This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401322.roa File: AS401322.roa (raw, json) Hash identifier: JqHo+yTaUfvBVo5DGciAbqq+RUg2ChkhVINpfnN1PCw= Subject key identifier: 59:6F:90:46:EC:3E:1D:54:61:C0:95:0A:4B:61:5B:2F:88:21:B1:BF Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 355E9C78D21D7F5051B614E1845C14FE8EEF5DAA Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401322.roa Signing time: Sat 24 Jan 2026 13:17:35 +0000 ROA not before: Sat 24 Jan 2026 13:12:35 +0000 ROA not after: Sat 23 Jan 2027 13:17:35 +0000 asID: 401322 IP address blocks: 86.38.156.0/24 maxlen: 24 89.116.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5e:9c:78:d2:1d:7f:50:51:b6:14:e1:84:5c:14:fe:8e:ef:5d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 24 13:12:35 2026 GMT Not After : Jan 23 13:17:35 2027 GMT Subject: CN=596F9046EC3E1D5461C0950A4B615B2F8821B1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:2d:5a:87:a5:a2:12:c6:c5:1b:0f:20:f2: 4d:d7:89:25:b7:79:09:51:ea:36:2c:cd:3f:c6:1e: 28:23:67:ef:cb:ab:01:6c:d4:43:1a:ef:58:4c:d0: b7:9f:ee:e5:cd:55:15:79:4b:31:26:d2:94:ec:93: 37:04:c6:3e:32:8c:f6:91:56:c5:d4:53:8b:39:19: 5a:c0:e1:04:c3:da:02:dd:1e:36:42:99:11:40:08: 0f:ce:70:bb:22:5a:2e:9b:98:85:33:16:80:54:9a: 85:25:ea:d9:04:e8:16:ee:7d:27:08:00:a2:2e:f6: 56:29:8b:1e:fc:c0:00:82:b7:97:1c:2d:b5:a0:f4: f0:f0:3e:de:4f:7f:41:07:b1:87:86:db:08:2b:3c: 17:f3:ba:42:9f:e4:ea:4b:7a:fe:ce:a8:1d:14:42: 68:cd:dd:d4:ee:27:cf:da:a4:2a:d4:1d:af:0d:69: e4:33:24:7b:2b:c5:78:19:8c:0e:28:29:65:80:c9: 07:a1:ea:b8:f1:cc:05:63:3e:1c:74:69:93:c9:03: 94:f9:66:91:9f:66:c1:6e:dd:97:b8:19:44:1b:6a: 62:3b:75:ca:26:cc:3f:1a:65:cd:39:e3:58:2b:55: 77:05:fa:e2:24:ab:7b:dc:9a:2b:69:e1:9f:18:d9: a6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6F:90:46:EC:3E:1D:54:61:C0:95:0A:4B:61:5B:2F:88:21:B1:BF X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.156.0/24 89.116.11.0/24 Signature Algorithm: sha256WithRSAEncryption d6:94:f0:b7:cc:01:f6:43:9e:f2:4a:7f:e3:8b:50:bf:eb:5e: 69:40:a1:1b:dd:fe:42:68:21:a7:d7:4a:a8:06:14:3e:98:f3: b2:e0:19:9c:2c:e7:2f:24:d2:17:c1:12:1d:e9:27:a4:f4:f1: be:db:2f:e7:30:87:50:6b:2f:96:1c:11:4e:b9:fb:d2:19:9c: 37:c6:63:0b:2c:9e:24:4c:7c:12:79:a5:08:a4:e8:8d:43:fa: bb:6f:f6:c7:57:6c:17:f9:af:97:90:e9:eb:98:3d:24:0a:6e: 8c:9b:3d:3f:9e:ec:57:40:0f:53:87:61:c2:96:37:9b:c4:d3: d1:63:98:ef:9e:f1:5c:e9:53:ed:e4:b8:8f:0e:8e:6d:54:75: 3d:80:72:a8:dc:7c:81:6e:8a:45:e7:ef:14:99:40:0d:04:cc: 0a:0b:c1:66:b3:2c:ba:0f:53:88:ac:a9:7e:31:78:98:ec:d9: 31:fa:c0:fc:32:81:c3:eb:bf:bf:dc:70:90:76:77:48:dd:cb: 4d:7f:10:d6:97:59:29:1f:d5:7d:5d:cf:2e:56:c4:3a:b3:8b: d7:c2:f7:a3:a5:16:03:83:ff:c6:dd:9b:58:f9:ef:de:14:6e: 0c:2f:17:b7:b6:84:bf:a8:d1:27:e0:e3:ab:51:6c:f6:cb:a0: 0d:99:92:54 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUNV6ceNIdf1BRthThhFwU/o7vXaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAxMjQxMzEyMzVaFw0yNzAxMjMxMzE3MzVaMDMxMTAvBgNV BAMTKDU5NkY5MDQ2RUMzRTFENTQ2MUMwOTUwQTRCNjE1QjJGODgyMUIxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqS1ah6WiEsbFGw8g8k3XiSW3 eQlR6jYszT/GHigjZ+/LqwFs1EMa71hM0Lef7uXNVRV5SzEm0pTskzcExj4yjPaR VsXUU4s5GVrA4QTD2gLdHjZCmRFACA/OcLsiWi6bmIUzFoBUmoUl6tkE6BbufScI AKIu9lYpix78wACCt5ccLbWg9PDwPt5Pf0EHsYeG2wgrPBfzukKf5OpLev7OqB0U QmjN3dTuJ8/apCrUHa8NaeQzJHsrxXgZjA4oKWWAyQeh6rjxzAVjPhx0aZPJA5T5 ZpGfZsFu3Ze4GUQbamI7dcomzD8aZc0541grVXcF+uIkq3vcmitp4Z8Y2aY1AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUWW+QRuw+HVRhwJUKS2FbL4ghsb8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQwMTMyMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFYmnAMEAFl0CzANBgkq hkiG9w0BAQsFAAOCAQEA1pTwt8wB9kOe8kp/44tQv+teaUChG93+Qmghp9dKqAYU PpjzsuAZnCznLyTSF8ESHeknpPTxvtsv5zCHUGsvlhwRTrn70hmcN8ZjCyyeJEx8 EnmlCKTojUP6u2/2x1dsF/mvl5Dp65g9JApujJs9P57sV0APU4dhwpY3m8TT0WOY 757xXOlT7eS4jw6ObVR1PYByqNx8gW6KRefvFJlADQTMCgvBZrMsug9TiKypfjF4 mOzZMfrA/DKBw+u/v9xwkHZ3SN3LTX8Q1pdZKR/VfV3PLlbEOrOL18L3o6UWA4P/ xt2bWPnv3hRuDC8Xt7aEv6jRJ+Djq1Fs9sugDZmSVA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:26 2026 by rpki-client