This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: hl54suL6/95YaLlT5Gbto/FDMXCZyeWjX85nyFavtQY= Subject key identifier: CF:32:31:51:AB:84:A6:56:BE:27:A1:CD:D3:93:84:04:E5:24:CC:87 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 72B00324162DD3DF17286C211C0BA507A0D9CCE4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa Signing time: Tue 02 Dec 2025 08:25:05 +0000 ROA not before: Tue 02 Dec 2025 08:20:05 +0000 ROA not after: Tue 01 Dec 2026 08:25:05 +0000 asID: 834 IP address blocks: 84.46.236.0/22 maxlen: 24 86.38.180.0/23 maxlen: 24 86.38.182.0/23 maxlen: 24 86.38.187.0/24 maxlen: 24 86.38.246.0/24 maxlen: 24 89.116.8.0/22 maxlen: 24 89.116.45.0/24 maxlen: 24 89.116.64.0/22 maxlen: 24 89.116.72.0/23 maxlen: 24 89.116.127.0/24 maxlen: 24 89.116.148.0/23 maxlen: 23 89.116.165.0/24 maxlen: 24 89.116.210.0/23 maxlen: 23 89.117.0.0/22 maxlen: 24 89.117.12.0/23 maxlen: 24 89.117.81.0/24 maxlen: 24 89.117.84.0/24 maxlen: 24 89.117.94.0/23 maxlen: 24 89.117.96.0/22 maxlen: 24 89.117.112.0/22 maxlen: 22 89.117.120.0/22 maxlen: 24 89.117.132.0/22 maxlen: 22 89.117.142.0/23 maxlen: 24 89.117.158.0/23 maxlen: 24 89.117.172.0/22 maxlen: 24 89.117.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b0:03:24:16:2d:d3:df:17:28:6c:21:1c:0b:a5:07:a0:d9:cc:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 2 08:20:05 2025 GMT Not After : Dec 1 08:25:05 2026 GMT Subject: CN=CF323151AB84A656BE27A1CDD3938404E524CC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:0b:74:ae:33:65:10:21:de:7d:b1:ea:d2: 72:cc:11:48:28:7d:3e:60:73:6a:40:0b:90:8e:06: e0:0d:8b:17:86:05:35:d2:46:68:9e:86:90:6d:34: c6:48:45:9b:aa:d1:46:c5:6b:bb:e9:b2:be:1e:d7: 9c:12:3a:31:aa:43:32:14:65:3e:28:31:10:40:01: 55:e1:c0:e2:8f:b5:e0:91:54:13:39:ee:a0:4e:a4: 80:98:4b:7a:30:8a:d3:de:44:d4:d0:39:74:dd:0e: 51:a9:c8:70:a4:af:f5:96:ec:0c:0e:f5:ad:6b:85: 5b:34:bd:b9:31:0b:4b:01:8e:61:c5:cc:34:c7:77: cc:81:25:aa:94:cf:e8:25:a6:b5:47:d0:8f:ad:6a: 8f:95:b3:e5:a9:20:46:cc:48:3e:0d:16:1f:85:87: ef:d4:40:93:c2:2a:64:cf:e7:c0:9a:28:31:47:33: 66:64:2c:a7:a2:25:71:2e:ab:ce:8c:e5:97:c9:26: ae:8b:5e:e6:8e:72:12:ac:0d:c7:73:9e:e5:2b:40: 13:0d:3b:46:f8:cd:84:67:86:7c:61:f0:12:89:d5: 1c:4a:49:0d:24:a6:e0:41:a8:6f:a8:88:cd:16:0f: ed:e8:66:b8:20:0a:5b:ef:79:bf:3f:36:6f:d7:43: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:31:51:AB:84:A6:56:BE:27:A1:CD:D3:93:84:04:E5:24:CC:87 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.236.0/22 86.38.180.0/22 86.38.187.0/24 86.38.246.0/24 89.116.8.0/22 89.116.45.0/24 89.116.64.0/22 89.116.72.0/23 89.116.127.0/24 89.116.148.0/23 89.116.165.0/24 89.116.210.0/23 89.117.0.0/22 89.117.12.0/23 89.117.81.0/24 89.117.84.0/24 89.117.94.0-89.117.99.255 89.117.112.0/22 89.117.120.0/22 89.117.132.0/22 89.117.142.0/23 89.117.158.0/23 89.117.172.0/22 89.117.216.