This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 9/ST0pXfUdvW93GAaI/4pwLMW9DfmAFtkl+4O3H+RMU= Subject key identifier: 31:25:02:DA:7C:1D:32:FD:67:95:3F:C5:0A:EA:D0:81:EB:7A:57:33 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2DA1EEBDD3A3940D349147C76BEE5CAA54850366 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa Signing time: Mon 29 Dec 2025 00:00:28 +0000 ROA not before: Sun 28 Dec 2025 23:55:28 +0000 ROA not after: Mon 28 Dec 2026 00:00:28 +0000 asID: 16509 IP address blocks: 89.117.15.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.87.0/24 maxlen: 24 89.117.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 12:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a1:ee:bd:d3:a3:94:0d:34:91:47:c7:6b:ee:5c:aa:54:85:03:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 28 23:55:28 2025 GMT Not After : Dec 28 00:00:28 2026 GMT Subject: CN=312502DA7C1D32FD67953FC50AEAD081EB7A5733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:26:ec:b8:e9:9c:86:f0:61:2b:cd:72:ff: 0c:dd:7c:d2:f9:0d:3a:c0:44:c4:ee:8e:96:e1:37: 36:73:1f:4b:6f:0c:e3:a8:22:69:ce:0a:c9:3c:9b: 5b:69:e0:00:e3:f9:78:09:25:a0:d7:b9:3e:e3:63: f4:45:bc:d3:8d:aa:5b:95:8f:8c:d5:57:18:b2:b2: 8c:8f:c7:de:b2:96:89:76:17:8b:5c:46:b2:c7:1d: 48:42:cd:45:82:87:e3:00:a5:ef:65:d1:ef:28:a6: 39:b9:9c:13:bf:3b:89:db:f8:45:73:e5:72:70:63: 35:00:76:8d:04:a5:b5:d5:ea:8c:e1:8b:41:be:f0: 20:fc:c8:66:ef:47:d6:32:7d:52:53:bb:64:da:93: f8:a2:33:82:1a:68:b5:17:30:e6:28:24:ec:3d:80: 42:97:62:8f:c7:51:67:9d:6a:12:49:86:b8:0d:c0: e4:4a:da:0e:04:39:c9:fe:f9:95:74:ab:f7:21:6a: f4:34:ca:52:c3:b7:a7:a7:2f:30:94:18:e3:7e:dc: de:3f:0c:59:13:79:1f:1f:d1:03:fb:84:d1:74:b9: 46:10:36:91:83:d4:7d:11:59:77:7b:3c:9a:97:09: bc:41:21:c5:29:83:ca:89:53:97:84:80:4b:57:95: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:02:DA:7C:1D:32:FD:67:95:3F:C5:0A:EA:D0:81:EB:7A:57:33 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.15.0/24 89.117.28.0/24 89.117.87.0/24 89.117.153.0/24 Signature Algorithm: sha256WithRSAEncryption 69:62:0b:76:0f:2f:60:cb:a5:f4:49:40:38:1c:4b:63:03:7c: 3d:d0:5b:87:4c:20:0a:65:54:22:42:9a:44:e6:ef:ac:c2:ae: 7a:d6:f1:a8:49:b5:32:07:3a:27:83:ff:28:5a:f8:d2:d0:57: 2e:c1:29:e9:6f:99:c7:47:33:c1:42:95:a5:14:ce:35:c3:05: 1c:72:65:37:6f:e6:cf:51:55:f7:a5:0a:1a:4f:09:cd:46:09: 25:64:c0:b2:db:60:93:7b:df:33:08:d1:00:6f:a2:0e:a8:62: e3:74:84:2d:ba:cd:ef:fb:7b:5c:85:d0:ef:11:70:17:40:d1: b6:44:a5:93:d0:df:fa:2d:9b:1f:34:79:77:51:eb:26:41:d0: e6:fd:68:4b:b0:88:54:1c:01:7e:d0:94:ed:07:c6:03:02:b6: 60:36:91:cc:bb:51:86:04:ff:40:75:d6:81:77:cc:ee:44:02: 02:5a:18:ef:21:30:34:87:f2:6d:b0:f2:fb:9b:b3:7f:1e:ea: 32:c5:3d:77:3e:62:07:85:97:67:11:7b:03:59:71:9d:83:1e: 06:28:4a:84:6c:5f:36:78:8b:d5:dd:a4:78:5e:e2:e2:07:57: 36:64:25:1b:c0:f0:07:e8:7a:61:14:cb:14:ef:8b:50:d6:e0: a4:e1:07:5a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIULaHuvdOjlA00kUfHa+5cqlSFA2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEyMjgyMzU1MjhaFw0yNjEyMjgwMDAwMjhaMDMxMTAvBgNV BAMTKDMxMjUwMkRBN0MxRDMyRkQ2Nzk1M0ZDNTBBRUFEMDgxRUI3QTU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/SbsuOmchvBhK81y/wzdfNL5 DTrARMTujpbhNzZzH0tvDOOoImnOCsk8m1tp4ADj+XgJJaDXuT7jY/RFvNONqluV j4zVVxiysoyPx96ylol2F4tcRrLHHUhCzUWCh+MApe9l0e8opjm5nBO/O4nb+EVz 5XJwYzUAdo0EpbXV6ozhi0G+8CD8yGbvR9YyfVJTu2Tak/iiM4IaaLUXMOYoJOw9 gEKXYo/HUWedahJJhrgNwORK2g4EOcn++ZV0q/chavQ0ylLDt6enLzCUGON+3N4/ DFkTeR8f0QP7hNF0uUYQNpGD1H0RWXd7PJqXCbxBIcUpg8qJU5eEgEtXleTFAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUMSUC2nwdMv1nlT/FCurQget6VzMwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWXUPAwQAWXUcAwQAWXVX AwQAWXWZMA0GCSqGSIb3DQEBCwUAA4IBAQBpYgt2Dy9gy6X0SUA4HEtjA3w90FuH TCAKZVQiQppE5u+swq561vGoSbUyBzong/8oWvjS0FcuwSnpb5nHRzPBQpWlFM41 wwUccmU3b+bPUVX3pQoaTwnNRgklZMCy22CTe98zCNEAb6IOqGLjdIQtus3v+3tc hdDvEXAXQNG2RKWT0N/6LZsfNHl3UesmQdDm/WhLsIhUHAF+0JTtB8YDArZgNpHM u1GGBP9AddaBd8zuRAICWhjvITA0h/JtsPL7m7N/HuoyxT13PmIHhZdnEXsDWXGd gx4GKEqEbF82eIvV3aR4XuLiB1c2ZCUbwPAH6HphFMsU74tQ1uCk4Qda -----END CERTIFICATE-----Generated at Sun Jan 25 04:17:58 2026 by rpki-client