This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa
File:                     3136392e34302e3133302e302f32332d3234203d3e2039303039.roa (raw, json)
Hash identifier:          EFv+fGgFUIHYw//DB2aoHyIlEOC5sEnRr4NmZoMmm84=
Subject key identifier:   5A:C8:28:7F:8C:A5:5D:87:D8:0F:9E:FC:10:E9:1A:83:21:E7:4C:9D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4F2310BFC99E679B08FF25FAA784D004E1E460B0
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa
Signing time:             Thu 27 Nov 2025 13:49:57 +0000
ROA not before:           Thu 27 Nov 2025 13:44:57 +0000
ROA not after:            Thu 26 Nov 2026 13:49:57 +0000
asID:                     9009
IP address blocks:        169.40.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Dec 2025 22:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:23:10:bf:c9:9e:67:9b:08:ff:25:fa:a7:84:d0:04:e1:e4:60:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov 27 13:44:57 2025 GMT
            Not After : Nov 26 13:49:57 2026 GMT
        Subject: CN=5AC8287F8CA55D87D80F9EFC10E91A8321E74C9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ef:e8:74:55:a8:b6:8a:dd:ce:4b:4d:73:c6:
                    5c:24:a4:2e:40:0e:ac:79:fe:18:77:21:25:7f:4f:
                    ba:11:b4:72:3b:f2:72:4b:12:cf:ad:c9:5d:36:96:
                    b7:98:d5:0a:0f:f6:6f:24:0a:4e:0a:db:66:32:71:
                    8d:84:db:40:1f:86:53:bc:9b:52:f0:1c:53:aa:ba:
                    9a:3e:35:82:9a:ff:54:63:e1:46:2b:c6:0a:8d:3a:
                    65:15:2b:90:a9:d2:ad:d4:61:80:d2:fd:41:6e:8d:
                    ef:0a:5c:13:18:cf:27:14:03:d1:f5:38:33:01:14:
                    fe:8c:68:5d:7f:30:48:94:c5:9c:b9:c1:fc:5a:5d:
                    69:cb:de:c8:15:1e:58:35:a4:b2:32:69:65:8f:85:
                    81:96:2a:ec:e8:cf:f3:1b:53:29:33:b5:c4:1a:8c:
                    ef:21:68:d6:3f:51:fb:8b:fe:8f:c2:c7:2b:27:32:
                    4a:24:71:ec:12:1c:89:ec:d4:f3:19:6a:3a:11:c6:
                    64:78:fc:6b:4d:e4:0c:ed:09:76:3c:e3:13:03:ea:
                    2e:ff:be:e1:c4:cd:f7:ad:1d:4e:0d:32:d7:26:34:
                    23:46:84:0e:92:1a:76:7e:9b:c5:96:0d:46:09:e9:
                    19:cc:7e:0d:63:2b:47:d7:57:6a:4e:d7:c0:11:cc:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C8:28:7F:8C:A5:5D:87:D8:0F:9E:FC:10:E9:1A:83:21:E7:4C:9D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:56:6a:af:1e:e4:ee:3e:e8:a5:3d:22:ef:f8:0c:23:25:fd:
         0b:e3:0c:6a:b6:a1:72:e4:bb:d7:51:a8:31:7e:32:a8:f8:82:
         5f:72:a5:c9:27:7d:70:50:59:45:2f:52:82:2c:be:d3:25:34:
         d0:f9:a7:78:8b:c3:10:ae:3c:7d:9e:27:ad:89:a1:e6:a0:86:
         9a:d1:78:d1:c5:8b:e4:b1:aa:aa:26:ee:77:a3:64:a8:92:ab:
         4c:bb:63:17:40:2c:f6:0b:a0:4e:0f:ff:48:a5:de:9e:84:28:
         e3:79:52:26:51:78:be:fd:83:2c:ad:c0:84:36:be:ab:b8:33:
         29:6a:50:cb:b0:8d:d3:68:41:1d:29:e6:03:62:bc:e0:49:0d:
         40:0a:fe:99:b2:90:12:be:b1:88:10:13:a1:c7:26:58:65:7b:
         e2:d4:3f:a6:02:cb:f0:ef:4f:06:39:ec:47:9b:35:ee:f6:8d:
         51:03:80:05:26:a5:15:30:1f:cf:f2:f6:2f:d0:6e:ba:0a:d7:
         cd:2c:4a:d8:9d:0b:45:29:6f:a3:8d:46:20:1f:5d:d4:91:9c:
         ca:12:04:70:61:67:a5:f2:6c:4b:96:53:75:a8:ba:1e:c6:4e:
         12:70:ec:7c:0f:28:24:e3:93:27:53:b6:7e:b7:f7:05:6c:d3:
         0d:db:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:46:01 2025 by rpki-client