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:b0:a8:9c:7c:95:90:3d:6c:4b:25:c3:20:4a:e4:65:28:24: 58:fc:d8:e3:89:c5:0a:40:a7:79:9a:2c:24:81:84:9e:9c:09: e7:cf:bf:27:d7:63:c3:1b:90:28:66:82:4a:b9:a2:94:c3:bb: b8:8f:0e:cc:81:60:78:a2:52:14:c1:f9:ad:ca:de:85:6a:ec: c1:24:8c:3c:a6:52:26:49:74:13:e5:ed:a5:d9:9a:fc:61:0b: 8b:fa:19:d8:2e:15:ac:23:f0:8b:48:28:11:87:86:37:95:96: b7:3b:55:3d:a6:ae:73:21:fc:96:c8:83:c8:1f:d3:1e:f3:c9: 6d:d1:d2:73:86:b1:a0:bd:6d:01:22:e6:48:c7:b0:8c:56:10: 3f:36:c3:3e:c1:c7:54:93:20:aa:01:0b:d4:69:b7:21:fc:e5: 98:14:be:25:eb:a4:11:8f:2c:cf:51:72:ad:28:d2:f5:c4:bb: 7c:bb:9f:ca:a0:d6:ea:42:bb:f6:8b:49:b3:1b:c9:1d:34:24: 27:df:37:fc:04:29:d9:3a:00:34:a4:05:b1:02:a7:40:81:3d: 89:dc:c2:75:0f:d6:d1:d3:18:ac:10:ed:5b:3e:37:3d:aa:c8: 77:ca:52:c5:68:1f:d0:f1:63:8d:be:26:b1:6f:5e:40:e9:ee: 94:09:09:55 -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUcrADJBYt098XKGwhHAulB6DZzOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEyMDIwODIwMDVaFw0yNjEyMDEwODI1MDVaMDMxMTAvBgNV BAMTKENGMzIzMTUxQUI4NEE2NTZCRTI3QTFDREQzOTM4NDA0RTUyNENDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8gt0rjNlECHefbHq0nLMEUgo fT5gc2pAC5COBuANixeGBTXSRmiehpBtNMZIRZuq0UbFa7vpsr4e15wSOjGqQzIU ZT4oMRBAAVXhwOKPteCRVBM57qBOpICYS3owitPeRNTQOXTdDlGpyHCkr/WW7AwO 9a1rhVs0vbkxC0sBjmHFzDTHd8yBJaqUz+glprVH0I+tao+Vs+WpIEbMSD4NFh+F h+/UQJPCKmTP58CaKDFHM2ZkLKeiJXEuq86M5ZfJJq6LXuaOchKsDcdznuUrQBMN O0b4zYRnhnxh8BKJ1RxKSQ0kpuBBqG+oiM0WD+3oZrggClvveb8/Nm/XQ0tjAgMB AAGjggLDMIICvzAdBgNVHQ4EFgQUzzIxUauEpla+J6HN05OEBOUkzIcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjCBtQYIKwYBBQUHAQcBAf8EgaUwgaIwgZ8EAgABMIGYAwQCVC7sAwQCVia0AwQA Via7AwQAVib2AwQCWXQIAwQAWXQtAwQCWXRAAwQBWXRIAwQAWXR/AwQBWXSUAwQA WXSlAwQBWXTSAwQCWXUAAwQBWXUMAwQAWXVRAwQAWXVUMAwDBAFZdV4DBAJZdWAD BAJZdXADBAJZdXgDBAJZdYQDBAFZdY4DBAFZdZ4DBAJZdawDBAFZddgwDQYJKoZI hvcNAQELBQADggEBAAuwqJx8lZA9bEslwyBK5GUoJFj82OOJxQpAp3maLCSBhJ6c CefPvyfXY8MbkChmgkq5opTDu7iPDsyBYHiiUhTB+a3K3oVq7MEkjDymUiZJdBPl 7aXZmvxhC4v6GdguFawj8ItIKBGHhjeVlrc7VT2mrnMh/JbIg8gf0x7zyW3R0nOG saC9bQEi5kjHsIxWED82wz7Bx1STIKoBC9RptyH85ZgUviXrpBGPLM9Rcq0o0vXE u3y7n8qg1upCu/aLSbMbyR00JCffN/wEKdk6ADSkBbECp0CBPYncwnUP1tHTGKwQ 7Vs+Nz2qyHfKUsVoH9DxY42+JrFvXkDp7pQJCVU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:47 2025 by rpki-client