This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: xF8xdhigkw3Bo9vN43EgZMq7k3OdXW4Tqd+6a/gN/Oc= Subject key identifier: 27:94:0F:03:74:6B:9E:B2:B2:71:85:E9:20:C5:50:B6:D3:0D:46:27 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 0AB2332B0B8B2A3665CE8EF12399E97323887112 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa Signing time: Fri 23 Jan 2026 13:33:05 +0000 ROA not before: Fri 23 Jan 2026 13:28:05 +0000 ROA not after: Fri 22 Jan 2027 13:33:05 +0000 asID: 834 IP address blocks: 84.46.236.0/22 maxlen: 24 86.38.180.0/23 maxlen: 24 86.38.182.0/23 maxlen: 24 86.38.187.0/24 maxlen: 24 86.38.246.0/24 maxlen: 24 89.116.64.0/22 maxlen: 24 89.116.72.0/23 maxlen: 24 89.116.127.0/24 maxlen: 24 89.116.148.0/23 maxlen: 23 89.116.165.0/24 maxlen: 24 89.116.172.0/24 maxlen: 24 89.116.210.0/23 maxlen: 23 89.117.0.0/22 maxlen: 24 89.117.12.0/23 maxlen: 24 89.117.65.0/24 maxlen: 24 89.117.94.0/23 maxlen: 24 89.117.96.0/22 maxlen: 24 89.117.112.0/22 maxlen: 22 89.117.120.0/22 maxlen: 24 89.117.132.0/22 maxlen: 22 89.117.142.0/23 maxlen: 24 89.117.158.0/23 maxlen: 24 89.117.172.0/22 maxlen: 24 89.117.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:33:2b:0b:8b:2a:36:65:ce:8e:f1:23:99:e9:73:23:88:71:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 23 13:28:05 2026 GMT Not After : Jan 22 13:33:05 2027 GMT Subject: CN=27940F03746B9EB2B27185E920C550B6D30D4627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:25:72:0d:80:c9:65:1b:41:29:bc:03:29: da:10:61:1e:8e:f4:b3:a8:5d:54:03:8c:01:cb:f0: 2a:b2:e7:4f:54:b7:b7:53:67:4c:ab:09:7a:3c:2c: ae:aa:cd:fa:3d:28:7b:68:ed:35:01:a1:9d:9e:00: 2b:aa:de:7c:bd:b4:73:7e:f3:fd:9d:62:75:1b:df: cb:7a:88:e7:9e:ae:11:b7:c5:78:6a:fc:85:a5:85: 29:db:ef:0c:31:de:2b:d8:af:13:c1:ef:a8:f6:0e: f9:54:43:a9:01:60:65:05:73:6f:3b:7b:6b:a8:0f: 8e:43:ca:92:87:21:e7:76:66:58:17:da:b0:ac:de: ff:3d:6e:98:b4:7c:16:5a:52:22:f3:aa:9c:11:77: 30:66:98:25:44:6d:e2:6a:07:22:b6:ee:c0:a7:74: 65:f9:1a:a7:e2:e9:b9:40:f7:4a:2b:c2:92:60:e7: bb:6d:77:17:a3:d5:92:ec:62:45:71:a7:96:0c:a5: 9b:75:5a:82:8d:ec:d1:3e:5b:fb:eb:a6:94:ca:f7: 99:35:61:9e:f7:cb:e6:e3:50:9a:a1:be:ff:80:cd: 5f:64:80:ea:05:eb:d8:5d:3e:6e:10:fc:e6:33:1a: ab:7f:bc:fe:1e:cc:3a:fe:c6:89:e7:d0:33:0b:30: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:0F:03:74:6B:9E:B2:B2:71:85:E9:20:C5:50:B6:D3:0D:46:27 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.236.0/22 86.38.180.0/22 86.38.187.0/24 86.38.246.0/24 89.116.64.0/22 89.116.72.0/23 89.116.127.0/24 89.116.148.0/23 