This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323134303235.roa File: 33372e312e3232342e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: yeFf6YN4xrEHHqlxBoO8ywEgJPJEmVhVosQGRHIGLIQ= Subject key identifier: BB:87:97:BC:9D:16:A4:77:BB:58:4F:5F:61:1C:A9:BE:9F:77:00:4E Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 5FC3C11D245F6DE09285846DE77A7EA37A94E68A Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323134303235.roa Signing time: Sat 13 Dec 2025 07:58:05 +0000 ROA not before: Sat 13 Dec 2025 07:53:05 +0000 ROA not after: Sat 12 Dec 2026 07:58:05 +0000 asID: 214025 IP address blocks: 37.1.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 21:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c3:c1:1d:24:5f:6d:e0:92:85:84:6d:e7:7a:7e:a3:7a:94:e6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 13 07:53:05 2025 GMT Not After : Dec 12 07:58:05 2026 GMT Subject: CN=BB8797BC9D16A477BB584F5F611CA9BE9F77004E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:fb:cd:5e:e4:e1:af:5d:a7:ec:e9:43:2e: b0:cd:f6:18:4f:60:68:6a:02:20:46:b6:27:a0:28: 64:1d:39:1f:3d:f6:30:09:b3:79:7c:c4:80:f5:0d: 52:c8:5f:2c:0e:3e:20:98:2a:2a:54:c4:08:73:5d: 20:8d:a5:00:06:55:6b:b3:3e:3b:2a:5e:70:42:37: d7:d1:b0:a0:17:8c:74:c3:1f:5c:71:0e:34:ac:cc: 0e:71:c0:0d:4c:66:7c:99:1b:b2:12:f4:30:44:eb: 8e:b2:8b:62:84:87:9f:1f:c9:9a:59:80:f5:68:ca: 03:66:bc:82:4d:f6:5f:59:7f:88:0d:10:bc:6f:38: 8e:f5:2d:54:c3:a4:a8:aa:0d:c8:f8:9e:08:51:2f: a6:00:7b:3a:60:bd:65:65:b6:81:1d:51:93:15:79: 5d:e8:df:41:de:8d:91:e8:9e:0b:20:13:9f:8d:db: 1c:cb:87:dd:d1:e6:1f:ad:39:92:ac:5c:97:1a:b3: d9:57:a5:32:f3:7e:40:c4:c0:e0:3e:a9:af:b7:30: 78:4a:e7:0a:71:04:1e:10:b4:b7:d5:bd:86:dc:12: 67:83:51:00:57:7f:0a:46:2d:b9:99:68:3e:ff:0c: 02:8b:ec:1a:af:4a:83:64:19:5e:16:db:99:a8:3f: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:87:97:BC:9D:16:A4:77:BB:58:4F:5F:61:1C:A9:BE:9F:77:00:4E X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.224.0/24 Signature Algorithm: sha256WithRSAEncryption 14:48:ce:1b:10:f2:b3:d9:30:e3:d5:04:4a:3e:59:78:5e:80: fd:54:88:5e:a4:d6:ad:4a:5d:e8:c7:34:17:45:51:68:09:49: 09:83:94:bd:99:0c:00:61:4e:39:9c:93:1f:96:6f:8c:f8:1e: 26:4e:ce:41:73:f6:05:d8:10:1a:c2:75:d4:66:90:29:11:ba: f1:ed:5f:4b:cb:91:14:b9:90:7d:0a:ae:f5:59:bf:b0:29:85: 33:bc:36:1c:b6:ab:36:a3:54:45:10:02:3a:0e:17:df:63:8a: 4f:22:cc:e5:16:22:73:d1:9c:47:26:c8:1a:bb:c5:33:47:76: b6:8e:6c:85:99:13:01:46:ba:d1:3c:0f:da:f7:9c:80:b5:6b: 02:3a:84:60:7d:f2:44:16:47:af:f5:63:d6:b5:7d:3f:ff:fb: e1:22:08:ba:83:ce:61:4f:3e:33:49:8f:36:fb:6c:8c:3a:30: d5:9b:eb:2b:88:90:01:95:fc:1d:6f:56:82:c6:2f:1a:7b:76: 0b:94:95:31:6b:79:8d:fa:38:12:78:f0:88:3b:8a:1f:f1:1f: 08:1f:bd:84:28:9d:25:48:12:28:70:b8:b9:46:de:2c:77:2d: 8c:97:6c:6d:72:54:67:91:13:12:9e:45:cd:d4:ad:9b:d5:14: a2:d9:f1:61 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUX8PBHSRfbeCShYRt53p+o3qU5oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEyMTMwNzUzMDVaFw0yNjEyMTIwNzU4MDVaMDMxMTAvBgNV BAMTKEJCODc5N0JDOUQxNkE0NzdCQjU4NEY1RjYxMUNBOUJFOUY3NzAwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4L/vNXuThr12n7OlDLrDN9hhP YGhqAiBGtiegKGQdOR899jAJs3l8xID1DVLIXywOPiCYKipUxAhzXSCNpQAGVWuz PjsqXnBCN9fRsKAXjHTDH1xxDjSszA5xwA1MZnyZG7IS9DBE646yi2KEh58fyZpZ gPVoygNmvIJN9l9Zf4gNELxvOI71LVTDpKiqDcj4nghRL6YAezpgvWVltoEdUZMV eV3o30HejZHongsgE5+N2xzLh93R5h+tOZKsXJcas9lXpTLzfkDEwOA+qa+3MHhK 5wpxBB4QtLfVvYbcEmeDUQBXfwpGLbmZaD7/DAKL7BqvSoNkGV4W25moPwg/AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUu4eXvJ0WpHe7WE9fYRypvp93AE4wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzQyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlAeAwDQYJKoZIhvcN AQELBQADggEBABRIzhsQ8rPZMOPVBEo+WXhegP1UiF6k1q1KXejHNBdFUWgJSQmD lL2ZDABhTjmckx+Wb4z4HiZOzkFz9gXYEBrCddRmkCkRuvHtX0vLkRS5kH0KrvVZ v7AphTO8Nhy2qzajVEUQAjoOF99jik8izOUWInPRnEcmyBq7xTNHdraObIWZEwFG utE8D9r3nIC1awI6hGB98kQWR6/1Y9a1fT//++EiCLqDzmFPPjNJjzb7bIw6MNWb 6yuIkAGV/B1vVoLGLxp7dguUlTFreY36OBJ48Ig7ih/xHwgfvYQonSVIEihwuLlG 3ix3LYyXbG1yVGeRExKeRc3UrZvVFKLZ8WE= -----END CERTIFICATE-----Generated at Wed Dec 17 15:25:13 2025 by rpki-client