This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20313337353137.roa File: 3136392e34302e3134312e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: WNZ1UNoqlkeuJdyXSd69ZACN+yDxXh9/6OXU0x9TW0U= Subject key identifier: 96:D2:80:43:5B:4E:26:11:49:85:22:C6:0F:5C:C9:21:F0:4B:79:05 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0F75E9D411D8D663BE7D6C4CBF99320F032E9313 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20313337353137.roa Signing time: Tue 09 Dec 2025 11:40:41 +0000 ROA not before: Tue 09 Dec 2025 11:35:41 +0000 ROA not after: Tue 08 Dec 2026 11:40:41 +0000 asID: 137517 IP address blocks: 169.40.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:75:e9:d4:11:d8:d6:63:be:7d:6c:4c:bf:99:32:0f:03:2e:93:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 9 11:35:41 2025 GMT Not After : Dec 8 11:40:41 2026 GMT Subject: CN=96D280435B4E2611498522C60F5CC921F04B7905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:bf:09:ca:a4:ff:8c:79:a7:16:85:d7:21: 40:c0:01:89:99:26:64:44:2f:5d:19:2c:be:d0:d7: 3c:97:42:23:33:80:36:a2:c3:06:6a:eb:26:f6:6b: 4c:b1:90:f7:38:46:0a:dd:ff:ec:aa:11:a7:f1:7a: 6d:84:49:66:8a:6f:35:2b:6c:18:b7:a5:02:4c:33: e7:82:58:e2:e9:78:42:5c:8a:61:f8:cf:37:1b:83: e1:c4:91:ff:be:a0:00:b5:9e:8b:7d:9c:b5:37:36: ab:fa:0e:9c:6c:6f:00:31:00:a8:cd:40:2a:e0:9d: 97:1a:63:73:51:fa:e7:d6:59:2a:55:6a:6f:8b:0c: 05:ea:e6:ea:c7:21:f6:f7:1e:bd:65:74:83:41:76: 18:18:a4:d3:37:f4:9f:95:27:68:fd:11:ba:d1:d0: ac:7f:79:e1:78:f4:af:f3:45:b8:a8:11:9b:4d:88: dd:23:d9:9f:a9:65:fa:17:15:d2:18:8a:70:31:48: 02:3f:7d:c6:e9:d7:09:01:79:40:5a:90:13:be:99: 66:01:d2:7b:4f:79:b9:0a:b3:59:ce:d1:68:65:bd: 4f:c3:b3:d0:c8:38:e1:9a:0d:f1:0f:6b:75:d8:80: 1c:35:c1:81:6b:77:b1:dd:75:53:6a:89:4d:aa:25: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D2:80:43:5B:4E:26:11:49:85:22:C6:0F:5C:C9:21:F0:4B:79:05 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.141.0/24 Signature Algorithm: sha256WithRSAEncryption 17:31:c1:0b:29:e9:be:09:87:2c:13:04:78:b0:6d:19:f0:2d: 80:71:a9:f0:89:36:29:ff:34:67:b7:fd:73:60:cf:1a:aa:fd: d7:0c:53:af:b5:c8:8b:82:5a:05:de:64:90:d6:af:8c:39:3c: 3d:0b:5e:e9:11:87:bb:4e:6b:4c:b0:20:2c:88:7a:51:a2:a1: f0:70:32:0c:82:42:90:16:fa:05:af:2c:2d:d8:2b:ea:bd:3a: f3:97:cb:c8:f8:2b:9f:c3:b0:84:3b:82:fb:84:fb:ca:06:5a: 46:19:f2:f6:13:82:07:23:b9:5c:be:b6:cb:ce:a2:2b:ec:cc: 50:6a:e8:ef:fd:53:1b:50:9c:11:07:0a:76:ca:9b:a6:82:25: bd:73:75:dd:78:8c:b5:2c:d8:d3:3d:73:53:83:04:4f:63:e2: 82:94:a2:f4:4e:25:c4:77:81:5a:31:a2:24:19:07:44:19:58: 21:07:5a:ee:38:af:bb:77:3a:7e:45:c2:bc:44:fd:40:2a:7c: e9:1d:12:ff:4d:4b:a4:e0:90:e4:3e:9e:30:16:8c:c7:db:0e: 7b:c8:0e:dc:cf:54:45:6e:ed:50:77:c7:2c:95:b3:01:fd:9b: 92:68:f3:41:3a:2c:2f:fc:3d:bc:b9:ae:05:64:c0:bb:1b:c8: 2c:ea:25:e8 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUD3Xp1BHY1mO+fWxMv5kyDwMukxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMDkxMTM1NDFaFw0yNjEyMDgxMTQwNDFaMDMxMTAvBgNV BAMTKDk2RDI4MDQzNUI0RTI2MTE0OTg1MjJDNjBGNUNDOTIxRjA0Qjc5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sb8JyqT/jHmnFoXXIUDAAYmZ JmREL10ZLL7Q1zyXQiMzgDaiwwZq6yb2a0yxkPc4Rgrd/+yqEafxem2ESWaKbzUr bBi3pQJMM+eCWOLpeEJcimH4zzcbg+HEkf++oAC1not9nLU3Nqv6DpxsbwAxAKjN QCrgnZcaY3NR+ufWWSpVam+LDAXq5urHIfb3Hr1ldINBdhgYpNM39J+VJ2j9EbrR 0Kx/eeF49K/zRbioEZtNiN0j2Z+pZfoXFdIYinAxSAI/fcbp1wkBeUBakBO+mWYB 0ntPebkKs1nO0WhlvU/Ds9DIOOGaDfEPa3XYgBw1wYFrd7HddVNqiU2qJWzZAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUltKAQ1tOJhFJhSLGD1zJIfBLeQUwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzUzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiNMA0GCSqG SIb3DQEBCwUAA4IBAQAXMcELKem+CYcsEwR4sG0Z8C2AcanwiTYp/zRnt/1zYM8a qv3XDFOvtciLgloF3mSQ1q+MOTw9C17pEYe7TmtMsCAsiHpRoqHwcDIMgkKQFvoF rywt2CvqvTrzl8vI+Cufw7CEO4L7hPvKBlpGGfL2E4IHI7lcvrbLzqIr7MxQaujv /VMbUJwRBwp2ypumgiW9c3XdeIy1LNjTPXNTgwRPY+KClKL0TiXEd4FaMaIkGQdE GVghB1ruOK+7dzp+RcK8RP1AKnzpHRL/TUuk4JDkPp4wFozH2w57yA7cz1RFbu1Q d8cslbMB/ZuSaPNBOiwv/D28ua4FZMC7G8gs6iXo -----END CERTIFICATE-----Generated at Thu Dec 18 00:34:22 2025 by rpki-client