This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa File: 352e38332e3231322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: lXnvlo9OEbwQUklaC0vbLj39pO3tlDj8ObuqQIAtSGA= Subject key identifier: FF:48:0B:C3:DA:94:B5:69:D2:56:DF:00:11:ED:D1:E1:A4:9A:4A:6A Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 583F7B2EDEAB9000C66EB184B5E3D1657AA6E3F1 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa Signing time: Thu 01 Jan 2026 00:16:21 +0000 ROA not before: Thu 01 Jan 2026 00:11:21 +0000 ROA not after: Thu 31 Dec 2026 00:16:21 +0000 asID: 834 IP address blocks: 5.83.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3f:7b:2e:de:ab:90:00:c6:6e:b1:84:b5:e3:d1:65:7a:a6:e3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jan 1 00:11:21 2026 GMT Not After : Dec 31 00:16:21 2026 GMT Subject: CN=FF480BC3DA94B569D256DF0011EDD1E1A49A4A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:a7:ee:ae:08:6d:ff:fb:5b:16:76:cd:78: ee:e1:e4:f8:75:b0:19:e6:68:b3:da:a2:e7:53:b0: 41:b8:e0:2a:ca:7f:82:f5:d3:d0:58:1b:5f:b3:6c: 9f:83:36:61:77:b5:78:a3:43:96:18:2e:6d:5b:8e: 75:fa:c4:be:0d:db:ad:35:c0:3f:d6:4a:8e:68:b9: 89:ea:01:45:23:76:b1:51:6d:7c:09:d0:dd:f0:4c: fa:cc:5f:e8:60:99:8c:54:d2:f2:f2:e7:0a:e0:85: 4a:e9:4b:d5:63:d6:e6:97:d6:34:d7:93:b5:a1:97: 19:2c:a9:06:51:36:f9:93:9e:3a:73:85:30:94:f8: ff:1d:55:ab:86:02:2e:af:9d:15:df:c6:74:46:21: d9:cc:ab:bf:14:08:db:03:7a:81:78:73:e1:dc:f7: 4b:3d:4a:35:0a:d5:be:82:1e:48:9c:0f:1a:ae:10: eb:a9:94:00:b1:19:b7:83:ff:4b:2d:a9:94:2d:75: b6:3f:f8:7b:2c:c3:b2:cc:58:2c:24:fe:d2:99:7f: 77:ae:97:dc:b6:8e:7a:fb:f5:ce:2c:2f:be:85:52: ea:1b:7c:55:b0:53:7a:c6:47:15:63:7b:83:d6:ea: 44:2a:49:c2:07:11:cc:79:ab:22:6d:f6:54:70:12: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:0B:C3:DA:94:B5:69:D2:56:DF:00:11:ED:D1:E1:A4:9A:4A:6A X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.212.0/23 Signature Algorithm: sha256WithRSAEncryption 56:58:52:5e:c8:ad:6f:38:a7:fe:4c:42:6b:51:1b:f6:6b:cc: 69:f6:91:01:0d:c4:ee:02:9f:44:d7:64:11:c8:ba:29:f2:2b: 42:2e:a7:a7:48:ae:b2:0e:03:5b:01:c3:30:b2:3d:5e:44:e9: e1:15:e6:f8:14:ed:99:26:e4:7a:5e:c7:a2:42:e5:1d:bd:68: 62:34:3f:13:33:d2:9f:dd:e6:65:e1:52:00:82:9c:d8:d6:6f: 4e:e9:73:4d:38:b7:4e:5a:43:ac:18:63:62:16:ba:56:65:0f: ac:04:52:f1:bb:fb:23:1b:c6:d7:cd:de:4d:23:62:5b:d1:7a: ae:da:86:31:8e:7d:6d:51:30:ba:45:ae:5e:21:42:23:97:84: 97:41:7f:dc:f2:66:1e:f7:c3:ef:f8:2c:d1:a0:9d:91:35:37: fe:0f:5b:3d:2f:3b:19:16:6f:d1:1b:c3:66:2f:2c:da:e7:51: aa:69:c8:3b:6e:af:88:1a:e0:49:5b:e0:40:0a:4c:ce:54:df: ca:cf:44:97:da:6c:67:4c:6a:ee:9d:09:e6:46:42:3a:bd:c0: b1:18:a0:41:9a:36:bd:8f:d5:2c:4e:c5:55:91:ee:78:3a:e9: d4:d5:ab:67:83:28:99:30:b0:c0:32:4e:17:56:75:02:33:ef: e7:d6:ab:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWD97Lt6rkADGbrGEtePRZXqm4/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAxMDEwMDExMjFaFw0yNjEyMzEwMDE2MjFaMDMxMTAvBgNV BAMTKEZGNDgwQkMzREE5NEI1NjlEMjU2REYwMDExRUREMUUxQTQ5QTRBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4Kfurght//tbFnbNeO7h5Ph1 sBnmaLPaoudTsEG44CrKf4L109BYG1+zbJ+DNmF3tXijQ5YYLm1bjnX6xL4N2601 wD/WSo5ouYnqAUUjdrFRbXwJ0N3wTPrMX+hgmYxU0vLy5wrghUrpS9Vj1uaX1jTX k7WhlxksqQZRNvmTnjpzhTCU+P8dVauGAi6vnRXfxnRGIdnMq78UCNsDeoF4c+Hc 90s9SjUK1b6CHkicDxquEOuplACxGbeD/0stqZQtdbY/+Hssw7LMWCwk/tKZf3eu l9y2jnr79c4sL76FUuobfFWwU3rGRxVje4PW6kQqScIHEcx5qyJt9lRwEuF9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/0gLw9qUtWnSVt8AEe3R4aSaSmowHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMjJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQVT1DANBgkqhkiG9w0BAQsFAAOC AQEAVlhSXsitbzin/kxCa1Eb9mvMafaRAQ3E7gKfRNdkEci6KfIrQi6np0iusg4D WwHDMLI9XkTp4RXm+BTtmSbkel7HokLlHb1oYjQ/EzPSn93mZeFSAIKc2NZvTulz TTi3TlpDrBhjYha6VmUPrARS8bv7IxvG183eTSNiW9F6rtqGMY59bVEwukWuXiFC I5eEl0F/3PJmHvfD7/gs0aCdkTU3/g9bPS87GRZv0RvDZi8s2udRqmnIO26viBrg SVvgQApMzlTfys9El9psZ0xq7p0J5kZCOr3AsRigQZo2vY/VLE7FVZHueDrp1NWr Z4MomTCwwDJOF1Z1AjPv59arLQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:00:29 2026 by rpki-client