This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133352e302f32342d3234203d3e20323039323734.roa
File:                     3136392e34302e3133352e302f32342d3234203d3e20323039323734.roa (raw, json)
Hash identifier:          0mHjEPpdF+xFw7q8V7CJzQz73NYhB/hW/PsPE/+CEkk=
Subject key identifier:   27:64:C4:BA:7E:E3:7B:6F:A1:05:00:1A:9E:83:09:C8:C8:30:BE:B3
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       58E3697199158CF919DF91C1493A74F3E19B23AB
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133352e302f32342d3234203d3e20323039323734.roa
Signing time:             Thu 04 Dec 2025 07:36:45 +0000
ROA not before:           Thu 04 Dec 2025 07:31:45 +0000
ROA not after:            Thu 03 Dec 2026 07:36:45 +0000
asID:                     209274
IP address blocks:        169.40.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e3:69:71:99:15:8c:f9:19:df:91:c1:49:3a:74:f3:e1:9b:23:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 07:31:45 2025 GMT
            Not After : Dec  3 07:36:45 2026 GMT
        Subject: CN=2764C4BA7EE37B6FA105001A9E8309C8C830BEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:de:50:a4:d1:c1:e4:76:d5:a3:e1:7b:23:
                    71:51:81:35:d6:c4:14:89:7f:d2:dd:ce:70:10:1d:
                    06:27:a2:64:73:2e:eb:1b:82:79:dd:86:26:14:52:
                    4a:07:c8:39:2d:11:98:86:fa:13:2e:d3:dc:0c:f0:
                    6e:05:25:50:da:99:58:a7:1d:7d:af:cd:2e:9c:51:
                    d0:7d:99:67:31:8d:03:e7:8e:88:23:46:f0:54:21:
                    1e:7f:62:b7:2c:82:1d:fe:0d:af:a8:ff:f5:85:13:
                    ff:6b:a2:bc:4a:59:b3:9d:c7:87:5a:75:b4:90:c5:
                    b0:eb:24:33:0e:21:45:80:f4:d5:0a:68:05:02:1d:
                    d6:a0:98:e9:f5:2f:71:fe:b9:2f:30:2e:e0:18:75:
                    e0:ee:41:84:80:ef:45:24:83:80:2d:c7:bc:99:2b:
                    3e:83:38:55:b6:96:a4:51:17:e3:44:99:47:b3:b8:
                    74:6b:fd:44:d7:c3:c1:67:53:fb:cb:45:43:c3:0c:
                    a1:93:db:2a:0a:0f:35:79:ed:85:1c:0f:9b:22:b8:
                    8a:cf:b4:33:8d:51:45:89:5c:85:a4:76:7c:44:81:
                    e5:f3:ee:4a:08:f9:b3:1d:49:f1:4e:83:5f:55:fd:
                    d0:eb:e3:6d:6e:35:78:7d:e3:43:c7:24:ae:c4:f2:
                    63:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:C4:BA:7E:E3:7B:6F:A1:05:00:1A:9E:83:09:C8:C8:30:BE:B3
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133352e302f32342d3234203d3e20323039323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:cd:2c:b7:5f:34:9d:c7:4b:c1:5d:a8:5c:3f:de:1a:07:
         f8:a6:ed:91:cb:30:a6:ce:a5:c7:b9:f0:61:3f:0f:8c:89:58:
         2d:f6:ac:d3:33:ff:d3:71:60:cb:9a:33:2d:29:1c:df:e1:49:
         81:c7:92:64:7b:fc:3a:e8:1c:72:b7:fc:d1:b4:dd:a5:e5:b5:
         a7:e5:53:18:3f:f7:d8:5b:9c:18:cc:b6:d8:10:1c:3b:ea:bf:
         d2:dd:25:dd:bb:50:49:88:61:b5:66:a0:65:3f:a7:94:56:51:
         e4:49:35:49:e3:2b:aa:a4:2a:3d:ad:9e:51:c7:4b:20:bf:eb:
         b3:66:8e:07:74:4e:3b:cd:d5:53:be:30:b5:0e:13:a3:c2:01:
         93:19:a0:9e:26:94:87:50:e5:c1:ca:20:75:46:f8:ce:e9:59:
         ef:de:03:d5:3f:67:d6:8a:9f:42:25:74:e9:5c:0b:36:98:40:
         d6:19:b3:a6:d3:f9:77:b0:0a:8b:99:08:92:02:ec:bd:b5:8f:
         2c:d8:1c:09:ad:d1:ce:47:33:cc:28:ae:9e:7c:1f:99:49:f8:
         bb:98:47:cc:9e:e9:cd:de:1c:16:05:ce:89:7d:24:fa:74:b3:
         75:f5:ae:5e:85:28:6f:cb:09:85:30:f6:40:2b:54:bb:55:76:
         ea:13:5e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:30 2025 by rpki-client