This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa
File:                     3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa (raw, json)
Hash identifier:          riQckR2t5tWFCpe53tCFrMCylwPTs38+quXOtLnuWO4=
Subject key identifier:   26:4B:F9:7E:B4:3B:FC:74:F7:38:1F:F7:7A:73:8F:0A:71:4D:68:2D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       756D3D42572C1B8C7AB4CE5317387684F5D42D3C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa
Signing time:             Fri 28 Nov 2025 23:14:08 +0000
ROA not before:           Fri 28 Nov 2025 23:09:08 +0000
ROA not after:            Fri 27 Nov 2026 23:14:08 +0000
asID:                     205896
IP address blocks:        169.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6d:3d:42:57:2c:1b:8c:7a:b4:ce:53:17:38:76:84:f5:d4:2d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov 28 23:09:08 2025 GMT
            Not After : Nov 27 23:14:08 2026 GMT
        Subject: CN=264BF97EB43BFC74F7381FF77A738F0A714D682D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:75:0c:67:c3:d1:89:d2:5f:8d:58:e3:35:
                    2a:65:e8:b7:42:9f:37:f5:2a:6d:eb:0d:5a:89:3a:
                    4a:56:56:df:66:cc:05:7b:c4:ca:5f:ca:92:80:28:
                    ba:f3:3a:c1:92:4a:3b:dd:10:af:32:e7:87:e7:d9:
                    50:2b:92:e6:fa:89:f6:45:5f:60:dd:79:d9:dc:65:
                    6e:68:e4:eb:27:87:a6:8e:51:a0:2a:99:d0:72:aa:
                    67:c0:8c:8f:85:f8:74:d3:a6:9a:93:da:69:7c:3b:
                    89:f5:92:ab:d0:87:35:89:94:3a:1f:da:7f:f8:2b:
                    9b:ca:d4:e1:c7:41:72:34:bd:1a:74:14:34:55:c7:
                    2e:a5:af:93:4d:29:96:ca:4d:bb:2d:9f:da:63:5f:
                    67:ce:59:e2:ed:43:3a:f9:c8:57:12:59:ba:ab:ec:
                    fa:c9:fb:f7:6f:32:4c:37:3e:f8:c8:28:8f:bb:52:
                    f0:c7:9f:44:95:62:c0:0a:0d:6b:04:86:e8:d8:83:
                    3d:fc:27:ef:ef:87:6a:eb:59:70:cb:9b:0d:cb:c0:
                    6e:d2:5e:1c:5b:77:d7:45:c7:44:bd:8a:66:c9:54:
                    db:1d:0c:46:cb:53:27:c9:20:8c:c7:61:b4:f6:f2:
                    85:23:58:04:8c:30:2b:00:2f:10:00:64:93:26:c3:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:F9:7E:B4:3B:FC:74:F7:38:1F:F7:7A:73:8F:0A:71:4D:68:2D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:9b:41:1d:d0:87:c3:29:b4:47:46:5a:92:90:9e:9c:8a:73:
         78:fe:6d:ca:01:93:3d:1d:ea:7d:db:42:01:26:2b:44:a8:f0:
         1e:f2:1c:08:17:a7:54:09:42:44:72:d0:48:eb:45:5d:94:1b:
         fd:4e:22:55:20:58:0d:8f:4e:ce:19:53:16:c5:8e:d5:87:3a:
         c6:03:08:84:6c:e1:b6:34:d9:81:30:5a:2e:6a:ef:dd:af:91:
         12:5e:0d:cd:5b:61:b5:b2:a6:5f:07:31:33:5a:3c:ac:3d:c3:
         a7:9d:24:7d:79:30:27:ad:62:a6:80:d6:0e:fc:4d:36:bf:04:
         9c:39:ca:06:1a:ad:86:4b:53:82:04:f3:6b:89:28:5d:a9:f3:
         3b:14:80:9e:73:ea:60:5b:eb:a7:19:a7:12:04:72:29:ac:54:
         43:d9:d6:35:de:f2:90:ea:71:94:c7:78:89:bb:fd:36:c2:fe:
         61:55:52:24:e6:dc:7e:97:00:47:5e:bb:31:0e:97:ed:8c:35:
         37:fd:a8:76:32:7c:7e:2b:8e:d6:61:dd:21:a5:98:16:e1:68:
         fd:c4:35:b5:40:82:c8:97:02:1c:d2:2a:70:a0:3f:56:10:61:
         fd:5a:44:65:12:88:25:cf:77:5d:2d:9a:54:51:99:50:23:2e:
         b9:57:94:6d
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUdW09QlcsG4x6tM5TFzh2hPXULTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNTExMjgyMzA5MDhaFw0yNjExMjcyMzE0MDhaMDMxMTAvBgNV
BAMTKDI2NEJGOTdFQjQzQkZDNzRGNzM4MUZGNzdBNzM4RjBBNzE0RDY4MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4J3UMZ8PRidJfjVjjNSpl6LdC
nzf1Km3rDVqJOkpWVt9mzAV7xMpfypKAKLrzOsGSSjvdEK8y54fn2VArkub6ifZF
X2DdedncZW5o5Osnh6aOUaAqmdByqmfAjI+F+HTTppqT2ml8O4n1kqvQhzWJlDof
2n/4K5vK1OHHQXI0vRp0FDRVxy6lr5NNKZbKTbstn9pjX2fOWeLtQzr5yFcSWbqr
7PrJ+/dvMkw3PvjIKI+7UvDHn0SVYsAKDWsEhujYgz38J+/vh2rrWXDLmw3LwG7S
Xhxbd9dFx0S9imbJVNsdDEbLUyfJIIzHYbT28oUjWASMMCsALxAAZJMmw9p3AgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUJkv5frQ7/HT3OB/3enOPCnFNaC0wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiMMA0GCSqG
SIb3DQEBCwUAA4IBAQAmm0Ed0IfDKbRHRlqSkJ6cinN4/m3KAZM9Hep920IBJitE
qPAe8hwIF6dUCUJEctBI60VdlBv9TiJVIFgNj07OGVMWxY7VhzrGAwiEbOG2NNmB
MFouau/dr5ESXg3NW2G1sqZfBzEzWjysPcOnnSR9eTAnrWKmgNYO/E02vwScOcoG
Gq2GS1OCBPNriShdqfM7FICec+pgW+unGacSBHIprFRD2dY13vKQ6nGUx3iJu/02
wv5hVVIk5tx+lwBHXrsxDpftjDU3/ah2Mnx+K47WYd0hpZgW4Wj9xDW1QILIlwIc
0ipwoD9WEGH9WkRlEoglz3ddLZpUUZlQIy65V5Rt
-----END CERTIFICATE-----
Generated at Fri Dec 5 05:59:18 2025 by rpki-client