This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa File: AS207152.roa (raw, json) Hash identifier: rXafXHQ277s0w/P1qTge3dXp5QmDDuqilwg4ImWdjJM= Subject key identifier: 31:9F:E9:94:12:80:BE:F9:99:47:49:42:3E:D9:8B:E5:6D:7A:15:0E Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 20DBD10A2E6167F320FC68FAA9A76710971F7456 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa Signing time: Tue 02 Dec 2025 12:55:12 +0000 ROA not before: Tue 02 Dec 2025 12:50:12 +0000 ROA not after: Tue 01 Dec 2026 12:55:12 +0000 asID: 207152 IP address blocks: 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 86.38.246.0/23 maxlen: 24 89.116.172.0/23 maxlen: 24 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:db:d1:0a:2e:61:67:f3:20:fc:68:fa:a9:a7:67:10:97:1f:74:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 2 12:50:12 2025 GMT Not After : Dec 1 12:55:12 2026 GMT Subject: CN=319FE9941280BEF9994749423ED98BE56D7A150E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:79:9c:53:02:a5:af:54:f1:b6:cf:b8:da: 6f:31:05:03:bc:89:56:7e:87:69:d0:7f:4e:e2:d5: 7a:cc:c3:e5:85:73:cc:0d:f2:45:44:63:09:9b:ff: d2:2f:51:05:0c:a8:fc:90:94:23:dd:bf:6f:1a:0a: f8:95:08:79:a8:5e:b7:1b:70:bb:09:8f:a0:b4:f8: 50:d9:1f:a8:e5:c4:a0:73:11:66:eb:8e:3d:d9:e7: 0b:17:e3:b3:a7:3e:54:76:c5:e6:37:5c:9c:e1:21: 3f:b4:3b:85:ac:ea:12:a1:f1:b8:bb:e7:78:34:ce: 08:38:96:5a:84:a5:4d:6e:d8:42:07:06:6f:90:6d: 08:24:35:b7:00:b5:fa:40:16:c2:dd:f7:96:cb:a1: 28:7e:b3:fb:46:40:d5:77:11:cc:f0:14:47:06:10: 75:16:34:f3:4f:08:c6:b4:de:6f:c6:81:ca:5e:66: 1c:ad:f2:14:6a:32:b6:a9:93:01:ec:f1:b5:73:57: 0c:37:b2:08:a8:70:96:97:0b:f5:28:14:75:c6:60: 60:c0:96:24:ee:fd:8b:04:18:8f:d4:40:84:42:e7: fe:02:e8:65:cc:69:7b:80:15:49:5d:dc:cb:26:00: 56:23:04:11:d1:93:23:45:d3:78:16:ed:2e:0d:75: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9F:E9:94:12:80:BE:F9:99:47:49:42:3E:D9:8B:E5:6D:7A:15:0E X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/22 86.38.246.0/23 89.116.172.0/23 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption a7:ad:fc:a5:cd:44:a8:df:3a:a8:ec:c2:ea:7c:f1:0d:86:b9: 8f:ab:5a:15:bf:23:4a:d9:47:01:fb:5d:dc:d0:e4:01:27:33: 8a:cb:a2:16:be:62:ea:12:85:0d:4f:32:6d:21:7e:5d:92:13: 3a:78:0f:79:99:df:81:21:45:b3:b3:fc:d2:33:c5:5c:eb:05: f7:07:6b:a9:ba:5c:ac:99:54:81:bc:e7:e7:0a:45:38:38:9d: 46:56:bc:67:e5:cb:7f:86:8b:1b:1f:92:70:7a:16:75:17:dc: 6e:21:f3:1f:b8:95:d9:2a:d9:e0:44:38:8d:0e:7d:5e:73:9a: 59:9d:88:b5:c9:ef:df:1a:21:e0:3d:f6:cc:ee:77:55:88:6b: 3c:8a:0c:e6:48:a2:f3:c1:98:40:73:20:4b:aa:ef:99:68:57: 6f:cd:3d:69:b4:fd:b9:48:ae:9f:71:9b:15:64:a3:1f:5b:cc: 43:c6:23:2b:12:65:b1:49:af:93:14:83:80:8c:88:c2:52:87: 1f:79:6c:2d:ef:e1:bd:9d:61:4e:99:b0:77:ab:dd:26:3b:68: ef:d3:de:00:6b:38:fd:bf:49:0f:7f:8e:a5:2e:23:75:0a:77: 75:5c:39:e6:8e:58:8f:2a:44:62:0e:ed:48:bb:59:34:4a:47: 1c:e8:62:1e -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUINvRCi5hZ/Mg/Gj6qadnEJcfdFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEyMDIxMjUwMTJaFw0yNjEyMDExMjU1MTJaMDMxMTAvBgNV BAMTKDMxOUZFOTk0MTI4MEJFRjk5OTQ3NDk0MjNFRDk4QkU1NkQ3QTE1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaT3mcUwKlr1Txts+42m8xBQO8 iVZ+h2nQf07i1XrMw+WFc8wN8kVEYwmb/9IvUQUMqPyQlCPdv28aCviVCHmoXrcb cLsJj6C0+FDZH6jlxKBzEWbrjj3Z5wsX47OnPlR2xeY3XJzhIT+0O4Ws6hKh8bi7 53g0zgg4llqEpU1u2EIHBm+QbQgkNbcAtfpAFsLd95bLoSh+s/tGQNV3EczwFEcG EHUWNPNPCMa03m/GgcpeZhyt8hRqMrapkwHs8bVzVww3sgiocJaXC/UoFHXGYGDA liTu/YsEGI/UQIRC5/4C6GXMaXuAFUld3MsmAFYjBBHRkyNF03gW7S4NdYp7AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUMZ/plBKAvvmZR0lCPtmL5W16FQ4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNzE1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAlYmuAMEAVYm9gMEAVl0 rAMEAVl00gMEAll1WAMEAll1hDANBgkqhkiG9w0BAQsFAAOCAQEAp638pc1EqN86 qOzC6nzxDYa5j6taFb8jStlHAftd3NDkASczisuiFr5i6hKFDU8ybSF+XZITOngP eZnfgSFFs7P80jPFXOsF9wdrqbpcrJlUgbzn5wpFODidRla8Z+XLf4aLGx+ScHoW dRfcbiHzH7iV2SrZ4EQ4jQ59XnOaWZ2Itcnv3xoh4D32zO53VYhrPIoM5kii88GY QHMgS6rvmWhXb809abT9uUiun3GbFWSjH1vMQ8YjKxJlsUmvkxSDgIyIwlKHH3ls Le/hvZ1hTpmwd6vdJjto79PeAGs4/b9JD3+OpS4jdQp3dVw55o5YjypEYg7tSLtZ NEpHHOhiHg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:52 2025 by rpki-client