This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e203136353839.roa
File:                     3136392e34302e3132392e302f32342d3234203d3e203136353839.roa (raw, json)
Hash identifier:          g6RPeXd2JDDQSv7jonKVTuYy18dBqyDKHv4JtQ7X4Ss=
Subject key identifier:   30:27:28:F1:2C:1E:E2:4D:41:A0:6D:D7:53:B7:31:CF:7C:88:E3:F1
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1DC93D7452AEFEF2C4F3A1737ACE5F356CF9C3DD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e203136353839.roa
Signing time:             Tue 02 Dec 2025 08:02:09 +0000
ROA not before:           Tue 02 Dec 2025 07:57:09 +0000
ROA not after:            Tue 01 Dec 2026 08:02:09 +0000
asID:                     16589
IP address blocks:        169.40.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c9:3d:74:52:ae:fe:f2:c4:f3:a1:73:7a:ce:5f:35:6c:f9:c3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  2 07:57:09 2025 GMT
            Not After : Dec  1 08:02:09 2026 GMT
        Subject: CN=302728F12C1EE24D41A06DD753B731CF7C88E3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:32:e3:eb:1a:fb:38:0b:86:65:0d:ce:7a:
                    7b:f4:c5:b0:10:ef:cd:57:26:5a:38:a5:e7:0a:65:
                    1f:b6:cc:98:70:45:33:3a:83:d6:cb:b7:4f:dc:bd:
                    c4:5a:c8:fb:ae:c5:ec:26:6e:9c:df:c1:17:2b:7e:
                    f4:22:da:d5:ee:e7:4e:03:f8:8b:5d:e3:1d:a3:6d:
                    0e:cc:4d:8c:0e:dd:83:9f:3c:79:27:85:5a:1c:35:
                    30:d8:17:83:b5:cf:4b:49:61:7f:f8:54:00:cc:44:
                    7b:5e:ff:c1:44:8f:da:21:48:42:86:1f:62:02:48:
                    d2:9e:c4:c8:41:6e:22:11:8a:89:1c:3f:0b:36:9a:
                    c7:c5:15:85:62:ab:0b:10:15:d9:61:7b:45:06:14:
                    ef:d2:21:4f:fd:a2:9e:30:4e:eb:85:d6:1a:62:91:
                    ba:b5:20:84:fa:54:d1:32:d6:97:19:5d:5d:2e:a3:
                    11:a1:6e:0a:93:5e:b5:c3:a4:ca:73:14:ac:65:67:
                    e2:12:66:0b:3f:61:4f:29:be:9c:b6:82:a9:35:4b:
                    d6:75:d5:d5:e7:93:15:84:2f:57:4d:3d:b0:53:51:
                    bb:23:0c:32:c3:fd:eb:11:40:6e:29:8c:2c:58:b1:
                    2a:65:4b:dd:d1:37:de:5d:19:e5:42:d8:35:2e:d5:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:28:F1:2C:1E:E2:4D:41:A0:6D:D7:53:B7:31:CF:7C:88:E3:F1
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132392e302f32342d3234203d3e203136353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:87:86:e4:80:aa:20:bf:ad:97:24:a2:a0:32:6d:ee:98:20:
         4a:e9:bc:ba:57:ca:9c:57:02:40:9f:25:b1:d6:ef:45:42:48:
         6a:32:b9:64:c9:e0:c5:d5:d7:18:3b:70:e8:58:bd:de:4c:3f:
         3e:fb:93:d4:e5:ba:e8:de:c5:a2:0e:a1:b1:30:ea:3b:8a:40:
         26:b8:0c:32:c8:01:d8:e9:a2:9a:2e:d9:87:ba:1a:39:53:ac:
         b2:82:02:d2:cd:9c:9b:94:8d:a2:df:a1:61:09:5f:11:2d:26:
         45:6f:ad:aa:99:ca:5e:e7:66:d4:05:d5:1e:f9:ac:6b:32:f9:
         2e:45:80:4a:a6:48:e6:94:9c:2e:a2:67:8a:f4:7b:b5:26:b3:
         9e:e2:84:93:33:ca:cf:07:62:ef:03:9b:d7:e0:8a:ba:e9:dd:
         6f:63:80:d2:4b:f2:6a:b8:64:d1:1c:96:21:e7:8d:c4:c0:48:
         e4:a7:28:28:5b:08:1c:b7:d8:83:0f:b3:df:17:8e:9f:e1:e6:
         27:78:fa:17:e4:74:0a:d5:db:1e:81:78:5e:36:64:9e:18:a5:
         aa:cd:50:72:fd:17:34:1f:e6:d7:bc:71:7e:66:63:da:7d:b0:
         00:53:ed:66:be:96:58:36:b8:d7:28:c2:5d:2f:7d:58:2a:30:
         20:4c:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:33 2025 by rpki-client