This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa File: AS1299.roa (raw, json) Hash identifier: V1NdsQ6QDDCFjL3SO9oJUJyC4Vw1aC40oxw0UuhodL8= Subject key identifier: 24:D0:19:0E:FF:D9:9C:17:E1:4F:B0:A0:F6:04:0C:4D:78:5E:D6:8B Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 486C9B85E6B4BE2CE5B1088E95326B5D63CC1CD7 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa Signing time: Tue 02 Dec 2025 12:55:12 +0000 ROA not before: Tue 02 Dec 2025 12:50:12 +0000 ROA not after: Tue 01 Dec 2026 12:55:12 +0000 asID: 1299 IP address blocks: 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:6c:9b:85:e6:b4:be:2c:e5:b1:08:8e:95:32:6b:5d:63:cc:1c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 2 12:50:12 2025 GMT Not After : Dec 1 12:55:12 2026 GMT Subject: CN=24D0190EFFD99C17E14FB0A0F6040C4D785ED68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:ee:52:ca:42:75:a3:24:67:40:e2:ce:60: 47:fd:47:18:d0:cf:3b:bb:84:e0:b1:c9:43:17:ea: 36:e3:0f:76:56:05:85:3a:a6:cf:71:74:0b:e8:a1: cf:79:1e:78:f2:68:7a:f3:31:42:eb:ec:ce:3b:d5: ab:f0:cd:c2:d2:71:1d:40:e4:92:5a:c1:08:21:14: a9:aa:5e:80:81:05:17:24:53:07:b2:7b:34:c9:c9: b9:22:e5:d1:16:db:de:22:51:a8:5d:16:f3:29:8c: 22:3e:73:fb:8b:33:75:2c:ac:8b:13:56:76:fd:58: bf:d8:01:ac:6d:f7:e1:8f:2b:87:1f:76:0d:61:fd: 7f:28:6d:31:58:1c:7f:2f:27:20:d9:74:18:1b:f9: 9e:05:9c:a3:5f:8e:13:f1:0e:ce:23:11:eb:4f:21: a9:2d:42:3b:72:41:cf:80:5d:22:60:df:be:cf:ea: ba:16:ff:51:f6:6f:28:ed:9c:8e:8f:dd:b0:0e:a7: 23:ff:6f:68:81:14:ee:34:f6:aa:45:e8:84:82:e0: 59:ce:e1:da:e7:ed:53:83:bd:98:f5:7f:a4:2a:f3: 04:71:79:12:2c:61:c3:6e:d8:3a:b5:e6:e6:ae:5d: 12:3f:72:f2:a7:d3:25:91:cb:1c:d2:0a:df:31:95: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:19:0E:FF:D9:9C:17:E1:4F:B0:A0:F6:04:0C:4D:78:5E:D6:8B X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption b0:70:10:dc:cf:d9:0e:a8:7b:32:7c:c2:81:a6:23:b9:53:fa: 75:ad:d7:77:8f:0b:7f:48:55:5d:93:4c:80:16:92:5f:4c:b6: 42:0f:6a:ef:56:cb:70:b6:7c:5a:c4:be:fd:38:08:c5:71:be: 8e:84:ba:b9:f6:16:36:96:60:fd:06:03:b9:f9:88:52:1c:26: c8:f1:ae:c0:1d:8c:e1:d7:15:eb:81:50:8b:de:0d:09:15:aa: 7b:dc:a4:a7:60:07:25:73:58:54:58:4f:10:2e:e6:e5:d1:bc: 95:73:be:59:c8:0d:97:41:d1:08:6a:e1:44:d4:ce:0c:0b:e4: 55:57:8f:c6:90:30:b7:54:d2:21:0d:c6:fa:85:cc:45:ac:08: cb:b6:e5:44:e3:4c:a5:23:05:6e:e9:a3:4c:5b:ec:95:3d:c5: 6f:24:86:5d:30:ef:03:c7:40:2a:98:04:78:00:43:d0:14:56: aa:ab:87:c0:52:35:a6:87:8d:5d:0f:61:5c:bd:0f:f4:45:8f: c8:de:33:6c:cf:67:27:b8:cf:5f:19:53:fa:e2:46:84:c8:10: f0:53:f9:3a:45:b1:96:82:93:a0:70:2c:5f:7f:f8:d3:2d:54: d0:56:47:e9:ec:77:d3:1e:c8:11:3a:86:78:af:66:5b:aa:c9: 63:25:68:86 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUSGybhea0vizlsQiOlTJrXWPMHNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEyMDIxMjUwMTJaFw0yNjEyMDExMjU1MTJaMDMxMTAvBgNV BAMTKDI0RDAxOTBFRkZEOTlDMTdFMTRGQjBBMEY2MDQwQzRENzg1RUQ2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IO5SykJ1oyRnQOLOYEf9RxjQ zzu7hOCxyUMX6jbjD3ZWBYU6ps9xdAvooc95HnjyaHrzMULr7M471avwzcLScR1A 5JJawQghFKmqXoCBBRckUweyezTJybki5dEW294iUahdFvMpjCI+c/uLM3UsrIsT Vnb9WL/YAaxt9+GPK4cfdg1h/X8obTFYHH8vJyDZdBgb+Z4FnKNfjhPxDs4jEetP IaktQjtyQc+AXSJg377P6roW/1H2byjtnI6P3bAOpyP/b2iBFO409qpF6ISC4FnO 4drn7VODvZj1f6Qq8wRxeRIsYcNu2Dq15uauXRI/cvKn0yWRyxzSCt8xlTmZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUJNAZDv/ZnBfhT7Cg9gQMTXhe1oswHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEyOTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFZdNIDBAJZdVgDBAJZdYQw DQYJKoZIhvcNAQELBQADggEBALBwENzP2Q6oezJ8woGmI7lT+nWt13ePC39IVV2T TIAWkl9MtkIPau9Wy3C2fFrEvv04CMVxvo6Eurn2FjaWYP0GA7n5iFIcJsjxrsAd jOHXFeuBUIveDQkVqnvcpKdgByVzWFRYTxAu5uXRvJVzvlnIDZdB0Qhq4UTUzgwL 5FVXj8aQMLdU0iENxvqFzEWsCMu25UTjTKUjBW7po0xb7JU9xW8khl0w7wPHQCqY BHgAQ9AUVqqrh8BSNaaHjV0PYVy9D/RFj8jeM2zPZye4z18ZU/riRoTIEPBT+TpF sZaCk6BwLF9/+NMtVNBWR+nsd9MeyBE6hnivZluqyWMlaIY= -----END CERTIFICATE-----Generated at Sat Dec 6 05:50:57 2025 by rpki-client