This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa File: 352e38332e3231362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: k3bUXyWeKe8GESVtphCuoGuTBMAJy66K1D7bZul2DPc= Subject key identifier: 96:CD:F5:F1:C4:CE:2F:94:42:CE:7D:27:79:56:3F:FC:3C:15:2D:C3 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 7EF988D4E8B5D8967D28A517EB1D1520BE12E4BB Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 00:07:19 +0000 ROA not before: Tue 09 Dec 2025 00:02:19 +0000 ROA not after: Tue 08 Dec 2026 00:07:19 +0000 asID: 834 IP address blocks: 5.83.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f9:88:d4:e8:b5:d8:96:7d:28:a5:17:eb:1d:15:20:be:12:e4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 9 00:02:19 2025 GMT Not After : Dec 8 00:07:19 2026 GMT Subject: CN=96CDF5F1C4CE2F9442CE7D2779563FFC3C152DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:43:19:2f:f9:55:c4:17:eb:87:89:11:2e: 2c:c0:2e:92:d5:0f:c7:4e:9b:10:5a:e5:de:b7:81: ce:ca:60:e9:bc:3e:37:fd:12:58:af:08:56:af:01: 85:3d:61:23:06:42:4f:77:dc:07:79:4c:cd:8b:d4: 38:46:b9:72:d3:87:ef:97:32:d4:f0:cd:c8:0e:9e: 82:d4:13:3f:74:07:80:6d:37:7b:f9:66:c4:e8:0b: 15:63:95:eb:eb:05:13:9f:22:e6:9d:32:f5:8c:3b: 90:36:2c:6d:17:47:82:80:b4:01:54:ab:f0:3c:70: fe:60:5c:b8:c5:45:2a:d5:29:5d:9b:06:ae:5a:26: 9d:d2:14:28:cf:06:39:f1:8c:46:91:fa:bb:8b:95: 1c:45:3c:31:06:e2:d8:4c:08:7a:74:45:0e:2d:c4: 8d:5a:be:2f:df:a2:9f:fb:99:da:08:d8:af:d8:4a: e4:fd:1b:15:dc:a6:5d:84:c9:bc:1b:9b:a4:c0:ab: c5:ee:5b:67:75:25:50:d9:31:f9:07:8a:20:6c:f7: 0e:8e:7c:b5:99:81:e2:01:9f:8b:f2:03:12:36:2c: a6:9d:5e:9d:1e:b9:f2:ac:8f:75:98:27:7f:0b:65: 75:70:ff:0c:60:9b:d6:06:07:68:01:4f:fa:df:67: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CD:F5:F1:C4:CE:2F:94:42:CE:7D:27:79:56:3F:FC:3C:15:2D:C3 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.216.0/23 Signature Algorithm: sha256WithRSAEncryption 31:a2:29:26:4f:cb:1d:7e:48:b9:21:ec:d0:7b:a7:c0:23:b0: 49:8d:6e:9d:22:97:5c:1e:5e:00:3a:96:0c:c6:cf:dd:65:cd: f9:40:40:97:d5:7a:e9:5a:e7:b5:c1:08:cb:7f:ff:f7:68:2a: 31:a5:ff:a6:ab:b4:12:1b:93:b1:1c:6d:83:d7:ff:87:30:17: c9:b7:fc:c9:87:08:fb:9c:10:b2:08:f1:0e:42:b1:9e:c8:07: 4c:19:93:3b:f3:14:47:75:e6:64:7a:16:6f:fe:ab:b4:f3:12: 60:7f:b8:b3:9b:78:1c:0a:7c:ec:a1:b8:93:6f:ef:65:14:55: 11:98:66:98:f9:66:cd:b9:53:81:f5:aa:1e:a0:b8:1d:14:a7: 49:84:b8:a9:f0:c9:87:cc:94:ac:11:a9:7f:22:42:18:f0:d3: f0:13:56:56:34:9d:fb:9f:e4:b9:85:f0:a9:c9:30:63:25:95: 0e:66:18:11:3b:12:40:6d:41:b3:6c:c0:42:29:6a:58:b8:5a: cd:66:36:cb:2d:c6:c3:ec:73:40:14:85:47:29:dd:4d:34:b7: 6b:11:63:ee:0c:82:4b:ef:90:dd:a0:00:3d:f3:3a:db:41:78: 6a:fb:23:79:cc:72:d8:78:ce:8a:a2:6f:19:05:aa:21:49:4d: f9:8b:cb:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfvmI1Oi12JZ9KKUX6x0VIL4S5LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMDkwMDAyMTlaFw0yNjEyMDgwMDA3MTlaMDMxMTAvBgNV BAMTKDk2Q0RGNUYxQzRDRTJGOTQ0MkNFN0QyNzc5NTYzRkZDM0MxNTJEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwEMZL/lVxBfrh4kRLizALpLV D8dOmxBa5d63gc7KYOm8Pjf9ElivCFavAYU9YSMGQk933Ad5TM2L1DhGuXLTh++X MtTwzcgOnoLUEz90B4BtN3v5ZsToCxVjlevrBROfIuadMvWMO5A2LG0XR4KAtAFU q/A8cP5gXLjFRSrVKV2bBq5aJp3SFCjPBjnxjEaR+ruLlRxFPDEG4thMCHp0RQ4t xI1avi/fop/7mdoI2K/YSuT9GxXcpl2Eybwbm6TAq8XuW2d1JVDZMfkHiiBs9w6O fLWZgeIBn4vyAxI2LKadXp0eufKsj3WYJ38LZXVw/wxgm9YGB2gBT/rfZ23bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUls318cTOL5RCzn0neVY//DwVLcMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNjJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQVT2DANBgkqhkiG9w0BAQsFAAOC AQEAMaIpJk/LHX5IuSHs0HunwCOwSY1unSKXXB5eADqWDMbP3WXN+UBAl9V66Vrn tcEIy3//92gqMaX/pqu0EhuTsRxtg9f/hzAXybf8yYcI+5wQsgjxDkKxnsgHTBmT O/MUR3XmZHoWb/6rtPMSYH+4s5t4HAp87KG4k2/vZRRVEZhmmPlmzblTgfWqHqC4 HRSnSYS4qfDJh8yUrBGpfyJCGPDT8BNWVjSd+5/kuYXwqckwYyWVDmYYETsSQG1B s2zAQilqWLhazWY2yy3Gw+xzQBSFRyndTTS3axFj7gyCS++Q3aAAPfM620F4avsj ecxy2HjOiqJvGQWqIUlN+YvLew== -----END CERTIFICATE-----Generated at Mon Dec 15 23:30:21 2025 by rpki-client