This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa
File: AS16589.roa (raw, json)
Hash identifier: 0ag0C5L+5i3YQPSGMRrwxfysMNjscNgEcf/Qh3DxksE=
Subject key identifier: D1:0E:24:18:65:C6:ED:B3:83:99:BB:41:E6:B3:CB:09:4F:29:AE:1D
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 1075D44E437FEBBC82DEC4E2DB1D669AB7AE6E99
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa
Signing time: Fri 16 Jan 2026 00:20:32 +0000
ROA not before: Fri 16 Jan 2026 00:15:32 +0000
ROA not after: Fri 15 Jan 2027 00:20:32 +0000
asID: 16589
IP address blocks: 169.40.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:75:d4:4e:43:7f:eb:bc:82:de:c4:e2:db:1d:66:9a:b7:ae:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Jan 16 00:15:32 2026 GMT
Not After : Jan 15 00:20:32 2027 GMT
Subject: CN=D10E241865C6EDB38399BB41E6B3CB094F29AE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:5b:93:7f:6d:7d:3e:4d:0e:f6:6f:7d:e7:
92:82:4b:e4:64:2a:d1:f8:4d:fa:f2:17:a6:67:d5:
71:88:14:da:e7:ff:b1:db:46:9e:85:8b:04:91:1e:
a3:5a:d1:88:5a:31:82:fc:44:83:61:03:d3:fd:e8:
8a:e9:3c:27:3d:27:69:3c:78:a6:46:5c:ee:bf:e0:
ad:f9:ee:fd:15:00:fb:fa:99:f0:66:6e:00:6d:d6:
69:7b:ee:15:ff:41:7d:72:65:06:04:47:dc:41:be:
27:cb:1e:8b:e7:be:a9:24:a2:75:13:86:d2:cc:cc:
c0:1e:2f:54:34:87:d4:ff:a3:ee:86:90:41:a8:71:
17:61:cc:b8:ad:6d:cd:70:a1:16:eb:c6:6e:e6:3a:
97:5f:71:11:6d:65:ab:33:89:3a:c8:5b:88:f4:07:
69:75:68:13:7b:01:66:99:f6:f8:58:59:d3:4c:0b:
ad:7e:19:e4:d1:d3:71:e9:15:f5:e2:d9:59:2e:94:
00:38:6c:2c:2d:75:32:6d:de:24:39:59:9f:e9:a0:
5a:dc:b3:9e:5f:93:08:fd:c1:4b:8b:f3:9b:f5:5f:
55:c3:52:e6:de:b2:85:d1:2f:51:5a:d9:d1:56:07:
3d:68:48:e4:e3:95:ee:b6:6c:2c:dc:a0:6f:16:9e:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:24:18:65:C6:ED:B3:83:99:BB:41:E6:B3:CB:09:4F:29:AE:1D
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS16589.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:22:b8:4d:e6:04:71:2f:7a:1e:8b:4c:e6:f6:2b:53:87:94:
c0:e9:90:9c:7a:d4:2f:74:b0:23:47:5e:b1:f7:bf:46:c7:84:
e5:fd:3f:2a:41:11:b7:ad:7d:3e:f7:70:01:52:1d:cc:d9:de:
65:9f:e8:b3:31:07:6c:ae:30:d8:5d:fd:bf:24:40:52:b0:7e:
c2:31:e8:9d:74:33:6d:df:2c:1d:b6:28:91:c2:8f:80:5b:4c:
f4:3f:74:61:2f:de:ac:6d:94:04:f3:32:83:c8:c4:24:c9:a3:
d5:85:74:95:f3:97:47:35:7c:f0:70:d2:76:ce:3f:24:10:79:
0a:31:57:ed:3c:be:ea:0a:d0:07:08:ce:31:4b:44:4f:db:95:
73:eb:a2:e0:35:7f:cc:c5:3d:43:23:b0:90:0a:4d:40:79:93:
ec:01:8a:b8:f8:0a:33:90:de:f6:f0:72:fa:dc:28:8f:8a:33:
ab:cd:70:52:8e:73:06:29:ab:de:19:7a:4e:ad:4f:d6:3f:f4:
9e:41:3c:f0:cb:69:0e:9f:58:0f:55:8c:ee:36:84:0e:7b:55:
0f:74:c0:5f:96:d2:0f:26:15:4d:8b:6c:d2:f6:07:eb:2f:9e:
2d:67:a0:9d:a4:ed:c7:27:4d:a7:a5:67:5a:05:54:87:12:ef:
43:67:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:30 2026 by rpki-client