This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: Eajq+UlN5VC8rZxmnAJSeFxNjiZIioxlXRlmtSv9h+k= Subject key identifier: 7C:DC:2E:D9:50:08:0E:EC:3E:95:77:76:D8:17:D9:3F:3F:E4:D4:F1 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 586D846479014B7B959ADBAE8A1AAA188ED306CC Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa Signing time: Fri 23 Jan 2026 12:57:16 +0000 ROA not before: Fri 23 Jan 2026 12:52:16 +0000 ROA not after: Fri 22 Jan 2027 12:57:16 +0000 asID: 214025 IP address blocks: 86.38.156.0/24 maxlen: 24 86.38.184.0/24 maxlen: 24 89.116.8.0/24 maxlen: 24 89.116.184.0/24 maxlen: 24 89.116.237.0/24 maxlen: 24 89.116.252.0/24 maxlen: 24 89.117.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6d:84:64:79:01:4b:7b:95:9a:db:ae:8a:1a:aa:18:8e:d3:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 23 12:52:16 2026 GMT Not After : Jan 22 12:57:16 2027 GMT Subject: CN=7CDC2ED950080EEC3E957776D817D93F3FE4D4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:8c:96:e0:4b:bc:ce:27:b2:e1:50:ab:10: 48:cd:78:03:85:73:01:d9:16:61:2b:3b:2e:d8:09: f9:6d:ae:80:e4:73:99:30:62:bd:d7:35:23:80:46: de:12:ec:cc:15:e7:45:52:30:3c:c8:5f:da:a1:d5: 8c:5a:53:8e:ac:83:b4:29:8b:3e:af:39:de:2a:af: ab:25:48:72:e3:3e:62:64:dc:20:00:d2:77:2f:ed: 25:65:90:10:53:97:21:9f:dc:ed:fe:69:02:88:5d: e6:9c:97:c5:13:3e:54:e3:76:fc:92:1f:9f:dd:af: 1c:d8:ab:7f:b7:59:c9:0a:c7:6e:af:b1:02:63:41: 7d:55:8f:02:49:aa:d3:ff:30:35:df:b5:d4:6d:bd: ff:42:67:cd:78:b2:3a:61:ac:69:2d:bf:33:5b:95: 58:c2:98:e9:2b:f1:b0:a3:5f:96:60:3c:71:34:b6: 71:3c:f4:b2:e4:e0:fa:3d:e8:ae:f4:4f:35:11:14: 5e:90:bb:a8:e1:8a:52:d9:89:2c:a9:2c:5c:1b:4b: 63:e3:e1:56:a3:87:a2:1b:c9:ad:e2:37:c5:30:54: df:be:23:d3:aa:db:9c:ed:f6:3b:55:b7:fd:39:e4: f3:6d:8e:ba:c9:31:6c:18:26:a8:52:30:c8:f7:85: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:2E:D9:50:08:0E:EC:3E:95:77:76:D8:17:D9:3F:3F:E4:D4:F1 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.156.0/24 86.38.184.0/24 89.116.8.0/24 89.116.184.0/24 89.116.237.0/24 89.116.252.0/24 89.117.84.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:a8:2f:03:8d:50:87:aa:d5:9c:3b:87:7d:d5:0a:1c:e3:e7: 09:20:8b:fe:de:ec:d9:c3:95:c6:5d:e3:55:0b:bc:87:81:4a: b4:e4:ea:79:db:91:4c:2a:ba:4f:fc:c0:0f:87:4c:35:f0:a1: 6e:b5:60:a8:b1:98:e8:79:7d:8a:79:93:7d:c9:e8:13:2c:6c: cb:42:ec:f6:47:b2:43:c4:59:5e:36:59:18:ce:6a:9d:ef:b8: 6a:2a:9b:14:e8:e5:a6:a7:65:eb:5f:c5:4b:e4:9f:b7:c2:09: eb:9b:a5:a3:23:a1:87:0b:0a:72:c6:00:51:00:37:2f:2a:6f: d8:ee:e0:2b:ca:31:b8:28:6b:c4:46:56:d2:25:8a:30:c0:f8: 51:17:bd:14:09:a9:bd:f4:be:86:c0:d7:93:e3:01:49:7d:b0: 87:6b:70:dc:58:4f:c6:2c:e3:dc:aa:34:87:4f:81:45:6a:db: b3:1c:b4:e3:ad:8d:f8:33:cd:98:92:af:a4:39:c7:0a:2d:e5: f5:a3:f6:55:6d:22:bf:34:88:cf:e4:b3:85:ff:b2:c4:cd:ec: d1:8b:e9:90:e7:3d:98:14:7b:0a:5e:07:e9:5a:e7:22:57:8c: 25:fe:e8:d7:fa:a2:af:9f:59:8c:d0:9f:00:ee:40:c4:86:03: 4e:ce:a9:9d -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUWG2EZHkBS3uVmtuuihqqGI7TBswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAxMjMxMjUyMTZaFw0yNzAxMjIxMjU3MTZaMDMxMTAvBgNV BAMTKDdDREMyRUQ5NTAwODBFRUMzRTk1Nzc3NkQ4MTdEOTNGM0ZFNEQ0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWoyW4Eu8ziey4VCrEEjNeAOF cwHZFmErOy7YCfltroDkc5kwYr3XNSOARt4S7MwV50VSMDzIX9qh1YxaU46sg7Qp iz6vOd4qr6slSHLjPmJk3CAA0ncv7SVlkBBTlyGf3O3+aQKIXeacl8UTPlTjdvyS H5/drxzYq3+3WckKx26vsQJjQX1VjwJJqtP/MDXftdRtvf9CZ814sjphrGktvzNb lVjCmOkr8bCjX5ZgPHE0tnE89LLk4Po96K70TzURFF6Qu6jhilLZiSypLFwbS2Pj 4Vajh6Ibya3iN8UwVN++I9Oq25zt9jtVt/055PNtjrrJMWwYJqhSMMj3hSsnAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUfNwu2VAIDuw+lXd22BfZPz/k1PEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAFYmnAMEAFYmuAMEAFl0 CAMEAFl0uAMEAFl07QMEAFl0/AMEAFl1VDANBgkqhkiG9w0BAQsFAAOCAQEAW6gv A41Qh6rVnDuHfdUKHOPnCSCL/t7s2cOVxl3jVQu8h4FKtOTqeduRTCq6T/zAD4dM NfChbrVgqLGY6Hl9inmTfcnoEyxsy0Ls9keyQ8RZXjZZGM5qne+4aiqbFOjlpqdl 61/FS+Sft8IJ65uloyOhhwsKcsYAUQA3Lypv2O7gK8oxuChrxEZW0iWKMMD4URe9 FAmpvfS+hsDXk+MBSX2wh2tw3FhPxizj3Ko0h0+BRWrbsxy0462N+DPNmJKvpDnH Ci3l9aP2VW0ivzSIz+Szhf+yxM3s0YvpkOc9mBR7Cl4H6VrnIleMJf7o1/qir59Z jNCfAO5AxIYDTs6pnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:39 2026 by rpki-client