89.116.165.0/24 89.116.172.0/24 89.116.210.0/23 89.117.0.0/22 89.117.12.0/23 89.117.65.0/24 89.117.94.0-89.117.99.255 89.117.112.0/22 89.117.120.0/22 89.117.132.0/22 89.117.142.0/23 89.117.158.0/23 89.117.172.0/22 89.117.216.0/23 Signature Algorithm: sha256WithRSAEncryption 81:3e:68:28:9c:eb:3b:08:d1:ae:90:f3:44:38:29:b5:dc:dd: 0e:c8:c9:cc:c0:cc:13:e0:4c:6b:25:fe:4b:b3:71:0a:58:a4: ef:1f:4e:71:cb:05:8c:69:5c:a0:71:9b:41:a2:7a:cf:a8:05: 28:37:12:08:55:85:ab:d5:77:5c:b2:4b:66:be:bd:3a:06:89: 86:57:0c:b7:ad:10:66:91:38:14:d2:af:af:a3:6e:fa:af:04: 0a:76:d3:d1:5e:a8:5a:40:bd:ec:d6:79:ed:85:fe:d7:2d:8a: 93:21:29:c7:63:12:c2:50:8e:90:05:21:b5:c7:d9:91:0d:58: c2:11:7b:5a:63:2c:72:f8:62:72:45:48:05:80:44:41:6e:e4: b8:76:ae:46:5c:47:1a:60:f3:17:ca:3c:79:e7:4a:d5:27:7f: 21:2a:ea:b1:af:2c:3f:ba:6f:9d:fd:14:60:12:9b:2d:40:3a: f4:fa:fc:eb:a7:38:e9:08:9a:b6:a0:ad:f8:ed:f3:96:f0:bd: d6:46:ab:42:59:3d:58:00:48:b7:2e:0f:35:b2:64:9a:f8:2b: 0d:57:27:dd:87:c4:10:16:79:1f:69:22:e4:0f:07:ed:b5:f2: 51:32:68:77:e2:f2:fe:4e:ef:25:70:44:32:a2:48:17:a6:c2: 70:e2:78:a3 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUCrIzKwuLKjZlzo7xI5npcyOIcRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAxMjMxMzI4MDVaFw0yNzAxMjIxMzMzMDVaMDMxMTAvBgNV BAMTKDI3OTQwRjAzNzQ2QjlFQjJCMjcxODVFOTIwQzU1MEI2RDMwRDQ2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInSVyDYDJZRtBKbwDKdoQYR6O 9LOoXVQDjAHL8Cqy509Ut7dTZ0yrCXo8LK6qzfo9KHto7TUBoZ2eACuq3ny9tHN+ 8/2dYnUb38t6iOeerhG3xXhq/IWlhSnb7wwx3ivYrxPB76j2DvlUQ6kBYGUFc287 e2uoD45DypKHIed2ZlgX2rCs3v89bpi0fBZaUiLzqpwRdzBmmCVEbeJqByK27sCn dGX5Gqfi6blA90orwpJg57ttdxej1ZLsYkVxp5YMpZt1WoKN7NE+W/vrppTK95k1 YZ73y+bjUJqhvv+AzV9kgOoF69hdPm4Q/OYzGqt/vP4ezDr+xonn0DMLMJMVAgMB AAGjggK3MIICszAdBgNVHQ4EFgQUJ5QPA3RrnrKycYXpIMVQttMNRicwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjCBqQYIKwYBBQUHAQcBAf8EgZkwgZYwgZMEAgABMIGMAwQCVC7sAwQCVia0AwQA Via7AwQAVib2AwQCWXRAAwQBWXRIAwQAWXR/AwQBWXSUAwQAWXSlAwQAWXSsAwQB WXTSAwQCWXUAAwQBWXUMAwQAWXVBMAwDBAFZdV4DBAJZdWADBAJZdXADBAJZdXgD BAJZdYQDBAFZdY4DBAFZdZ4DBAJZdawDBAFZddgwDQYJKoZIhvcNAQELBQADggEB AIE+aCic6zsI0a6Q80Q4KbXc3Q7IyczAzBPgTGsl/kuzcQpYpO8fTnHLBYxpXKBx m0Gies+oBSg3EghVhavVd1yyS2a+vToGiYZXDLetEGaROBTSr6+jbvqvBAp209Fe qFpAvezWee2F/tctipMhKcdjEsJQjpAFIbXH2ZENWMIRe1pjLHL4YnJFSAWAREFu 5Lh2rkZcRxpg8xfKPHnnStUnfyEq6rGvLD+6b539FGASmy1AOvT6/OunOOkImrag rfjt85bwvdZGq0JZPVgASLcuDzWyZJr4Kw1XJ92HxBAWeR9pIuQPB+218lEyaHfi 8v5O7yVwRDKiSBemwnDieKM= -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:41 2026 by rpki-client