This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3139322e302f32302d3234203d3e20383334.roa File: 3136392e34302e3139322e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: 3yyT4LUuVlJllKAyxNkzv2jIZaZG9ZjvpMJKaOTj/Qc= Subject key identifier: 77:D9:8A:EA:18:91:57:47:1D:AD:06:40:AD:1F:1F:51:95:AD:5C:CC Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 70B1E90A54F0270219537FB6281D876725397FC8 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3139322e302f32302d3234203d3e20383334.roa Signing time: Thu 11 Dec 2025 04:12:58 +0000 ROA not before: Thu 11 Dec 2025 04:07:58 +0000 ROA not after: Thu 10 Dec 2026 04:12:58 +0000 asID: 834 IP address blocks: 169.40.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b1:e9:0a:54:f0:27:02:19:53:7f:b6:28:1d:87:67:25:39:7f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Dec 11 04:07:58 2025 GMT Not After : Dec 10 04:12:58 2026 GMT Subject: CN=77D98AEA189157471DAD0640AD1F1F5195AD5CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:7a:ef:fc:54:37:60:bd:13:4e:8d:38:ba: ba:06:a3:02:f0:e5:a2:27:45:99:5e:f3:fd:7e:a7: ed:f6:a9:59:52:de:57:7b:c7:84:90:f4:49:ff:b6: 3e:c1:1e:2a:a3:c6:99:75:93:7e:ae:c5:9c:6e:fe: 60:2b:33:0f:3c:4a:a3:29:e0:ba:39:dc:40:f5:c5: d3:32:55:ee:8c:5b:29:8b:3f:1e:92:37:25:61:c3: e4:68:15:3a:ab:bb:cd:8c:c3:7e:7a:e6:31:cd:ee: c1:2c:00:1f:0d:87:a1:80:58:cb:76:2e:3e:15:a1: 9f:f8:23:09:9a:a9:73:1d:18:c3:8b:f2:1f:37:85: c6:f0:c6:38:db:9d:08:df:83:d4:ef:ac:f3:e8:ac: 54:2c:28:36:27:7f:82:86:6d:1f:55:94:fb:d7:22: 7e:66:a7:c1:d1:c3:0c:ae:8e:50:69:7c:30:eb:07: 50:69:b4:22:28:07:b1:49:6a:91:33:ee:5b:1e:76: a6:33:53:31:9d:0a:50:19:4f:4f:18:97:02:cb:81: c0:08:e1:aa:a4:16:a3:7c:c2:a7:bd:83:38:7f:38: fd:9e:d4:19:42:da:1a:2e:74:1a:1c:66:7c:ba:c0: fa:42:96:b1:fd:46:b2:93:4a:12:3f:67:cd:b5:d0: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D9:8A:EA:18:91:57:47:1D:AD:06:40:AD:1F:1F:51:95:AD:5C:CC X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3139322e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.192.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:2a:fa:73:da:36:06:f2:ab:3f:28:25:24:c8:eb:aa:ce:4c: 01:db:c2:84:fa:41:79:8d:2b:2e:ac:fc:0b:14:f1:f9:24:bd: c1:b4:df:05:f6:9f:61:3a:18:8c:2e:f1:eb:29:a1:cc:44:69: 3d:5c:0e:1d:5b:8b:06:d6:41:79:b1:eb:06:d7:8e:2d:55:b8: 02:f6:cc:d2:db:92:ef:ef:27:23:2d:57:f2:a6:6d:2c:33:bf: f9:12:55:a5:a0:f2:e1:63:c9:b6:ca:dc:ad:7c:f8:d2:d3:37: ff:5c:19:00:34:1e:69:2b:88:ee:7e:b2:3a:85:e3:d0:5e:8c: 44:0e:65:de:0c:32:e6:be:f3:36:0b:2b:2f:32:8c:d9:9a:cf: 3a:a4:08:3c:2c:99:88:86:eb:97:a0:26:c6:09:db:38:65:94: 7b:f3:de:50:25:bd:1e:61:9d:9b:90:28:21:cd:9b:77:5f:49: 66:c0:8d:fd:85:4d:d7:ff:7b:aa:05:14:3a:3f:88:34:c5:47: ad:54:ba:c8:0f:41:3b:e8:c3:33:a1:7b:28:ca:01:61:07:21: a4:af:a8:77:47:a7:c8:c9:90:d1:2d:52:4a:88:6f:cd:a5:09: 91:32:c4:d1:c8:fa:72:d8:77:d6:86:79:de:6e:c2:cf:ec:a6: 80:15:6d:21 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUcLHpClTwJwIZU3+2KB2HZyU5f8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNTEyMTEwNDA3NThaFw0yNjEyMTAwNDEyNThaMDMxMTAvBgNV BAMTKDc3RDk4QUVBMTg5MTU3NDcxREFEMDY0MEFEMUYxRjUxOTVBRDVDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepXrv/FQ3YL0TTo04uroGowLw 5aInRZle8/1+p+32qVlS3ld7x4SQ9En/tj7BHiqjxpl1k36uxZxu/mArMw88SqMp 4Lo53ED1xdMyVe6MWymLPx6SNyVhw+RoFTqru82Mw3565jHN7sEsAB8Nh6GAWMt2 Lj4VoZ/4IwmaqXMdGMOL8h83hcbwxjjbnQjfg9TvrPPorFQsKDYnf4KGbR9VlPvX In5mp8HRwwyujlBpfDDrB1BptCIoB7FJapEz7lsedqYzUzGdClAZT08YlwLLgcAI 4aqkFqN8wqe9gzh/OP2e1BlC2houdBocZny6wPpClrH9RrKTShI/Z8210IGVAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUd9mK6hiRV0cdrQZArR8fUZWtXMwwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzOTMyMmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqSjAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKvpz2jYG8qs/KCUkyOuqzkwB28KE+kF5jSsurPwLFPH5JL3BtN8F 9p9hOhiMLvHrKaHMRGk9XA4dW4sG1kF5sesG144tVbgC9szS25Lv7ycjLVfypm0s M7/5ElWloPLhY8m2ytytfPjS0zf/XBkANB5pK4jufrI6hePQXoxEDmXeDDLmvvM2 CysvMozZms86pAg8LJmIhuuXoCbGCds4ZZR7895QJb0eYZ2bkCghzZt3X0lmwI39 hU3X/3uqBRQ6P4g0xUetVLrID0E76MMzoXsoygFhByGkr6h3R6fIyZDRLVJKiG/N pQmRMsTRyPpy2HfWhnnebsLP7KaAFW0h -----END CERTIFICATE-----Generated at Mon Dec 15 17:19:26 2025 by rpki-client