This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa
File: AS214159.roa (raw, json)
Hash identifier: UnT6VlwuGnCMo0p7KOUpSOGj1NONLGhQM2yTMivKXiY=
Subject key identifier: E2:3B:3C:F0:17:D5:10:35:8C:7C:AC:6A:76:CD:5E:FD:70:FA:B3:ED
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 51266044B27FDD1CBA7FF163ADAF1B302A2BD49C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa
Signing time: Thu 25 Dec 2025 17:55:32 +0000
ROA not before: Thu 25 Dec 2025 17:50:32 +0000
ROA not after: Thu 24 Dec 2026 17:55:32 +0000
asID: 214159
IP address blocks: 86.38.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:26:60:44:b2:7f:dd:1c:ba:7f:f1:63:ad:af:1b:30:2a:2b:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Dec 25 17:50:32 2025 GMT
Not After : Dec 24 17:55:32 2026 GMT
Subject: CN=E23B3CF017D510358C7CAC6A76CD5EFD70FAB3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:7d:58:06:f3:48:71:ab:70:1d:c9:5c:dd:
e8:36:8a:c0:a5:32:29:e6:32:8a:d1:c3:13:47:68:
8a:dc:9e:5c:9f:3d:64:68:99:43:c7:fd:0d:ba:8c:
bc:b7:26:ac:b1:f3:f8:76:61:bc:c5:f6:38:65:da:
a5:77:39:bf:fb:68:83:22:8b:c5:2b:a6:a0:7f:be:
a5:76:d4:95:69:df:94:c3:35:27:e4:2d:53:35:96:
09:e3:f7:d2:04:75:3f:7c:2a:4d:81:eb:99:4a:fa:
b5:e3:5f:5d:64:09:28:2e:5b:7d:f8:95:17:49:7d:
25:58:ea:07:cd:1f:31:01:e3:fe:07:01:e6:91:27:
73:a1:e2:c7:99:8e:63:b8:34:6d:28:32:e8:d3:84:
27:7c:0e:81:ee:00:70:52:2d:8d:1b:78:9d:94:e3:
69:cb:1f:03:10:16:5c:12:fd:38:fe:85:46:02:f5:
a4:c3:e8:03:8d:52:c9:dc:8f:95:28:b5:9b:5a:48:
92:e0:c4:ee:65:54:e9:7b:79:26:4b:1d:ef:f8:e6:
7f:0e:6d:e5:05:d7:38:d5:8a:27:75:a6:5b:20:e5:
1b:21:71:42:2c:b7:32:14:c6:59:af:91:35:43:b1:
fa:52:b1:89:78:37:c9:60:03:10:80:fc:87:fe:06:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:3C:F0:17:D5:10:35:8C:7C:AC:6A:76:CD:5E:FD:70:FA:B3:ED
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.253.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b7:32:a3:81:6b:be:56:f6:5d:67:ed:d5:25:7a:88:2c:ba:
41:3b:aa:6c:c9:58:b8:78:35:e5:e5:9d:a6:7e:35:8d:7d:ac:
13:57:04:30:cf:71:20:71:8c:01:20:23:00:bb:cb:e2:00:15:
78:68:5d:f3:e2:14:66:c6:76:e0:8c:c3:09:70:63:55:1c:b4:
5d:7c:c3:dd:03:12:3b:5c:bb:26:b6:4b:02:2f:90:1f:ff:27:
80:3d:cb:e6:0e:0a:a0:d8:29:f2:be:d0:af:d9:60:fd:38:25:
48:5b:85:eb:71:ac:6e:83:51:7b:dd:46:80:f3:f5:5c:96:6d:
3f:7f:45:ce:cd:40:11:ae:77:20:87:22:7b:fb:67:ac:71:df:
7d:04:12:50:39:3c:98:09:a1:e2:b0:1c:fe:dd:e3:b0:49:23:
7c:ae:18:ed:f7:ee:c2:24:0d:14:9b:16:60:12:f0:df:8f:8e:
f1:99:ee:9a:5a:1d:91:d7:62:67:35:05:3a:fa:35:ed:25:43:
b4:ce:d7:74:90:74:78:0d:2e:96:a2:28:53:c2:2c:40:d4:7f:
11:40:38:f9:28:41:64:55:25:c7:f1:17:29:03:58:b7:7c:24:
7f:cb:43:76:9a:cf:8b:08:9e:01:ea:2e:1a:37:04:f2:c1:ad:
32:dd:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:35 2026 by rpki-client