This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa File: 352e38332e3231392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: tK9O8yb7vau8SJxmbYWcCxofqBJR0fbAvSsGwOzgmug= Subject key identifier: 45:E7:A9:A5:F5:F5:3A:7E:4F:F2:7D:9E:CB:AA:26:69:C6:8D:D9:12 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 5F512DDB3AE2FA31F3DE10A938410C3F636450A8 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 00:07:19 +0000 ROA not before: Tue 09 Dec 2025 00:02:19 +0000 ROA not after: Tue 08 Dec 2026 00:07:19 +0000 asID: 834 IP address blocks: 5.83.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:51:2d:db:3a:e2:fa:31:f3:de:10:a9:38:41:0c:3f:63:64:50:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 9 00:02:19 2025 GMT Not After : Dec 8 00:07:19 2026 GMT Subject: CN=45E7A9A5F5F53A7E4FF27D9ECBAA2669C68DD912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:2a:0f:1a:14:74:91:e1:21:5e:51:c6:2b: 3e:52:87:da:47:13:bf:69:c9:4d:5e:bf:ea:25:d5: 0c:57:06:ee:50:f0:93:99:58:0e:d5:c2:68:38:8a: d8:62:40:1d:ae:7f:dd:3e:c6:67:9e:6e:8c:90:49: 74:4d:28:e0:f2:1f:15:1e:7d:9b:41:f0:f4:8d:6a: c8:ec:c2:f9:78:5e:94:22:f5:ae:49:a0:d4:45:47: 11:ea:6e:8d:0a:66:6d:4c:a6:a9:f6:04:71:4b:84: c3:e5:59:69:94:80:4d:53:62:dc:a1:9f:f9:8f:89: 38:10:04:1c:b9:eb:96:f5:79:5e:78:c6:63:2d:98: bb:10:5f:48:f1:79:e9:1a:ba:85:8a:6c:32:17:89: 52:41:ed:28:26:4c:5a:34:79:5d:bf:0e:86:b6:30: 96:10:0b:bc:cc:f9:bd:df:42:6a:90:df:4c:7b:77: 55:21:ba:b6:e0:5f:af:d8:f2:a0:e9:10:f1:85:c0: a0:89:27:d8:fd:ad:20:97:ea:54:f1:7f:b8:25:6a: 3d:dc:db:c7:f2:d0:fa:03:a1:a2:83:1a:e0:0f:37: bc:a1:6a:f1:f2:5f:89:fe:53:99:98:9d:c8:23:10: d5:20:8f:df:02:d0:cd:9e:a4:ca:a7:df:da:4d:72: dc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E7:A9:A5:F5:F5:3A:7E:4F:F2:7D:9E:CB:AA:26:69:C6:8D:D9:12 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.219.0/24 Signature Algorithm: sha256WithRSAEncryption 47:4e:a7:ee:13:54:d4:2b:d8:d3:fc:63:aa:14:51:4a:f2:6a: d2:da:e9:44:bd:3e:0e:bc:d5:be:54:c4:88:4c:2f:35:29:6a: cb:7d:7f:63:d9:37:aa:75:a6:62:ec:6f:74:51:60:c2:5c:9e: 48:1c:54:45:5d:39:16:22:35:b1:df:45:02:29:8a:58:c3:93: e4:62:46:aa:c2:02:48:a4:7a:e7:96:5a:06:ee:1c:cd:f0:d4: 60:a4:8c:b7:62:4f:bb:b9:4e:c8:a4:fe:48:a1:e0:25:7f:1c: 65:49:cc:f9:3b:aa:42:32:f3:a4:60:d0:e6:8e:1f:1a:58:a2: 26:a0:ec:fe:35:c7:03:4a:7e:d4:87:64:da:de:dc:99:7f:61: a2:e5:6f:c0:3d:9b:f2:a5:2c:99:7e:2b:28:1d:7e:a6:41:21: 61:49:60:1f:20:57:cb:74:71:cb:0a:85:64:db:da:1c:8c:3a: cd:26:f0:0c:86:ab:26:57:08:36:58:9b:34:d7:0d:72:b7:e3: 02:70:6a:fa:d1:a8:cf:42:ad:19:ce:27:7a:32:4c:1f:ea:13: 54:b2:3b:c9:a1:70:a1:61:5d:a9:d6:8c:b8:8c:99:67:63:59: 31:79:50:43:4d:a0:fc:ca:f5:2f:61:72:d1:21:56:7c:41:fe: be:90:df:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX1Et2zri+jHz3hCpOEEMP2NkUKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMDkwMDAyMTlaFw0yNjEyMDgwMDA3MTlaMDMxMTAvBgNV BAMTKDQ1RTdBOUE1RjVGNTNBN0U0RkYyN0Q5RUNCQUEyNjY5QzY4REQ5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DCoPGhR0keEhXlHGKz5Sh9pH E79pyU1ev+ol1QxXBu5Q8JOZWA7Vwmg4ithiQB2uf90+xmeeboyQSXRNKODyHxUe fZtB8PSNasjswvl4XpQi9a5JoNRFRxHqbo0KZm1Mpqn2BHFLhMPlWWmUgE1TYtyh n/mPiTgQBBy565b1eV54xmMtmLsQX0jxeekauoWKbDIXiVJB7SgmTFo0eV2/Doa2 MJYQC7zM+b3fQmqQ30x7d1UhurbgX6/Y8qDpEPGFwKCJJ9j9rSCX6lTxf7glaj3c 28fy0PoDoaKDGuAPN7yhavHyX4n+U5mYncgjENUgj98C0M2epMqn39pNctwTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUReeppfX1On5P8n2ey6omacaN2RIwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzOTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT2zANBgkqhkiG9w0BAQsFAAOC AQEAR06n7hNU1CvY0/xjqhRRSvJq0trpRL0+DrzVvlTEiEwvNSlqy31/Y9k3qnWm YuxvdFFgwlyeSBxURV05FiI1sd9FAimKWMOT5GJGqsICSKR655ZaBu4czfDUYKSM t2JPu7lOyKT+SKHgJX8cZUnM+TuqQjLzpGDQ5o4fGliiJqDs/jXHA0p+1Idk2t7c mX9houVvwD2b8qUsmX4rKB1+pkEhYUlgHyBXy3RxywqFZNvaHIw6zSbwDIarJlcI NlibNNcNcrfjAnBq+tGoz0KtGc4nejJMH+oTVLI7yaFwoWFdqdaMuIyZZ2NZMXlQ Q02g/Mr1L2Fy0SFWfEH+vpDf9Q== -----END CERTIFICATE-----Generated at Mon Dec 15 23:30:24 2025 by rpki-client