This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20383334.roa File: 352e38332e3230392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: ixLNCXwEj9QjwdwRG7URJyTxBG8DOnpf0grpDiWwU+4= Subject key identifier: 52:2A:20:46:3F:38:92:AA:6F:83:F8:56:4E:A4:76:43:11:C1:7A:38 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 207BB268435D4E1DBBB64706427ED6DBC7A6D88C Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20383334.roa Signing time: Fri 26 Dec 2025 00:02:27 +0000 ROA not before: Thu 25 Dec 2025 23:57:27 +0000 ROA not after: Fri 25 Dec 2026 00:02:27 +0000 asID: 834 IP address blocks: 5.83.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7b:b2:68:43:5d:4e:1d:bb:b6:47:06:42:7e:d6:db:c7:a6:d8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 25 23:57:27 2025 GMT Not After : Dec 25 00:02:27 2026 GMT Subject: CN=522A20463F3892AA6F83F8564EA4764311C17A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6c:b9:cd:ae:06:5d:dc:2c:ef:e0:a4:78:b3: dc:52:ab:00:ea:ae:53:86:58:04:ec:a6:33:3b:0f: 24:52:c9:f4:27:5f:1e:20:1a:80:aa:63:13:7b:20: 48:5d:6b:95:d2:b1:3d:fb:b6:aa:34:20:7b:aa:6e: 81:b9:48:78:54:3e:53:f8:6f:78:68:71:8a:dc:4d: f7:1f:c7:22:e4:18:93:d8:f3:c0:aa:c1:19:01:3c: 56:4f:2e:e3:83:1e:1f:f4:13:a2:99:6f:79:06:ef: cc:a0:75:fc:57:75:e2:64:2c:08:36:a3:c4:ab:16: 1f:76:33:7f:2f:60:a5:4f:5a:29:7d:cf:d1:b6:85: fe:4d:9d:64:13:9d:f7:d3:50:ca:c1:9f:99:39:fd: 94:c2:0e:fb:9c:94:ab:79:af:db:20:6e:98:32:6a: 72:6d:0f:55:c3:59:8e:42:ba:b0:06:e1:ea:05:c9: 51:45:59:71:94:3a:9b:41:42:f8:4b:7c:1e:e2:d1: ad:2f:67:c2:80:00:1b:5b:ef:dd:ed:db:b7:30:f6: 33:c0:7d:89:b1:28:7f:72:5b:71:9e:ca:2a:50:d9: 0a:f9:03:ae:00:78:81:09:5f:ac:14:44:8d:9c:b2: 23:f2:da:15:8a:f8:c0:f1:b9:cd:4b:82:f7:16:42: 3b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:20:46:3F:38:92:AA:6F:83:F8:56:4E:A4:76:43:11:C1:7A:38 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.209.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:cd:3f:da:57:0b:b0:ec:12:02:73:74:4a:07:93:22:60:07: f7:e2:22:76:ed:53:1f:10:e2:19:a8:7f:a4:23:ae:e1:5c:37: 70:f9:65:9f:50:15:1e:ff:c2:80:2e:9f:42:2a:02:a4:05:1a: 64:9a:12:f9:b0:6b:c2:d1:dd:ec:ec:92:6d:bc:23:30:a4:db: 2e:be:7c:72:e3:29:5d:a8:c5:80:31:73:cc:46:b2:6d:d4:b1: 72:fc:90:91:72:2c:d3:af:15:89:17:7c:59:2f:3e:c1:af:81: 97:61:ef:8d:e9:1a:88:45:cb:5c:42:d6:54:9b:76:dc:95:29: 29:56:5b:f6:37:7d:88:57:fb:da:5d:a2:75:2a:b3:42:f1:36: 2c:cb:17:ee:e2:33:57:4d:fb:68:d1:fa:ad:ac:c0:e5:12:bf: 70:e7:68:04:d0:ba:14:92:8e:8d:63:39:e4:90:0f:6b:bc:ca: 97:0c:55:1e:c0:ed:1e:da:0f:a5:1a:57:c9:eb:80:7f:77:4f: 7e:ca:49:c1:cb:ef:57:da:b6:d1:c0:5b:fa:a4:1d:f5:43:ee: c0:eb:fe:df:c2:00:ab:68:b9:dc:89:6d:3d:8c:cd:26:d5:4b: e6:95:80:94:69:aa:64:36:d8:91:c1:f3:a9:36:b0:51:32:1a: 3f:dc:7d:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIHuyaENdTh27tkcGQn7W28em2IwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMjUyMzU3MjdaFw0yNjEyMjUwMDAyMjdaMDMxMTAvBgNV BAMTKDUyMkEyMDQ2M0YzODkyQUE2RjgzRjg1NjRFQTQ3NjQzMTFDMTdBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNbLnNrgZd3Czv4KR4s9xSqwDq rlOGWATspjM7DyRSyfQnXx4gGoCqYxN7IEhda5XSsT37tqo0IHuqboG5SHhUPlP4 b3hocYrcTfcfxyLkGJPY88CqwRkBPFZPLuODHh/0E6KZb3kG78ygdfxXdeJkLAg2 o8SrFh92M38vYKVPWil9z9G2hf5NnWQTnffTUMrBn5k5/ZTCDvuclKt5r9sgbpgy anJtD1XDWY5CurAG4eoFyVFFWXGUOptBQvhLfB7i0a0vZ8KAABtb793t27cw9jPA fYmxKH9yW3GeyipQ2Qr5A64AeIEJX6wURI2csiPy2hWK+MDxuc1LgvcWQjvjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUiogRj84kqpvg/hWTqR2QxHBejgwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzAzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT0TANBgkqhkiG9w0BAQsFAAOC AQEAbM0/2lcLsOwSAnN0SgeTImAH9+Iidu1THxDiGah/pCOu4Vw3cPlln1AVHv/C gC6fQioCpAUaZJoS+bBrwtHd7OySbbwjMKTbLr58cuMpXajFgDFzzEaybdSxcvyQ kXIs068ViRd8WS8+wa+Bl2HvjekaiEXLXELWVJt23JUpKVZb9jd9iFf72l2idSqz QvE2LMsX7uIzV037aNH6razA5RK/cOdoBNC6FJKOjWM55JAPa7zKlwxVHsDtHtoP pRpXyeuAf3dPfspJwcvvV9q20cBb+qQd9UPuwOv+38IAq2i53IltPYzNJtVL5pWA lGmqZDbYkcHzqTawUTIaP9x98w== -----END CERTIFICATE-----Generated at Tue Dec 30 21:13:17 2025 by rpki-client