This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133362e302f32342d3234203d3e203633313939.roa
File:                     3136392e34302e3133362e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          pqRRmoeAIxi2M5/IVKXo4gUwgpdIfXjMVA36CXIx130=
Subject key identifier:   B9:B2:E9:56:CE:22:93:CC:29:91:ED:49:3A:0F:7D:55:D8:E0:F5:4F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7D46F898F8E76A56A0049EDFD96AA836979402A6
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133362e302f32342d3234203d3e203633313939.roa
Signing time:             Sat 29 Nov 2025 11:11:59 +0000
ROA not before:           Sat 29 Nov 2025 11:06:59 +0000
ROA not after:            Sat 28 Nov 2026 11:11:59 +0000
asID:                     63199
IP address blocks:        169.40.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:46:f8:98:f8:e7:6a:56:a0:04:9e:df:d9:6a:a8:36:97:94:02:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov 29 11:06:59 2025 GMT
            Not After : Nov 28 11:11:59 2026 GMT
        Subject: CN=B9B2E956CE2293CC2991ED493A0F7D55D8E0F54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:6f:ed:37:e3:10:3e:8f:bb:25:29:ab:ce:
                    3d:94:9b:e4:d8:91:64:91:ca:c8:64:59:64:3f:86:
                    b0:71:7b:cc:d1:69:29:3e:b9:85:5c:63:1b:2f:00:
                    ec:05:60:2b:c2:cb:65:5b:43:4f:e8:e2:8b:62:ca:
                    da:e4:c7:36:51:d0:f4:e7:f7:29:c5:f5:3e:ad:89:
                    c5:e8:02:ee:2f:b5:9a:9f:a8:b8:8d:51:aa:2a:ab:
                    3b:b8:91:ab:13:72:f5:33:51:ff:6e:8a:e7:53:63:
                    5a:4d:4e:9c:80:c3:08:dd:76:2a:44:28:90:c8:84:
                    e5:1d:62:b7:2b:77:b7:5a:ca:d4:6d:6d:6b:ba:97:
                    c6:03:6a:db:6f:2c:b0:37:4b:f8:45:e3:bd:9a:cf:
                    ed:78:35:15:5a:4e:84:20:a3:90:48:a5:1e:16:6c:
                    5a:75:e5:fc:18:fa:7c:e9:67:ea:84:9a:a9:9d:21:
                    f2:f3:42:53:17:27:0c:3f:87:5c:8e:04:bc:da:47:
                    78:86:a7:7f:ce:b7:80:67:9e:5b:de:82:85:cc:0c:
                    a3:ef:e8:a9:f8:8a:12:6d:cd:e9:a4:0d:18:2f:b9:
                    59:5f:7d:ae:6d:99:12:43:25:ca:7c:76:7a:40:99:
                    c3:00:ce:89:49:32:10:6d:42:8a:10:ea:6d:9e:5e:
                    1b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B2:E9:56:CE:22:93:CC:29:91:ED:49:3A:0F:7D:55:D8:E0:F5:4F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133362e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:af:3e:ae:15:73:9c:42:9c:cd:23:46:3e:f9:bd:06:b0:71:
         a0:8e:d0:f8:36:a6:e1:85:21:9f:85:58:f1:6d:df:2c:f6:5b:
         f5:da:70:44:ae:ef:64:78:10:32:ac:e2:db:10:13:0f:79:eb:
         f0:c4:1c:cd:58:e5:cf:f0:3d:bd:fe:8d:30:a3:8e:c7:88:b1:
         e0:d5:e2:8a:9a:e6:33:1e:50:67:11:d5:f1:50:e5:5c:6a:cf:
         11:d5:c8:f1:00:13:a7:20:29:44:83:33:1a:3d:e5:cc:47:3b:
         89:af:e7:26:8c:2f:be:57:e6:6d:af:cf:4e:1a:14:44:5b:37:
         ee:85:0b:a3:59:c8:bf:46:75:b4:35:53:c8:cc:a1:04:49:08:
         49:e4:26:a2:da:41:21:68:a8:d5:6e:fe:88:6c:a4:7f:b9:a2:
         bb:2d:23:f3:47:42:2c:f7:50:de:74:ec:3d:37:9e:f8:08:16:
         eb:e2:43:e9:6f:84:64:0b:8f:55:0e:eb:7e:88:d6:9e:b5:4f:
         e3:ba:e3:a5:9d:86:9a:7c:0a:a8:89:ca:b3:90:7d:72:a5:34:
         f1:bb:c5:94:27:5f:2b:10:7f:08:0d:67:3d:06:36:74:fb:94:
         e3:0e:60:7d:b3:7d:01:cb:97:42:49:e5:ee:f6:c2:bd:7c:e3:
         e3:22:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:28 2025 by rpki-client