FF:5F:65 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.209.0/24 Signature Algorithm: sha256WithRSAEncryption 38:0b:57:14:84:bf:a3:9e:35:5b:29:b2:aa:6f:56:6f:39:fc: 82:64:2a:c2:30:03:96:97:43:58:61:72:f1:b3:a8:0f:bb:0f: 15:d9:67:c3:f5:40:20:50:49:d1:d4:67:9c:51:23:14:b6:81: 23:86:dd:ea:31:77:a6:9e:61:dd:b6:5a:51:ad:ee:ee:e1:65: c4:11:d4:63:66:71:28:2b:ee:84:78:2d:b2:14:c8:e2:84:06: 52:f3:05:04:9b:29:e1:c5:c0:c9:dc:94:ae:31:58:f4:cb:4b: 1e:23:cf:74:64:70:23:d1:46:79:cb:fd:33:aa:d9:00:0b:68: 14:4c:aa:cd:b1:3a:88:09:66:ef:41:51:54:27:31:bc:be:d0: df:34:4c:96:75:42:b9:33:ad:5c:99:26:33:c8:f3:e0:57:b4: 0a:fb:b2:d9:f6:51:8f:17:aa:b4:7f:4d:a5:b2:21:dc:53:7f: 74:1b:ba:5a:35:92:0f:29:73:49:97:a6:ff:6f:e8:1e:3d:c4: 3c:b5:0c:f7:a1:4a:a4:d6:98:e1:aa:3c:b8:e0:95:4a:55:c0: a1:70:1e:b8:70:bb:cf:4d:fa:a5:ad:96:dc:c2:dc:01:08:50: 8c:60:ce:2e:54:12:b6:e7:d6:52:95:e3:4e:d5:d3:de:98:01: 36:0e:20:9f -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUD9yqb7/1ZVmIf0uAqdFt2QVJt6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMzEwODAxMDdaFw0yNjEyMzAwODA2MDdaMDMxMTAvBgNV BAMTKDNEMkU0QTQyRURFNEFGQ0NENDNCMTA1QkQ0Nzc2MEVFNjRGRjVGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYGYoPpxsm+/RIj1WglDWi0wl VhsaPRCaBt4zAPs8+U1tG55f6FKacfqQehbf2d7p7q2HTqLURfStUwgwSpzqojdU bmd5FP0Ru7PCsDZOv3v6Yhmsrc/W+qwN7nkc29voE2Qjp08yB9Vw4Harh8FjRPTK +/LMulSkfWjeE3a+fJiTuoDp6tIzaN2T3KahThFkwNTPpCi9XdR2AzuFuzmQbELY OoN+8rfloNdSnZO+co/hO34g09h9nsnevgR6SETXsPive7Hstt9v8nWwtdRk4pIA FN1c9iqP2zwMmWU8XWvclIPUM4MWZ7VeGs5UnBsPhmFiOK0Gw3hNoGQRzbI1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUPS5KQu3kr8zUOxBb1Hdg7mT/X2UwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMwMzkyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPRMA0GCSqGSIb3DQEB CwUAA4IBAQA4C1cUhL+jnjVbKbKqb1ZvOfyCZCrCMAOWl0NYYXLxs6gPuw8V2WfD 9UAgUEnR1GecUSMUtoEjht3qMXemnmHdtlpRre7u4WXEEdRjZnEoK+6EeC2yFMji hAZS8wUEmynhxcDJ3JSuMVj0y0seI890ZHAj0UZ5y/0zqtkAC2gUTKrNsTqICWbv QVFUJzG8vtDfNEyWdUK5M61cmSYzyPPgV7QK+7LZ9lGPF6q0f02lsiHcU390G7pa NZIPKXNJl6b/b+gePcQ8tQz3oUqk1pjhqjy44JVKVcChcB64cLvPTfqlrZbcwtwB CFCMYM4uVBK259ZSleNO1dPemAE2DiCf -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:17 2026 by rpki-client