This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
File: 3136392e34302e3135332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: ZVDD93hbvT235zgtCokKXiBmUZ7PWn5hVVpaTM4BXRI=
Subject key identifier: CA:4A:43:AF:28:35:FC:9D:15:51:48:E9:42:9A:8C:52:FA:87:4F:D0
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 6FCC2624D65533B67D599B01A6B3523C3C38C895
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
Signing time: Thu 11 Dec 2025 13:14:06 +0000
ROA not before: Thu 11 Dec 2025 13:09:06 +0000
ROA not after: Thu 10 Dec 2026 13:14:06 +0000
asID: 9304
IP address blocks: 169.40.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cc:26:24:d6:55:33:b6:7d:59:9b:01:a6:b3:52:3c:3c:38:c8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Dec 11 13:09:06 2025 GMT
Not After : Dec 10 13:14:06 2026 GMT
Subject: CN=CA4A43AF2835FC9D155148E9429A8C52FA874FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:2d:f6:e3:8c:9b:4b:66:46:e5:d7:01:c8:
7a:c9:60:d6:64:f8:94:82:f4:a6:f5:6e:1a:f6:26:
c5:ac:92:06:b5:d3:59:78:f9:0d:da:b2:c0:4b:aa:
41:e6:8d:da:0c:a5:3f:6e:6d:66:aa:70:f7:23:7d:
60:2f:06:0d:15:ad:e0:06:4a:78:47:b0:87:aa:c0:
cd:a6:bd:4f:1b:b1:f7:0a:4e:2d:62:08:db:b5:eb:
3e:dd:12:f3:36:fc:38:df:4f:c7:2c:e5:d0:2d:1c:
cd:79:9d:00:01:27:21:15:13:79:b3:55:0d:d1:52:
ec:76:0b:89:a3:0e:ff:19:e6:6b:5c:b6:85:e0:ea:
24:f1:04:cc:ce:40:94:c5:3d:b4:3b:8b:1b:f4:65:
25:85:38:10:a8:a1:f9:e8:5d:da:f3:fc:df:f4:08:
71:fd:65:61:7b:fd:84:cf:2e:93:c0:84:67:45:1a:
c3:7e:fa:a1:52:a4:06:0c:37:64:1d:c3:65:b1:90:
db:fb:fb:19:f9:7a:d6:a9:2c:ae:35:75:d5:c8:ee:
6b:9f:6e:07:94:15:0c:c1:d0:b4:95:af:96:92:88:
7f:0e:b5:0f:fb:52:cc:98:71:15:20:d7:45:a1:bf:
89:48:32:dc:aa:f2:8c:0c:82:4d:b8:8b:9c:60:bf:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:43:AF:28:35:FC:9D:15:51:48:E9:42:9A:8C:52:FA:87:4F:D0
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.153.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f6:cf:88:b2:dd:ff:28:82:98:d3:c3:da:97:62:d4:6d:a5:
86:b2:2a:43:d6:6e:e9:95:f5:4c:a5:fe:17:41:26:97:b3:a4:
dd:77:64:ec:af:f4:e0:fb:1f:be:87:ed:4e:b1:38:e4:dd:91:
9d:19:d5:96:c6:2d:5b:4a:59:76:4a:ae:88:5f:9c:d7:ec:86:
94:05:29:c7:60:2f:a0:2b:c4:c3:11:66:c1:21:18:1c:68:c3:
3f:b3:af:3b:c4:ca:b4:a1:6a:9b:ce:02:6b:45:5d:32:8f:32:
b8:e9:cb:5d:d4:a4:8c:10:79:4c:7b:04:79:c6:7a:72:e8:12:
b5:5f:c0:5d:74:0c:4c:88:f4:e5:69:82:3d:05:8c:d0:96:f8:
e0:6b:e8:3c:87:18:2f:4b:a2:97:c4:cd:c8:a3:8e:f8:8e:45:
31:e0:9e:b2:de:ba:03:b5:3e:32:4a:5c:b2:0c:ca:27:f9:8e:
15:31:97:3b:77:1a:c5:93:30:c9:d4:bc:ad:ae:c0:8d:03:cb:
08:5a:e9:26:2a:84:3c:01:c7:56:5e:34:ff:95:20:0b:93:14:
82:d6:8b:6d:65:5a:f8:b7:09:77:cc:b1:53:ee:a8:9a:d9:37:
16:fd:c0:ed:7a:f3:c8:8c:8d:6b:96:f7:63:25:3f:cc:7e:20:
a0:eb:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:34:49 2025 by rpki-client