This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa File: 352e38332e3231372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 5yHY+0RmN5j29ykD56Hx+1MJO7Xgb7R0dQd9847uvI8= Subject key identifier: 05:5B:A5:2E:49:CF:2A:DD:13:8A:F5:0D:BD:7D:EC:38:D1:ED:C2:0B Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 75B7F658F2EEAC6E5958EA27DB91F30763B6CDB2 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa Signing time: Thu 18 Dec 2025 07:57:36 +0000 ROA not before: Thu 18 Dec 2025 07:52:36 +0000 ROA not after: Thu 17 Dec 2026 07:57:36 +0000 asID: 834 IP address blocks: 5.83.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b7:f6:58:f2:ee:ac:6e:59:58:ea:27:db:91:f3:07:63:b6:cd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 18 07:52:36 2025 GMT Not After : Dec 17 07:57:36 2026 GMT Subject: CN=055BA52E49CF2ADD138AF50DBD7DEC38D1EDC20B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:cb:23:ff:93:3a:5d:c6:bc:1d:47:20:67: 3b:f1:dc:28:9b:14:67:e4:bd:37:0a:78:9d:8b:63: 14:1d:89:d7:a2:ef:14:17:44:7a:38:5a:5b:98:f8: be:de:a3:ba:81:03:bd:20:26:f3:5b:bf:09:c6:b7: 1f:36:64:59:08:e1:5c:66:4e:ff:80:b5:a0:e6:a5: 3f:38:65:15:8b:57:d1:cc:dd:84:c7:24:d7:45:92: 59:6b:d7:82:81:6c:d3:48:b8:ae:c9:13:4b:0a:4f: 01:ed:d4:d5:53:60:41:f4:a2:3c:c6:75:13:ba:e6: a9:e5:a5:80:c7:29:05:7a:d1:a8:9f:f3:8f:d4:c5: a1:9f:ec:ea:6d:42:0e:d4:98:ec:98:86:21:48:4b: 1a:0b:2f:dc:c1:b3:16:33:f3:07:c6:01:c9:38:5b: 46:90:47:08:a9:a7:d1:15:1a:f4:dc:b5:67:42:dc: 6a:9f:7e:6d:5c:fc:af:60:2a:34:4d:e3:7f:4d:18: a3:b0:2d:3d:ae:64:4a:70:e2:11:92:85:04:46:17: c4:b9:4d:be:ce:98:fd:bc:19:d9:a6:94:b1:cf:15: 76:e6:aa:3c:4a:49:79:3f:cc:e2:8f:36:04:73:ae: b3:a1:ed:f3:4b:18:01:dd:5e:11:19:9e:a9:b5:4a: 70:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5B:A5:2E:49:CF:2A:DD:13:8A:F5:0D:BD:7D:EC:38:D1:ED:C2:0B X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.217.0/24 Signature Algorithm: sha256WithRSAEncryption 27:75:1b:5b:d3:18:1f:89:30:68:f8:94:b4:b7:99:9e:37:be: 6c:a1:71:ae:d1:f7:59:ad:a2:c9:b5:bb:e6:cd:62:0f:ea:72: 5f:7f:ce:bf:8a:91:b9:a1:e8:6a:54:c4:ce:1c:3f:55:bb:57: 26:d3:4c:80:b0:a8:b2:e9:0e:4c:07:a1:b8:b3:2e:67:26:56: ea:f6:00:50:8b:05:47:23:48:50:40:f5:69:1d:0f:d0:c5:02: 85:f5:fc:06:8e:54:7d:81:22:83:1f:81:84:9a:f7:42:d1:2c: e7:a9:5a:59:fc:07:f4:c6:5d:89:0f:b0:6f:f7:8e:3c:48:bc: 68:bb:1b:ff:7e:68:2c:0d:f4:d2:a1:64:ab:89:73:c6:0f:25: 37:27:36:c3:2d:5e:55:d0:6e:84:22:8d:6d:7b:9e:2b:e7:32: a8:78:59:73:ea:f5:7d:f8:7a:f4:99:db:e1:0e:fa:58:fb:7a: bd:ae:41:99:12:c9:ea:bd:b7:ef:33:2d:91:53:0c:5b:9f:46: 9a:47:dc:89:68:d8:0a:b3:0a:15:22:e7:da:25:bd:df:c6:42: 0b:e7:d9:9d:17:8f:e9:87:da:26:76:03:a0:c2:12:c4:eb:d4: e2:18:d3:ee:04:b3:3c:56:2e:f4:be:93:04:fd:8f:d9:b2:15: d1:86:a0:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdbf2WPLurG5ZWOon25HzB2O2zbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMTgwNzUyMzZaFw0yNjEyMTcwNzU3MzZaMDMxMTAvBgNV BAMTKDA1NUJBNTJFNDlDRjJBREQxMzhBRjUwREJEN0RFQzM4RDFFREMyMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3A8sj/5M6Xca8HUcgZzvx3Cib FGfkvTcKeJ2LYxQdidei7xQXRHo4WluY+L7eo7qBA70gJvNbvwnGtx82ZFkI4Vxm Tv+AtaDmpT84ZRWLV9HM3YTHJNdFkllr14KBbNNIuK7JE0sKTwHt1NVTYEH0ojzG dRO65qnlpYDHKQV60aif84/UxaGf7OptQg7UmOyYhiFISxoLL9zBsxYz8wfGAck4 W0aQRwipp9EVGvTctWdC3Gqffm1c/K9gKjRN439NGKOwLT2uZEpw4hGShQRGF8S5 Tb7OmP28GdmmlLHPFXbmqjxKSXk/zOKPNgRzrrOh7fNLGAHdXhEZnqm1SnCFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBVulLknPKt0TivUNvX3sONHtwgswHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT2TANBgkqhkiG9w0BAQsFAAOC AQEAJ3UbW9MYH4kwaPiUtLeZnje+bKFxrtH3Wa2iybW75s1iD+pyX3/Ov4qRuaHo alTEzhw/VbtXJtNMgLCosukOTAehuLMuZyZW6vYAUIsFRyNIUED1aR0P0MUChfX8 Bo5UfYEigx+BhJr3QtEs56laWfwH9MZdiQ+wb/eOPEi8aLsb/35oLA300qFkq4lz xg8lNyc2wy1eVdBuhCKNbXueK+cyqHhZc+r1ffh69Jnb4Q76WPt6va5BmRLJ6r23 7zMtkVMMW59GmkfciWjYCrMKFSLn2iW938ZCC+fZnReP6YfaJnYDoMISxOvU4hjT 7gSzPFYu9L6TBP2P2bIV0YagXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:48 2025 by rpki-client