This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20323134303235.roa File: 352e38332e3231322e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 6JPoQnw6Og18Rvd1XuSdK4N3TP9h318zDbjiz+eXyoQ= Subject key identifier: 1A:51:A1:7E:F5:70:6A:72:BE:A3:D2:08:9C:31:29:59:A6:E8:C8:24 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 44AEF276A3782F097C537E3711BE3B4B1E40DDFD Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20323134303235.roa Signing time: Mon 05 Jan 2026 09:11:53 +0000 ROA not before: Mon 05 Jan 2026 09:06:53 +0000 ROA not after: Mon 04 Jan 2027 09:11:53 +0000 asID: 214025 IP address blocks: 5.83.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 17:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ae:f2:76:a3:78:2f:09:7c:53:7e:37:11:be:3b:4b:1e:40:dd:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jan 5 09:06:53 2026 GMT Not After : Jan 4 09:11:53 2027 GMT Subject: CN=1A51A17EF5706A72BEA3D2089C312959A6E8C824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:60:41:aa:8c:29:3a:5d:3f:8e:cb:7f:1f: ca:2d:69:3d:bf:8a:28:6a:1b:34:b2:4c:15:76:e8: 3f:f9:24:c0:e9:6c:82:45:0a:47:ca:cc:45:6e:7e: 83:cb:3e:28:bc:4a:54:05:f4:a5:8f:f3:77:b9:ec: d0:07:17:8a:08:93:88:08:b5:ee:b7:b3:8b:af:4b: f4:b3:cf:dd:08:1e:0c:5d:8c:44:2d:8e:92:e5:f6: a1:78:d8:9a:85:9e:e5:87:b3:c3:84:36:5b:39:d5: 4f:b1:8f:7d:77:51:c0:21:2d:b9:91:13:a2:fb:ad: 74:83:08:c1:c6:a4:18:7b:b6:d9:03:1b:de:6c:1b: 43:e8:d9:1f:64:d1:53:ac:54:20:d5:d3:36:76:77: 6c:4f:4a:0a:d2:0d:f8:cc:ea:18:80:2e:e7:20:cf: 8d:a3:59:72:46:24:ed:af:32:e7:9b:45:0a:ca:49: 61:e2:e6:2d:08:97:b6:5f:3c:58:ca:db:ad:2c:33: 5f:29:00:aa:a1:f2:42:dd:4c:f6:48:9b:2a:55:9a: aa:12:c1:8f:df:ec:e6:95:73:dc:62:59:85:94:87: f7:6d:d9:78:55:b9:20:da:60:07:17:01:be:f9:fc: 9d:c8:36:f5:e6:8c:1f:a2:3c:a0:6e:b2:2c:8b:7a: 0f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:A1:7E:F5:70:6A:72:BE:A3:D2:08:9C:31:29:59:A6:E8:C8:24 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.212.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f0:63:ad:af:3e:04:9d:82:6c:80:3f:08:53:e9:1d:cf:92: e6:b0:dc:31:1d:2d:5c:03:7f:ec:65:76:41:87:01:af:7f:cb: 1e:34:b7:66:4a:c4:24:09:e8:bc:22:3d:09:a3:57:8b:5a:91: e3:9e:61:a8:d5:8b:d1:e9:b1:41:88:9f:10:c4:77:14:45:c0: c8:e1:0d:74:f8:8a:f1:17:b7:2e:cd:14:fb:6d:4d:18:3c:f6: c7:00:80:ee:31:10:a7:4b:4a:16:74:f0:63:a3:aa:d7:1f:8c: df:d7:ee:9e:20:7d:ef:13:6a:ae:f0:e6:57:c5:b5:7a:36:f9: 62:8a:55:68:e0:50:f6:c5:61:c5:4d:22:dd:81:f2:de:44:5a: 12:4e:a6:56:c6:1e:85:1b:63:6c:42:ec:c3:e8:31:cf:bc:d6: a0:30:84:0f:ce:36:61:20:49:e7:66:c3:64:4a:fb:64:61:5b: d0:c5:c7:30:66:d2:45:af:6f:03:a1:11:50:db:0c:8d:fc:d1: c4:de:16:a0:d9:84:53:63:08:e8:54:94:3a:2e:d1:cd:68:5a: 4b:36:4a:c0:07:b4:fc:44:cb:02:6d:6f:93:34:d9:74:2c:a2: e7:57:63:dd:ef:89:60:7a:c0:ab:40:af:dd:b2:d4:3b:46:fd: 40:39:e3:03 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIURK7ydqN4Lwl8U343Eb47Sx5A3f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAxMDUwOTA2NTNaFw0yNzAxMDQwOTExNTNaMDMxMTAvBgNV BAMTKDFBNTFBMTdFRjU3MDZBNzJCRUEzRDIwODlDMzEyOTU5QTZFOEM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC352BBqowpOl0/jst/H8otaT2/ iihqGzSyTBV26D/5JMDpbIJFCkfKzEVufoPLPii8SlQF9KWP83e57NAHF4oIk4gI te63s4uvS/Szz90IHgxdjEQtjpLl9qF42JqFnuWHs8OENls51U+xj313UcAhLbmR E6L7rXSDCMHGpBh7ttkDG95sG0Po2R9k0VOsVCDV0zZ2d2xPSgrSDfjM6hiALucg z42jWXJGJO2vMuebRQrKSWHi5i0Il7ZfPFjK260sM18pAKqh8kLdTPZImypVmqoS wY/f7OaVc9xiWYWUh/dt2XhVuSDaYAcXAb75/J3INvXmjB+iPKBusiyLeg/pAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUGlGhfvVwanK+o9IInDEpWaboyCQwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzIyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9QwDQYJKoZIhvcN AQELBQADggEBACLwY62vPgSdgmyAPwhT6R3Pkuaw3DEdLVwDf+xldkGHAa9/yx40 t2ZKxCQJ6LwiPQmjV4takeOeYajVi9HpsUGInxDEdxRFwMjhDXT4ivEXty7NFPtt TRg89scAgO4xEKdLShZ08GOjqtcfjN/X7p4gfe8Taq7w5lfFtXo2+WKKVWjgUPbF YcVNIt2B8t5EWhJOplbGHoUbY2xC7MPoMc+81qAwhA/ONmEgSedmw2RK+2RhW9DF xzBm0kWvbwOhEVDbDI380cTeFqDZhFNjCOhUlDou0c1oWks2SsAHtPxEywJtb5M0 2XQsoudXY93viWB6wKtAr92y1DtG/UA54wM= -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:29 2026 by rpki-client