This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: 1m4cBKIBjwRBDjN0ffZp7s/+jrXDjOxmcwgn9giMfOY=
Subject key identifier: D8:B1:06:33:18:88:B2:C5:43:15:4C:9F:15:8E:D1:CB:9C:E6:D3:03
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 5D52E74FB4C4B22A6935F330A78375EA5101614F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa
Signing time: Fri 16 Jan 2026 00:20:32 +0000
ROA not before: Fri 16 Jan 2026 00:15:32 +0000
ROA not after: Fri 15 Jan 2027 00:20:32 +0000
asID: 5650
IP address blocks: 169.40.129.0/24 maxlen: 24
169.40.144.0/24 maxlen: 24
169.40.145.0/24 maxlen: 24
169.40.146.0/23 maxlen: 24
169.40.148.0/23 maxlen: 24
169.40.156.0/23 maxlen: 24
169.40.164.0/22 maxlen: 24
169.40.168.0/22 maxlen: 24
169.40.172.0/22 maxlen: 24
169.40.176.0/22 maxlen: 24
169.40.180.0/22 maxlen: 24
169.40.184.0/22 maxlen: 22
169.40.188.0/22 maxlen: 24
169.40.200.0/22 maxlen: 22
169.40.204.0/22 maxlen: 22
169.40.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:52:e7:4f:b4:c4:b2:2a:69:35:f3:30:a7:83:75:ea:51:01:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Jan 16 00:15:32 2026 GMT
Not After : Jan 15 00:20:32 2027 GMT
Subject: CN=D8B106331888B2C543154C9F158ED1CB9CE6D303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:2f:40:af:96:6d:e5:40:b0:57:2f:59:31:
1d:f6:d2:74:2a:97:de:06:1f:a3:e1:fc:fe:66:d7:
dd:ea:6f:a9:82:cd:f1:97:64:88:5e:46:9b:5d:09:
57:96:fd:96:75:df:ea:3c:61:e3:e0:13:bf:14:f6:
55:d9:f0:db:e0:8a:6e:57:8c:b1:df:ae:f3:47:94:
b7:91:03:69:8d:ea:2a:16:0e:c6:fc:59:b4:9d:37:
24:78:2a:7d:1d:d3:7e:cb:7b:a7:e2:c3:0e:0a:5f:
ac:ad:6b:6f:3f:58:a8:82:a6:09:e4:60:13:ed:cf:
4a:2c:c9:9a:d1:d6:a9:86:5a:6f:1c:ca:61:81:57:
8a:07:b9:ce:5c:8b:a9:2a:8d:6d:25:8c:06:2f:87:
38:f1:b0:2c:c3:6d:44:97:74:b6:21:54:51:e1:33:
c1:b8:c0:08:80:42:df:ab:f0:ed:15:f0:75:d9:3b:
ef:03:81:37:4e:07:01:b8:f4:6e:49:99:d0:4b:29:
47:3a:8d:c5:02:e0:07:de:3f:b3:7e:77:41:32:b9:
4a:2f:8c:61:a4:88:88:41:d0:9e:40:23:7a:94:f0:
3b:de:72:5e:bc:da:9f:09:59:51:c3:8a:48:6b:3b:
34:18:a5:bc:48:93:52:51:c8:a0:5a:27:77:3e:65:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:06:33:18:88:B2:C5:43:15:4C:9F:15:8E:D1:CB:9C:E6:D3:03
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.129.0/24
169.40.144.0-169.40.149.255
169.40.156.0/23
169.40.164.0-169.40.191.255
169.40.200.0/21
169.40.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:79:66:62:32:08:7a:ff:38:20:6e:c1:c1:7e:9c:8c:ca:01:
5f:b2:7b:6e:3f:ac:7d:c4:b1:84:75:87:0d:40:29:4d:04:c0:
42:7b:81:ff:ca:f0:e1:97:b2:8b:95:4a:99:35:02:af:7a:c2:
72:62:55:e0:4e:eb:17:00:23:d6:eb:38:cf:ff:df:e6:e1:85:
13:31:85:33:f5:31:19:f6:82:d0:b6:f9:c9:53:c2:4f:4b:a4:
f9:b3:61:ad:00:a2:67:24:36:94:c2:3f:17:c2:88:4c:fa:90:
85:9d:ee:7e:55:dd:02:52:0c:6b:53:2a:65:aa:ee:1e:07:48:
77:a2:59:c1:bb:75:33:ea:78:bb:7f:f7:0a:d1:04:c2:2d:20:
f4:3e:5f:eb:c2:39:34:12:4c:ee:76:21:ca:ca:9b:88:ab:75:
c8:08:98:14:5e:08:7c:b4:04:e0:b8:67:07:9a:f0:a1:1a:ca:
74:bd:37:c8:21:55:50:03:22:47:3b:e2:eb:4c:f6:22:13:5d:
95:f8:4b:1d:0b:61:84:11:f2:46:84:09:4c:df:05:7c:db:3d:
70:34:40:67:4d:c0:9d:48:20:88:bf:35:c6:c3:80:f5:5f:06:
25:87:7f:42:b2:76:b4:7b:63:04:c3:f8:5f:d6:ca:81:55:e6:
22:4c:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:32 2026 by rpki-client