This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: fqVffd8R+BmLxHNNgSusvL0dbHsS2kgGVo1eCOwdWYM= Subject key identifier: A0:2C:60:44:95:CA:A5:73:E7:46:CF:4E:80:C5:8B:BE:64:55:F1:2D Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 463B7C8D702FE0AA0D86A892D1789A5011238C60 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa Signing time: Sat 24 Jan 2026 07:31:00 +0000 ROA not before: Sat 24 Jan 2026 07:26:00 +0000 ROA not after: Sat 23 Jan 2027 07:31:00 +0000 asID: 984 IP address blocks: 86.38.255.0/24 maxlen: 24 89.116.8.0/24 maxlen: 24 89.116.9.0/24 maxlen: 24 89.116.141.0/24 maxlen: 24 89.116.203.0/24 maxlen: 24 89.116.237.0/24 maxlen: 24 89.116.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3b:7c:8d:70:2f:e0:aa:0d:86:a8:92:d1:78:9a:50:11:23:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 24 07:26:00 2026 GMT Not After : Jan 23 07:31:00 2027 GMT Subject: CN=A02C604495CAA573E746CF4E80C58BBE6455F12D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:38:18:cd:67:8a:9d:14:7f:93:46:fe:7f: c7:e9:8c:8a:b1:09:ce:50:aa:68:1d:a8:38:a9:cd: 2a:45:21:fc:65:6f:22:c6:83:a5:f1:0f:21:c4:0f: ca:f9:ae:d5:f6:d0:50:37:8f:18:30:b8:cd:37:86: d8:9e:37:d9:3d:44:30:50:f1:97:0e:32:16:05:7b: b4:b1:50:46:9e:d6:c9:c7:c5:17:bc:81:a6:71:3c: 90:2e:d0:be:69:c6:41:f0:b2:47:f7:c3:ee:5a:3f: b2:e0:dc:35:45:8b:ec:72:d0:34:83:05:96:2b:24: 0e:64:3d:59:b6:b5:22:a8:2d:c4:cb:a3:0b:c2:0d: 6b:f4:e1:02:9f:0e:1d:ad:d9:26:9c:3b:e5:ea:cb: 8d:ef:af:64:f1:ac:90:b6:7b:58:fb:97:5f:94:37: d1:40:26:72:7e:6f:8e:8b:b0:39:e6:26:05:e2:24: 9a:1c:45:19:68:65:24:00:53:d0:d4:cb:bb:1c:fa: a9:ad:ac:19:1b:f8:ff:97:46:f1:54:2f:df:78:18: 8c:ce:99:d7:2a:07:f7:8d:b6:82:2e:4b:34:83:b6: c0:91:8d:02:73:bd:6c:3a:0f:c4:cc:32:55:25:ca: c0:c5:06:6d:24:32:57:87:1e:6c:38:10:95:70:5f: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:60:44:95:CA:A5:73:E7:46:CF:4E:80:C5:8B:BE:64:55:F1:2D X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.255.0/24 89.116.8.0/23 89.116.141.0/24 89.116.203.0/24 89.116.237.0/24 89.116.252.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:a5:19:7f:61:1a:49:0d:88:c3:1b:f9:74:84:83:97:6d:1a: 64:61:ec:14:47:01:74:48:cd:3f:ed:5c:88:92:45:12:7c:1c: b2:d7:54:f5:58:64:cc:48:5f:6a:c6:d3:e4:cc:92:02:77:75: 6c:10:49:58:d1:8a:a9:c7:13:09:83:42:dc:20:4e:8a:83:b4: 3e:6e:a0:15:db:29:b3:0b:e8:53:f6:86:aa:89:51:bc:e3:cf: 3f:24:8f:0d:f0:c1:d3:f6:39:99:99:6f:bf:12:8a:f9:3c:fb: 2b:a1:a0:16:f2:b5:0f:86:87:07:91:eb:28:27:6e:7c:02:ab: 45:c4:46:21:38:84:e1:96:62:d6:e3:1d:4a:b6:6b:dc:ff:77: c7:09:76:cd:6a:61:81:03:04:9d:59:6e:9e:83:c9:02:4e:e4: d4:c6:b8:74:6e:07:7b:16:0b:87:8b:92:87:d6:ff:cd:be:7b: 73:ba:5b:f9:6f:08:93:a6:91:2a:9c:ee:0b:10:ae:3b:3d:8e: 92:63:89:e0:5c:b3:14:53:5d:1b:99:a5:fc:2c:1c:3a:0c:b1: 1b:40:9e:6a:eb:26:17:0c:44:09:2b:ff:f6:97:77:14:57:94: f6:1c:6a:e5:9f:36:1a:10:7c:a6:b6:61:b3:67:2d:d6:10:4f: 7e:26:6d:3b -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgIURjt8jXAv4KoNhqiS0XiaUBEjjGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAxMjQwNzI2MDBaFw0yNzAxMjMwNzMxMDBaMDMxMTAvBgNV BAMTKEEwMkM2MDQ0OTVDQUE1NzNFNzQ2Q0Y0RTgwQzU4QkJFNjQ1NUYxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYTgYzWeKnRR/k0b+f8fpjIqx Cc5QqmgdqDipzSpFIfxlbyLGg6XxDyHED8r5rtX20FA3jxgwuM03htieN9k9RDBQ 8ZcOMhYFe7SxUEae1snHxRe8gaZxPJAu0L5pxkHwskf3w+5aP7Lg3DVFi+xy0DSD BZYrJA5kPVm2tSKoLcTLowvCDWv04QKfDh2t2SacO+Xqy43vr2TxrJC2e1j7l1+U N9FAJnJ+b46LsDnmJgXiJJocRRloZSQAU9DUy7sc+qmtrBkb+P+XRvFUL994GIzO mdcqB/eNtoIuSzSDtsCRjQJzvWw6D8TMMlUlysDFBm0kMleHHmw4EJVwX3+PAgMB AAGjggJKMIICRjAdBgNVHQ4EFgQUoCxgRJXKpXPnRs9OgMWLvmRV8S0wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzk4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFYm/wMEAVl0CAMEAFl0jQME AFl0ywMEAFl07QMEAFl0/DANBgkqhkiG9w0BAQsFAAOCAQEALKUZf2EaSQ2Iwxv5 dISDl20aZGHsFEcBdEjNP+1ciJJFEnwcstdU9VhkzEhfasbT5MySAnd1bBBJWNGK qccTCYNC3CBOioO0Pm6gFdspswvoU/aGqolRvOPPPySPDfDB0/Y5mZlvvxKK+Tz7 K6GgFvK1D4aHB5HrKCdufAKrRcRGITiE4ZZi1uMdSrZr3P93xwl2zWphgQMEnVlu noPJAk7k1Ma4dG4HexYLh4uSh9b/zb57c7pb+W8Ik6aRKpzuCxCuOz2OkmOJ4Fyz FFNdG5ml/CwcOgyxG0CeausmFwxECSv/9pd3FFeU9hxq5Z82GhB8prZhs2ct1hBP fiZtOw== -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:42 2026 by rpki-client