This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: Yf3R4Y+j51zc5AgaaK3JwdeUGBNzXziBK0lRFPQaTbs= Subject key identifier: 37:8F:8F:8C:15:EB:B4:AD:04:0D:0A:1F:87:40:22:66:13:95:24:85 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 64FF65706B56DD26B7A9378EC77B5B73A1FADE14 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa Signing time: Mon 19 Jan 2026 05:41:17 +0000 ROA not before: Mon 19 Jan 2026 05:36:17 +0000 ROA not after: Mon 18 Jan 2027 05:41:17 +0000 asID: 9304 IP address blocks: 169.40.37.0/24 maxlen: 24 169.40.38.0/24 maxlen: 24 169.40.39.0/24 maxlen: 24 169.40.40.0/24 maxlen: 24 169.40.41.0/24 maxlen: 24 169.40.42.0/24 maxlen: 24 169.40.43.0/24 maxlen: 24 169.40.44.0/24 maxlen: 24 169.40.45.0/24 maxlen: 24 169.40.46.0/24 maxlen: 24 169.40.47.0/24 maxlen: 24 169.40.48.0/24 maxlen: 24 169.40.49.0/24 maxlen: 24 169.40.50.0/24 maxlen: 24 169.40.51.0/24 maxlen: 24 169.40.52.0/24 maxlen: 24 169.40.53.0/24 maxlen: 24 169.40.54.0/24 maxlen: 24 169.40.55.0/24 maxlen: 24 169.40.56.0/24 maxlen: 24 169.40.57.0/24 maxlen: 24 169.40.58.0/24 maxlen: 24 169.40.59.0/24 maxlen: 24 169.40.60.0/24 maxlen: 24 169.40.61.0/24 maxlen: 24 169.40.62.0/24 maxlen: 24 169.40.63.0/24 maxlen: 24 169.40.102.0/23 maxlen: 23 169.40.110.0/24 maxlen: 24 169.40.111.0/24 maxlen: 24 169.40.112.0/24 maxlen: 24 169.40.116.0/24 maxlen: 24 169.40.117.0/24 maxlen: 24 169.40.119.0/24 maxlen: 24 169.40.121.0/24 maxlen: 24 169.40.122.0/24 maxlen: 24 169.40.123.0/24 maxlen: 24 169.40.124.0/24 maxlen: 24 169.40.125.0/24 maxlen: 24 169.40.153.0/24 maxlen: 24 169.40.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ff:65:70:6b:56:dd:26:b7:a9:37:8e:c7:7b:5b:73:a1:fa:de:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Jan 19 05:36:17 2026 GMT Not After : Jan 18 05:41:17 2027 GMT Subject: CN=378F8F8C15EBB4AD040D0A1F8740226613952485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:b0:49:f0:38:a1:8a:32:b9:38:15:a0:2d: af:7a:93:92:98:ee:fb:8a:7c:7b:e2:f2:00:cf:ad: bf:4c:2e:f0:ab:da:8d:6a:92:90:3c:24:47:a6:0f: 43:98:a2:69:62:ac:c8:90:73:16:c5:74:f6:51:09: 5c:68:bd:b6:5a:3c:b6:6d:da:f9:82:e8:84:53:e5: 91:e7:9e:2f:98:12:04:f8:7f:18:5d:46:1c:46:3b: d3:49:82:8e:f6:57:61:d7:37:ee:24:b9:05:b7:42: 6c:f8:ad:aa:4f:87:23:16:1e:77:67:66:79:bc:bf: ec:6d:91:6e:16:a8:ec:90:6f:b7:b4:d5:f0:ac:f4: 81:22:ec:f3:62:cf:cb:49:2b:b8:14:6c:67:cb:2e: dc:56:99:ed:d9:62:44:0c:af:99:3d:0e:47:c1:99: 0f:b5:06:b0:2a:e7:34:93:44:10:2f:08:ad:1a:bb: 31:92:d5:8b:f9:50:d9:d7:43:a6:d1:88:e9:97:d8: 21:c8:a0:49:0b:e5:99:d1:32:19:ce:d0:8a:8e:3d: 0b:55:b3:0a:09:c8:7f:ff:ae:9e:24:a6:d5:39:e3: 