This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa File: 33372e312e3232342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: IFqXS23mfAhfaLGzJC0TjYW3rTbVkrevsfjgBWIEv8Q= Subject key identifier: 50:86:6D:1A:A2:F5:18:5C:3E:7C:29:81:A8:1C:F1:B1:68:D6:E1:55 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1F08AB8D0BAB04992250293BA4AF64E294F7BC6F Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa Signing time: Tue 13 Jan 2026 07:57:31 +0000 ROA not before: Tue 13 Jan 2026 07:52:31 +0000 ROA not after: Tue 12 Jan 2027 07:57:31 +0000 asID: 834 IP address blocks: 37.1.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 16:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:08:ab:8d:0b:ab:04:99:22:50:29:3b:a4:af:64:e2:94:f7:bc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jan 13 07:52:31 2026 GMT Not After : Jan 12 07:57:31 2027 GMT Subject: CN=50866D1AA2F5185C3E7C2981A81CF1B168D6E155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:a6:7e:76:9c:d5:be:46:3f:94:2f:ce:12: 13:a8:68:1f:d1:fb:ce:4d:32:20:02:f4:ad:b9:44: 28:58:5c:dc:16:e0:08:c3:2f:6f:b2:63:26:6f:c7: 1c:09:13:6e:5c:3a:4d:99:ee:07:86:67:7d:37:2c: 86:84:7d:05:db:42:7b:72:5b:aa:00:c2:f4:90:cc: 6a:d9:13:9a:03:a5:62:9d:6f:eb:1b:a7:3f:eb:d5: c8:ea:c6:41:ab:fd:b1:a7:5d:70:93:7f:fa:90:2f: 80:76:23:46:b8:a1:c7:01:39:bb:af:d6:7c:cb:0f: cf:c7:eb:c6:c0:6f:da:d2:bc:d0:87:af:11:de:38: 8f:5f:ff:44:4d:81:ec:88:9f:0d:99:aa:a9:0d:ed: df:62:13:9f:8c:db:78:de:fb:1e:53:c8:70:f6:af: f5:d1:61:76:11:10:9b:8b:31:01:9a:af:c2:aa:dc: 3a:21:db:91:fd:ae:6d:ba:0d:2a:7b:7b:77:db:41: dc:1a:c6:f6:84:46:38:e6:d2:78:3f:c7:8b:9d:73: 84:80:f5:a3:03:40:eb:f8:80:e2:fe:c9:01:9f:81: e8:a9:4c:86:47:33:5d:55:04:a7:02:87:f2:9d:e2: 21:cd:b9:2b:71:c5:11:8d:7e:bf:f4:8a:33:9c:f7: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:6D:1A:A2:F5:18:5C:3E:7C:29:81:A8:1C:F1:B1:68:D6:E1:55 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.224.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:11:7e:28:0a:1f:0c:24:01:0e:3d:43:f6:b0:f0:3b:e6:02: ea:f3:65:6b:1b:e5:9d:79:c3:60:ae:5b:06:26:1c:26:f1:b8: 91:74:ed:6e:43:03:7f:e5:47:83:57:86:b3:ce:0e:c3:b8:9f: e1:c0:ef:46:eb:03:e1:1e:84:e2:43:30:19:e2:4d:9c:74:05: 14:1d:24:b4:94:14:2d:23:04:44:d0:5f:b6:f2:b5:41:fb:3b: 5d:95:01:ce:11:24:5a:54:ab:ad:a2:b6:94:d1:ac:2e:c6:f0: 4b:12:07:ff:3e:99:7e:8f:67:f3:78:7e:95:4c:a7:8e:3e:f5: ac:24:81:d0:68:76:8b:21:4b:2e:5a:3d:08:29:a0:a7:46:39: 6b:52:6f:af:c6:20:f5:e8:55:5d:6d:f9:a9:98:b4:0e:fb:00: 9f:36:cf:61:bb:ba:be:1a:7c:a8:86:ad:60:7e:ac:5d:ad:73: 38:e3:60:4c:97:8e:3c:0b:3b:9e:77:21:56:e5:6f:cc:ef:cf: 30:56:7c:47:1b:cc:36:95:d6:ef:5c:7f:a0:f7:fe:63:3b:1f: 67:0e:5c:75:0e:ae:04:dc:50:e5:d9:16:6f:46:d0:08:dc:44: 55:73:89:44:96:4d:58:38:63:63:ae:0c:47:88:13:f5:b4:6b: b0:74:45:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHwirjQurBJkiUCk7pK9k4pT3vG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAxMTMwNzUyMzFaFw0yNzAxMTIwNzU3MzFaMDMxMTAvBgNV BAMTKDUwODY2RDFBQTJGNTE4NUMzRTdDMjk4MUE4MUNGMUIxNjhENkUxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQl6Z+dpzVvkY/lC/OEhOoaB/R +85NMiAC9K25RChYXNwW4AjDL2+yYyZvxxwJE25cOk2Z7geGZ303LIaEfQXbQnty W6oAwvSQzGrZE5oDpWKdb+sbpz/r1cjqxkGr/bGnXXCTf/qQL4B2I0a4occBObuv 1nzLD8/H68bAb9rSvNCHrxHeOI9f/0RNgeyInw2ZqqkN7d9iE5+M23je+x5TyHD2 r/XRYXYREJuLMQGar8Kq3Doh25H9rm26DSp7e3fbQdwaxvaERjjm0ng/x4udc4SA 9aMDQOv4gOL+yQGfgeipTIZHM11VBKcCh/Kd4iHNuStxxRGNfr/0ijOc93eJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUIZtGqL1GFw+fCmBqBzxsWjW4VUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzEyZTMyMzIzNDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUB4DANBgkqhkiG9w0BAQsFAAOC AQEAaxF+KAofDCQBDj1D9rDwO+YC6vNlaxvlnXnDYK5bBiYcJvG4kXTtbkMDf+VH g1eGs84Ow7if4cDvRusD4R6E4kMwGeJNnHQFFB0ktJQULSMERNBftvK1Qfs7XZUB zhEkWlSrraK2lNGsLsbwSxIH/z6Zfo9n83h+lUynjj71rCSB0Gh2iyFLLlo9CCmg p0Y5a1Jvr8Yg9ehVXW35qZi0DvsAnzbPYbu6vhp8qIatYH6sXa1zOONgTJeOPAs7 nnchVuVvzO/PMFZ8RxvMNpXW71x/oPf+YzsfZw5cdQ6uBNxQ5dkWb0bQCNxEVXOJ RJZNWDhjY64MR4gT9bRrsHRFSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:47 2026 by rpki-client