This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20383334.roa
File:                     3136392e34302e3134312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          f+5JEkeRbmNBfXN7hwKtAIAKTTWBhveam3D8T4SQtT4=
Subject key identifier:   8D:82:DB:AC:6E:A4:F6:FE:57:B1:D4:72:40:59:98:0C:EA:BA:1F:A4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1A1507DC0A17AD97C050CBC7B799F6E01FA4FA97
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 28 Nov 2025 23:14:35 +0000
ROA not before:           Fri 28 Nov 2025 23:09:35 +0000
ROA not after:            Fri 27 Nov 2026 23:14:35 +0000
asID:                     834
IP address blocks:        169.40.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:15:07:dc:0a:17:ad:97:c0:50:cb:c7:b7:99:f6:e0:1f:a4:fa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov 28 23:09:35 2025 GMT
            Not After : Nov 27 23:14:35 2026 GMT
        Subject: CN=8D82DBAC6EA4F6FE57B1D4724059980CEABA1FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:52:24:c0:79:dc:ab:2b:89:99:a3:d5:62:
                    06:18:af:c8:a4:fb:a2:16:fe:82:52:31:6e:16:47:
                    57:69:e1:1a:30:9c:e0:fb:c9:b9:7e:27:06:b3:17:
                    45:4f:ff:9e:e4:c8:c5:27:bf:18:a5:2d:18:72:9d:
                    80:05:c2:00:ea:50:ae:4b:0d:9f:8a:82:78:fa:3a:
                    be:03:f7:4c:72:88:64:17:2b:18:3a:9d:6d:fe:49:
                    04:63:25:53:bc:b9:86:3f:a3:79:f3:80:7c:c9:23:
                    e1:f7:b2:ed:20:b8:da:c4:ca:2e:c9:d3:d4:d8:37:
                    d4:c4:d2:4f:30:af:c9:19:62:be:32:96:c9:9b:f7:
                    ee:c6:1a:3c:73:ef:b9:f5:7b:bc:5e:66:df:b9:5a:
                    d0:5e:dc:ec:f5:96:01:89:f0:a1:f2:3f:d8:02:a7:
                    c5:ab:54:1a:f2:d6:4e:30:8d:32:19:23:68:ae:81:
                    67:98:d5:91:da:c8:72:f8:7a:36:39:f4:c2:db:5a:
                    73:26:eb:a0:b8:bd:3f:47:60:63:df:05:03:4b:ce:
                    7f:b1:4f:23:51:6b:0c:95:37:5a:e2:fc:c2:29:71:
                    ae:7e:cd:d6:52:96:23:62:9b:32:57:23:c8:e9:99:
                    9e:55:a2:e1:0c:e0:60:38:aa:3f:57:49:8a:0d:a1:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:DB:AC:6E:A4:F6:FE:57:B1:D4:72:40:59:98:0C:EA:BA:1F:A4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:ba:9a:6d:7b:1b:ad:57:a9:05:ce:46:d2:24:38:c8:8a:
         a7:83:6b:d1:83:1f:22:60:e9:c1:f9:a4:4f:15:ce:37:99:09:
         db:a6:1f:b2:11:aa:f0:e9:7a:94:ca:7d:6a:c0:c2:62:b9:5b:
         7d:95:3f:de:58:a5:6c:d3:d6:22:21:c5:81:44:2f:dc:2b:30:
         96:b6:ff:c7:58:7c:9f:b2:bd:56:e5:54:a8:e8:cd:dd:75:b4:
         18:b4:fe:22:56:8f:16:2a:f3:49:b4:5b:8d:c4:73:ad:ee:90:
         6c:d2:2b:97:fb:bc:cb:42:90:1f:44:0f:9d:9b:cd:b0:42:0b:
         ea:63:ab:29:09:29:7b:40:2a:6d:db:c7:6b:d0:34:2d:d7:40:
         2d:8e:1e:59:1b:93:aa:2f:f6:2c:44:aa:8d:02:cf:79:f2:08:
         e0:02:ba:3f:05:44:45:83:7b:51:72:65:61:b8:de:cd:1a:8b:
         5a:f2:3b:f5:b7:ed:98:2a:98:d2:31:96:5f:10:89:2c:ee:48:
         49:e8:ea:c9:bb:ba:d1:19:d0:61:0b:d5:a6:ac:e2:17:88:6a:
         14:c2:56:76:3d:37:86:36:ef:34:c7:1e:df:12:32:0f:f7:23:
         fe:57:c1:be:3f:c9:c5:35:99:b6:d3:b1:6b:5e:ce:34:dd:4b:
         3b:40:1c:53
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUGhUH3AoXrZfAUMvHt5n24B+k+pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNTExMjgyMzA5MzVaFw0yNjExMjcyMzE0MzVaMDMxMTAvBgNV
BAMTKDhEODJEQkFDNkVBNEY2RkU1N0IxRDQ3MjQwNTk5ODBDRUFCQTFGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/lFIkwHncqyuJmaPVYgYYr8ik
+6IW/oJSMW4WR1dp4RownOD7ybl+JwazF0VP/57kyMUnvxilLRhynYAFwgDqUK5L
DZ+Kgnj6Or4D90xyiGQXKxg6nW3+SQRjJVO8uYY/o3nzgHzJI+H3su0guNrEyi7J
09TYN9TE0k8wr8kZYr4ylsmb9+7GGjxz77n1e7xeZt+5WtBe3Oz1lgGJ8KHyP9gC
p8WrVBry1k4wjTIZI2iugWeY1ZHayHL4ejY59MLbWnMm66C4vT9HYGPfBQNLzn+x
TyNRawyVN1ri/MIpca5+zdZSliNimzJXI8jpmZ5VouEM4GA4qj9XSYoNoeBtAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUjYLbrG6k9v5XsdRyQFmYDOq6H6QwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiNMA0GCSqGSIb3DQEB
CwUAA4IBAQAbkbqabXsbrVepBc5G0iQ4yIqng2vRgx8iYOnB+aRPFc43mQnbph+y
Earw6XqUyn1qwMJiuVt9lT/eWKVs09YiIcWBRC/cKzCWtv/HWHyfsr1W5VSo6M3d
dbQYtP4iVo8WKvNJtFuNxHOt7pBs0iuX+7zLQpAfRA+dm82wQgvqY6spCSl7QCpt
28dr0DQt10Atjh5ZG5OqL/YsRKqNAs958gjgAro/BURFg3tRcmVhuN7NGota8jv1
t+2YKpjSMZZfEIks7khJ6OrJu7rRGdBhC9WmrOIXiGoUwlZ2PTeGNu80xx7fEjIP
9yP+V8G+P8nFNZm207FrXs403Us7QBxT
-----END CERTIFICATE-----
Generated at Fri Dec 5 06:03:33 2025 by rpki-client