52:6a:f2:ce:ae:c9:d7:87:6e:78:d9:9f:eb:22:bd: a6:61:cd:90:41:f8:9a:5c:c1:1f:88:17:20:6a:60: 38:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:8F:8C:15:EB:B4:AD:04:0D:0A:1F:87:40:22:66:13:95:24:85 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.37.0-169.40.63.255 169.40.102.0/23 169.40.110.0-169.40.112.255 169.40.116.0/23 169.40.119.0/24 169.40.121.0-169.40.125.255 169.40.153.0/24 169.40.159.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:a1:93:c0:f6:50:04:54:87:fc:97:8c:f8:f8:43:e4:0c:0d: dd:11:29:76:ba:dd:24:a5:62:35:6b:12:42:63:b9:a9:a2:0c: c7:e5:89:fb:4b:41:0b:61:30:0d:ce:ea:78:ac:f2:00:8d:91: e3:61:7e:ea:69:65:02:99:18:99:3c:f2:e8:f7:a2:cc:6e:9a: ad:8a:60:8e:38:13:1b:86:b8:19:98:52:42:5f:6c:b6:8f:7a: 0b:e9:39:a7:9f:01:9b:ee:31:d3:63:d2:7e:f3:36:59:a5:11: 93:21:08:41:12:80:da:3d:73:6b:75:91:0a:7d:c6:6c:17:10: db:9c:f9:a4:06:86:49:bb:99:a2:20:ee:cc:00:77:d6:ba:6f: d5:cb:e6:71:77:1d:dd:ca:51:22:dd:3a:06:1f:ea:52:94:6a: aa:32:19:21:0d:1d:14:fb:6b:0b:72:9b:74:1e:f4:3f:15:23: b6:79:33:25:0d:78:06:9f:ee:9e:7c:bd:c5:83:34:0c:ec:1f: 95:9e:b9:d3:b0:ce:67:ef:56:52:07:ac:45:55:0e:ef:f5:7f: a8:7e:7b:70:45:73:ca:68:5d:c0:1c:0f:6d:65:d9:f5:1a:14: b9:b0:f2:e7:9b:ab:62:ac:bd:06:2b:a3:cb:08:d7:84:b3:e2: ec:c9:1a:39 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUZP9lcGtW3Sa3qTeOx3tbc6H63hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAxMTkwNTM2MTdaFw0yNzAxMTgwNTQxMTdaMDMxMTAvBgNV BAMTKDM3OEY4RjhDMTVFQkI0QUQwNDBEMEExRjg3NDAyMjY2MTM5NTI0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6a7BJ8DihijK5OBWgLa96k5KY 7vuKfHvi8gDPrb9MLvCr2o1qkpA8JEemD0OYomlirMiQcxbFdPZRCVxovbZaPLZt 2vmC6IRT5ZHnni+YEgT4fxhdRhxGO9NJgo72V2HXN+4kuQW3Qmz4rapPhyMWHndn Znm8v+xtkW4WqOyQb7e01fCs9IEi7PNiz8tJK7gUbGfLLtxWme3ZYkQMr5k9DkfB mQ+1BrAq5zSTRBAvCK0auzGS1Yv5UNnXQ6bRiOmX2CHIoEkL5ZnRMhnO0IqOPQtV swoJyH//rp4kptU541Jq8s6uydeHbnjZn+sivaZhzZBB+JpcwR+IFyBqYDihAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUN4+PjBXrtK0EDQofh0AiZhOVJIUwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgwDAMEAKkoJQMEBqkoAAMEAako ZjAMAwQBqShuAwQAqShwAwQBqSh0AwQAqSh3MAwDBACpKHkDBAGpKHwDBACpKJkD BACpKJ8wDQYJKoZIhvcNAQELBQADggEBAC6hk8D2UARUh/yXjPj4Q+QMDd0RKXa6 3SSlYjVrEkJjuamiDMfliftLQQthMA3O6nis8gCNkeNhfuppZQKZGJk88uj3osxu mq2KYI44ExuGuBmYUkJfbLaPegvpOaefAZvuMdNj0n7zNlmlEZMhCEESgNo9c2t1 kQp9xmwXENuc+aQGhkm7maIg7swAd9a6b9XL5nF3Hd3KUSLdOgYf6lKUaqoyGSEN HRT7awtym3Qe9D8VI7Z5MyUNeAaf7p58vcWDNAzsH5WeudOwzmfvVlIHrEVVDu/1 f6h+e3BFc8poXcAcD21l2fUaFLmw8uebq2KsvQYro8sI14Sz4uzJGjk= -----END CERTIFICATE-----Generated at Sun Jan 25 10:24:09 2026 by rpki-client