This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa File: 33372e3233302e34382e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: /GjU0O8aPZ+xKS6Z0vPRsSNmpEx4k/19JHjwpRT9x4E= Subject key identifier: E1:A2:A4:09:2E:3B:CD:93:D6:62:68:71:E3:BF:CB:48:3D:62:B0:03 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 78EFEA41CBCD611BE0C2A49FFFB033A565ACF448 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa Signing time: Thu 27 Nov 2025 21:55:12 +0000 ROA not before: Thu 27 Nov 2025 21:50:12 +0000 ROA not after: Thu 26 Nov 2026 21:55:12 +0000 asID: 16276 IP address blocks: 37.230.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ef:ea:41:cb:cd:61:1b:e0:c2:a4:9f:ff:b0:33:a5:65:ac:f4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 27 21:50:12 2025 GMT Not After : Nov 26 21:55:12 2026 GMT Subject: CN=E1A2A4092E3BCD93D6626871E3BFCB483D62B003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f8:c4:81:65:66:27:96:b1:7d:3c:0f:a3:52: f8:e6:d6:c0:3f:0c:bf:ee:47:3e:50:db:2d:11:46: c5:82:b6:9b:f3:ae:b4:9b:5c:e8:cf:a5:1d:c5:18: ab:90:cb:b9:86:b8:68:05:2b:4e:4e:a4:7c:4d:74: e6:c9:60:1a:73:61:c4:9b:08:9a:7c:ed:ff:06:5b: c2:da:f1:26:77:04:90:76:32:b2:c3:e8:4e:15:e6: a5:bf:73:47:3f:d8:79:11:fb:30:0c:f9:a9:5b:96: 1a:fb:fe:5f:6f:fe:24:89:8b:e0:21:fc:55:1a:15: 9d:88:a4:2d:1d:8e:86:78:2e:af:82:38:59:68:74: ea:a6:9c:a4:1a:fd:4c:48:23:9f:e1:4d:08:55:d4: 41:f7:5f:2c:fd:f4:e9:84:42:33:5e:29:0f:70:38: d6:0b:33:39:37:5c:33:d5:d2:22:ef:b6:e4:80:7a: 75:b1:19:41:60:79:87:c1:fa:6c:8c:a2:3c:09:a6: fd:e8:10:92:59:78:14:e8:c1:6f:07:73:3e:f0:4e: 74:28:4a:b1:2a:9c:86:09:d3:fe:fc:ce:39:9c:db: 5e:dd:d1:a7:7c:d1:60:3a:cc:11:3b:f2:86:ab:4d: 4c:5d:9b:71:be:ad:0a:c2:32:12:9d:c8:94:90:66: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:A4:09:2E:3B:CD:93:D6:62:68:71:E3:BF:CB:48:3D:62:B0:03 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.48.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:1f:a6:5d:9a:3a:8e:2f:7a:b5:38:1c:88:47:af:c0:70:24: 35:7e:08:fe:10:77:a5:93:09:58:66:3c:b1:5b:c1:d2:fe:e9: 7a:9c:6b:97:e8:75:2d:57:3b:59:0b:36:50:25:41:a1:d5:7d: ba:55:51:1b:b1:60:82:d5:4b:1d:a7:4e:a4:47:12:f8:46:34: 18:35:28:3c:30:21:ab:94:d0:bd:95:5f:d4:63:36:96:12:23: 32:4d:90:b1:2c:c9:b1:71:82:32:e5:2a:89:0a:f3:53:ee:d1: d0:53:a8:38:c7:1d:3c:b2:4a:aa:88:f8:eb:07:44:a2:8f:81: 75:db:27:eb:6e:53:98:e9:35:ce:4a:91:dc:f5:e1:fd:79:d3: cf:b8:03:4d:be:e7:88:61:72:76:0a:e8:91:fa:d0:e6:da:da: 01:bb:2f:55:0a:b4:7d:13:99:14:e4:26:41:9f:9f:04:5b:3b: 8d:52:f3:92:56:12:61:e2:4c:0b:67:d4:c0:1f:ca:41:d3:1f: c9:18:64:51:a0:e6:cf:f7:bc:bc:31:15:5b:5d:a2:67:5b:6a: 5b:f1:30:37:14:48:57:79:cf:91:da:a6:8f:cc:7d:a2:f7:1b: e9:0c:84:c6:e6:9e:dc:60:7f:2b:8d:fe:14:ef:97:fe:57:65: 72:b9:0e:ec -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUeO/qQcvNYRvgwqSf/7AzpWWs9EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTExMjcyMTUwMTJaFw0yNjExMjYyMTU1MTJaMDMxMTAvBgNV BAMTKEUxQTJBNDA5MkUzQkNEOTNENjYyNjg3MUUzQkZDQjQ4M0Q2MkIwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM+MSBZWYnlrF9PA+jUvjm1sA/ DL/uRz5Q2y0RRsWCtpvzrrSbXOjPpR3FGKuQy7mGuGgFK05OpHxNdObJYBpzYcSb CJp87f8GW8La8SZ3BJB2MrLD6E4V5qW/c0c/2HkR+zAM+alblhr7/l9v/iSJi+Ah /FUaFZ2IpC0djoZ4Lq+COFlodOqmnKQa/UxII5/hTQhV1EH3Xyz99OmEQjNeKQ9w ONYLMzk3XDPV0iLvtuSAenWxGUFgeYfB+myMojwJpv3oEJJZeBTowW8Hcz7wTnQo SrEqnIYJ0/78zjmc217d0ad80WA6zBE78oarTUxdm3G+rQrCMhKdyJSQZlELAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU4aKkCS47zZPWYmhx47/LSD1isAMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jAwDQYJKoZIhvcN AQELBQADggEBAC4fpl2aOo4verU4HIhHr8BwJDV+CP4Qd6WTCVhmPLFbwdL+6Xqc a5fodS1XO1kLNlAlQaHVfbpVURuxYILVSx2nTqRHEvhGNBg1KDwwIauU0L2VX9Rj NpYSIzJNkLEsybFxgjLlKokK81Pu0dBTqDjHHTyySqqI+OsHRKKPgXXbJ+tuU5jp Nc5Kkdz14f1508+4A02+54hhcnYK6JH60Oba2gG7L1UKtH0TmRTkJkGfnwRbO41S 85JWEmHiTAtn1MAfykHTH8kYZFGg5s/3vLwxFVtdomdbalvxMDcUSFd5z5Hapo/M faL3G+kMhMbmntxgfyuN/hTvl/5XZXK5Duw= -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:18 2025 by rpki-client