This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa File: 3136392e34302e3135342e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: RSqypWAX+IfWsiwDzBY+PZMYP59WmakMIBpD2VdNXzc= Subject key identifier: 6D:6A:AC:D1:C9:2F:CF:89:E1:4F:BB:CA:65:9E:FF:02:16:EB:E7:52 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 521DDA6D9FAB2796A6BBCF8DE8C1BCD1855145AB Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa Signing time: Wed 10 Dec 2025 08:00:18 +0000 ROA not before: Wed 10 Dec 2025 07:55:18 +0000 ROA not after: Wed 09 Dec 2026 08:00:18 +0000 asID: 9009 IP address blocks: 169.40.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1d:da:6d:9f:ab:27:96:a6:bb:cf:8d:e8:c1:bc:d1:85:51:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 10 07:55:18 2025 GMT Not After : Dec 9 08:00:18 2026 GMT Subject: CN=6D6AACD1C92FCF89E14FBBCA659EFF0216EBE752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:18:52:49:3e:7c:8d:42:36:1e:70:fb:af: 82:07:ff:56:87:7e:b6:b5:70:76:4c:81:97:bf:2f: 37:50:ad:80:a8:f5:52:f2:d3:3b:c9:b6:45:13:fc: 62:04:d7:90:ed:01:25:84:fc:13:02:41:e4:26:41: ea:1d:a6:3c:83:4b:84:e0:b4:0d:06:22:71:ef:40: b7:21:f2:ae:ff:ef:f9:2b:f2:71:3a:8f:d4:c7:34: 48:99:39:ff:26:32:cb:52:a7:7d:a3:8a:cd:b9:de: 89:d2:ff:45:44:d8:56:fd:40:20:52:46:fa:3e:a8: 7f:81:16:18:c2:0f:97:87:f9:cc:6e:62:8a:16:44: 0f:04:66:5e:ac:2b:b7:bf:b2:22:21:54:fd:12:47: 13:5f:24:9a:40:50:9a:d1:e0:fd:59:b5:1c:d8:43: 54:cd:52:6c:31:07:00:c5:a7:d4:c1:b1:6f:71:39: 9e:e7:aa:de:68:08:4b:77:37:be:3f:ac:06:78:3d: fc:f8:54:41:16:af:d7:56:32:fd:03:09:42:77:70: 02:b6:96:28:c5:86:f7:9b:b8:21:d7:69:e3:17:e5: 0a:fb:e5:6b:d8:b5:f6:03:50:af:48:56:01:aa:ed: 8b:d3:08:0b:f0:53:28:95:ad:ba:cc:22:cb:50:a1: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6A:AC:D1:C9:2F:CF:89:E1:4F:BB:CA:65:9E:FF:02:16:EB:E7:52 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.154.0/24 Signature Algorithm: sha256WithRSAEncryption 94:26:e2:d2:30:5e:aa:69:6c:26:27:2a:5d:c1:66:2b:58:bd: df:fb:a7:9e:33:70:59:6c:dc:d2:49:cf:db:c6:14:4b:0b:9a: 99:0b:f2:da:d2:44:77:4b:4b:81:f3:86:fe:02:c5:b9:d2:d9: c4:63:37:00:2c:eb:8a:84:f9:06:55:16:7a:54:3f:34:23:df: bf:7b:4d:21:c0:7f:e1:53:de:d3:e3:21:25:84:a2:da:4b:97: 7a:c9:69:64:01:e1:8e:4e:6b:db:a6:43:95:33:88:2b:ff:e9: a9:61:6c:8c:88:81:5d:b8:1f:4d:83:c9:2b:3e:00:d8:59:dd: 91:e4:d0:a2:97:6f:b2:1e:83:6a:39:ae:0e:a6:f9:ee:d4:a5: 76:bc:37:7d:39:88:a1:64:b1:ab:f1:5b:91:d2:35:3d:f0:5b: ab:72:02:11:81:a8:06:da:02:54:ec:4e:03:a3:3b:77:23:41: 87:5c:1d:0f:10:ac:2a:e0:49:44:20:2c:6f:ab:d5:59:a3:ac: 0f:86:c6:67:65:0d:24:4b:98:50:f9:23:23:37:5c:45:78:30: fc:60:aa:ae:3f:f5:a1:a7:76:55:df:45:43:5f:85:c9:bf:8d: dd:e2:b9:87:55:d6:51:c6:74:59:a8:66:f7:6e:98:85:2e:b3: d6:ad:8d:00 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUUh3abZ+rJ5amu8+N6MG80YVRRaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMTAwNzU1MThaFw0yNjEyMDkwODAwMThaMDMxMTAvBgNV BAMTKDZENkFBQ0QxQzkyRkNGODlFMTRGQkJDQTY1OUVGRjAyMTZFQkU3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ARhSST58jUI2HnD7r4IH/1aH fra1cHZMgZe/LzdQrYCo9VLy0zvJtkUT/GIE15DtASWE/BMCQeQmQeodpjyDS4Tg tA0GInHvQLch8q7/7/kr8nE6j9THNEiZOf8mMstSp32jis253onS/0VE2Fb9QCBS Rvo+qH+BFhjCD5eH+cxuYooWRA8EZl6sK7e/siIhVP0SRxNfJJpAUJrR4P1ZtRzY Q1TNUmwxBwDFp9TBsW9xOZ7nqt5oCEt3N74/rAZ4Pfz4VEEWr9dWMv0DCUJ3cAK2 lijFhvebuCHXaeMX5Qr75WvYtfYDUK9IVgGq7YvTCAvwUyiVrbrMIstQoclLAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUbWqs0ckvz4nhT7vKZZ7/Ahbr51IwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKJowDQYJKoZIhvcN AQELBQADggEBAJQm4tIwXqppbCYnKl3BZitYvd/7p54zcFls3NJJz9vGFEsLmpkL 8trSRHdLS4Hzhv4CxbnS2cRjNwAs64qE+QZVFnpUPzQj3797TSHAf+FT3tPjISWE otpLl3rJaWQB4Y5Oa9umQ5UziCv/6alhbIyIgV24H02DySs+ANhZ3ZHk0KKXb7Ie g2o5rg6m+e7UpXa8N305iKFksavxW5HSNT3wW6tyAhGBqAbaAlTsTgOjO3cjQYdc HQ8QrCrgSUQgLG+r1VmjrA+GxmdlDSRLmFD5IyM3XEV4MPxgqq4/9aGndlXfRUNf hcm/jd3iuYdV1lHGdFmoZvdumIUus9atjQA= -----END CERTIFICATE-----Generated at Sat Dec 20 03:34:49 2025 by rpki-client