This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa
File: AS17497.roa (raw, json)
Hash identifier: 8P+gM9t/A0K289W8SaFleZSY0M3VwfHDtQWJionAulk=
Subject key identifier: 59:B6:A9:83:90:59:94:B2:F7:C8:9F:43:C0:51:32:0E:84:A7:49:11
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 309D7A465224917014F3BEC54382DC5B3C3A982A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa
Signing time: Sat 24 Jan 2026 07:39:07 +0000
ROA not before: Sat 24 Jan 2026 07:34:07 +0000
ROA not after: Sat 23 Jan 2027 07:39:07 +0000
asID: 17497
IP address blocks: 89.116.184.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9d:7a:46:52:24:91:70:14:f3:be:c5:43:82:dc:5b:3c:3a:98:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jan 24 07:34:07 2026 GMT
Not After : Jan 23 07:39:07 2027 GMT
Subject: CN=59B6A983905994B2F7C89F43C051320E84A74911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:3e:c9:a5:d5:1d:cc:44:66:ab:81:14:8b:
1f:cd:da:e9:4f:6d:ca:2a:3d:8f:38:b1:5e:fd:3b:
bc:40:b8:2f:ca:ce:58:ae:f7:34:94:1f:c9:5b:01:
6b:6b:f0:94:9d:c2:12:82:e6:04:c5:4f:67:17:87:
be:81:31:68:d2:ce:3d:c9:f5:f3:a8:60:42:b4:60:
57:e3:d7:86:d9:4d:98:a8:9c:2f:c9:2c:94:65:d5:
01:61:94:43:8f:88:6e:21:6b:66:1b:df:6d:0e:0c:
ec:6b:d6:b5:3d:88:21:2c:f5:c5:40:4d:b7:5f:ea:
32:21:b8:f1:f4:35:b9:35:0b:d8:f9:68:3f:38:0c:
09:6a:78:0c:60:62:fb:30:67:4c:b9:a2:45:c7:e8:
a8:52:4d:61:2c:91:58:09:94:a0:10:cd:3d:a2:db:
f6:ea:67:5d:35:54:e2:7f:1b:2e:ba:35:b2:28:2e:
97:c2:db:5a:05:72:d6:e9:56:cd:e2:32:1a:92:f2:
fb:62:8e:77:87:73:1e:07:e3:ce:87:88:46:2e:5e:
dc:9f:e7:dc:2c:5b:25:48:d6:b3:ae:d1:6d:0c:9f:
88:ec:13:42:3e:98:77:66:24:5c:1b:6d:0c:ee:fd:
e8:35:b5:da:2f:34:52:29:a5:f2:40:5c:5e:3a:24:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:A9:83:90:59:94:B2:F7:C8:9F:43:C0:51:32:0E:84:A7:49:11
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.184.0/24
89.116.252.0/24
89.117.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c3:af:a5:31:cf:4a:4d:98:04:cb:2f:a9:93:e7:45:81:eb:
a6:c3:16:03:cc:e4:b2:e7:ea:54:b5:a8:e4:94:79:1f:27:02:
f3:ea:5c:fa:04:62:4d:0a:35:9f:43:1e:fa:c6:12:5e:9f:ba:
f6:ca:10:fd:f4:cd:6d:b5:63:3b:ad:a9:d5:8a:dd:fe:9c:ba:
77:35:85:92:b3:e4:09:91:26:4b:25:93:10:1d:a8:64:89:8f:
93:b0:8b:fe:73:ea:45:81:6e:1a:a0:78:8e:df:10:b4:ba:c0:
3a:ce:44:5d:b2:c6:7a:e5:6f:5f:d8:15:95:3e:b0:16:63:a3:
37:97:bf:5d:c0:96:0a:1d:a9:14:68:81:48:6b:f7:c3:d5:75:
c0:e7:28:f3:00:3c:46:28:db:15:57:e7:b9:47:01:8e:d0:40:
c6:62:7b:fb:80:b2:00:bb:26:54:41:7c:6f:d6:66:7b:c1:70:
d3:8a:85:2e:a1:45:72:8f:d9:1e:13:50:d9:2b:fc:a9:4e:e1:
d8:5a:c9:e7:2a:c9:eb:b9:a0:22:92:b6:a2:a1:86:98:87:2a:
d6:cc:41:38:cb:a7:0b:c9:6d:8c:48:7c:9c:76:5c:81:5e:5b:
0e:ae:6c:26:1f:b9:92:21:75:34:bb:f7:f5:ee:e6:25:6e:f8:
a5:52:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:27 2026 by rpki-client