This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e20323035383836.roa
File:                     3136392e34302e3133342e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          crDJHyvQQTlPm41Ec/qfygpyN7gjj1za9Ypxw4GtDek=
Subject key identifier:   AB:BF:17:4E:F2:90:15:CE:26:0C:1F:30:C8:AD:BE:63:7D:14:8D:F6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3050AC752F3BF9D5DA9158D2C8FF3C57FCED1D4D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e20323035383836.roa
Signing time:             Fri 28 Nov 2025 17:12:19 +0000
ROA not before:           Fri 28 Nov 2025 17:07:19 +0000
ROA not after:            Fri 27 Nov 2026 17:12:19 +0000
asID:                     205886
IP address blocks:        169.40.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:50:ac:75:2f:3b:f9:d5:da:91:58:d2:c8:ff:3c:57:fc:ed:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov 28 17:07:19 2025 GMT
            Not After : Nov 27 17:12:19 2026 GMT
        Subject: CN=ABBF174EF29015CE260C1F30C8ADBE637D148DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:d9:53:59:94:14:15:90:91:b3:8b:b8:f8:
                    73:cb:cd:e9:a3:00:c7:6c:db:35:85:8e:01:f0:0b:
                    6d:a3:9d:69:04:fb:05:1e:fa:9d:cf:58:4b:b7:47:
                    07:80:ec:7f:bc:8b:e0:8b:d6:ae:37:7b:ef:55:97:
                    f4:6e:4b:cf:09:b9:44:1b:23:07:7c:5d:2d:79:bd:
                    f6:3a:37:bb:b5:b6:67:82:b2:38:6d:cf:23:06:73:
                    8d:01:ce:fe:b9:a6:db:1f:93:14:52:69:60:c9:c8:
                    93:c9:4f:4d:1a:2a:56:1e:fe:8a:68:47:47:4d:17:
                    31:e5:7f:cd:9e:f8:de:66:ed:34:58:87:b8:9d:a5:
                    28:39:7a:dc:29:ee:8d:ff:4f:7c:6a:25:61:83:45:
                    dc:4c:b0:20:ae:4c:7a:b4:d8:e1:12:07:8f:c0:f1:
                    7a:c5:67:25:07:f6:a6:75:c9:bd:27:a0:d4:1e:bf:
                    9f:d7:38:68:36:e2:38:25:9c:25:3c:83:b3:06:f3:
                    9c:96:17:24:46:bf:ff:57:d2:bd:e9:29:7b:3f:9e:
                    58:ef:bb:5d:4b:82:ba:a3:df:f4:6a:c7:bb:c8:a3:
                    fb:d4:e5:45:aa:07:50:ea:58:bb:dc:38:22:df:46:
                    e6:ae:b7:36:ec:bb:40:8d:af:a1:b5:60:48:c3:7c:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:17:4E:F2:90:15:CE:26:0C:1F:30:C8:AD:BE:63:7D:14:8D:F6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133342e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:9d:8f:f8:db:b7:9a:49:53:55:0f:35:de:22:3d:2c:26:
         46:51:98:c2:43:6d:af:3e:63:ab:60:6d:e2:dd:a2:cd:dc:0e:
         b7:0e:5c:3f:68:6d:77:e7:2d:e8:fe:90:6f:1a:85:29:5c:bc:
         3c:ee:b9:12:a0:b4:07:c7:a3:2e:b2:37:0c:91:e9:63:91:44:
         35:e6:4d:a0:05:91:fc:73:1e:99:d0:fb:9d:84:92:07:cd:29:
         a8:61:ff:52:dc:f6:ee:4d:e5:b7:d6:65:31:fc:fa:3f:5c:04:
         6c:0a:c8:d0:38:6b:f6:d0:1c:7b:42:b9:ef:10:a9:67:6e:9d:
         c9:98:1b:6b:4c:e2:9e:14:e3:74:ba:24:45:5a:0b:85:50:61:
         b0:cf:18:5b:d1:47:49:d1:e2:48:7c:68:db:3f:78:13:54:39:
         78:bc:b0:67:03:b5:0c:48:3a:2a:d2:e6:8a:b9:38:5d:5d:69:
         2b:67:6e:d0:e8:8f:5a:79:21:16:0e:fc:a2:16:97:d1:c7:a7:
         54:fd:6c:66:1c:9a:72:24:fa:c0:10:9e:2a:63:88:99:52:7c:
         6a:e8:c8:b6:6f:30:b6:d4:3d:66:39:65:ab:15:9a:3d:b8:bf:
         9c:77:4d:be:34:10:f8:ef:d1:fb:dd:07:10:97:99:43:3d:91:
         de:40:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:28 2025 by rpki-client