This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa
File:                     3136392e34302e3134362e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          cJtTzC5N9ard8jHi/v68ZVngt+Myd2j7Ip02BDDEAW4=
Subject key identifier:   D1:9A:EF:C1:C6:40:9B:AA:EB:BB:F0:E0:27:1C:82:5A:B2:4F:D5:E8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1F069B748A5CC66D37726F57E6BA67DFC53120E2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:08 +0000
ROA not before:           Thu 04 Dec 2025 09:45:08 +0000
ROA not after:            Thu 03 Dec 2026 09:50:08 +0000
asID:                     5650
IP address blocks:        169.40.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:06:9b:74:8a:5c:c6:6d:37:72:6f:57:e6:ba:67:df:c5:31:20:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:08 2025 GMT
            Not After : Dec  3 09:50:08 2026 GMT
        Subject: CN=D19AEFC1C6409BAAEBBBF0E0271C825AB24FD5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:50:ef:7e:e5:67:86:37:c2:be:86:92:59:
                    a3:26:49:a0:8d:75:bb:57:fd:d6:64:91:a1:b0:c1:
                    24:03:49:24:2f:71:c0:b7:a3:60:f2:cf:b2:42:cf:
                    df:b9:da:2d:bc:91:39:46:c1:8a:2c:75:f3:cc:e4:
                    06:7a:51:a1:44:4d:9d:1f:85:6d:30:d1:c1:e6:16:
                    28:b9:f8:37:5a:9b:38:45:e9:90:21:7f:fe:7f:43:
                    47:da:0a:c0:89:cc:cb:43:ca:f9:16:7b:18:19:46:
                    e9:1e:a4:65:d8:5f:c5:f5:bd:cb:11:2d:47:8c:94:
                    16:4f:d5:29:1f:c1:c4:77:af:e8:9d:86:2a:b6:87:
                    ab:5e:31:be:a4:bc:3c:10:80:9c:76:a2:46:45:54:
                    39:24:dc:97:37:4b:e4:72:eb:91:f1:b0:01:02:53:
                    0d:55:6f:25:86:35:ae:4b:b8:b6:bc:38:15:ee:46:
                    6c:80:c8:94:e1:84:32:4c:35:88:44:84:24:9f:d4:
                    6a:d7:48:7d:5c:e1:01:79:d7:4e:82:3d:9b:7e:cb:
                    ac:52:a5:91:b5:14:1b:01:24:d4:71:58:ab:d6:9f:
                    09:62:49:22:c7:1d:d0:e7:69:fe:c8:5e:78:a9:e3:
                    6c:88:80:14:00:b2:59:fc:05:b8:68:ab:39:fc:3b:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:EF:C1:C6:40:9B:AA:EB:BB:F0:E0:27:1C:82:5A:B2:4F:D5:E8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134362e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:ea:1d:cf:3e:84:ae:9c:4c:e5:5d:3e:65:53:7e:f6:ca:
         9e:19:e7:f2:26:55:b5:a7:60:39:73:b5:f6:d4:8e:74:b5:44:
         79:0d:b5:a0:b1:e3:b7:af:af:8e:32:53:57:c3:d4:8a:eb:d2:
         b4:70:a4:2c:90:39:33:3f:fa:d3:1b:f0:18:ab:b2:86:22:ec:
         90:09:44:41:94:98:b2:14:56:f4:04:5a:1a:a6:2a:b0:18:60:
         63:03:35:a4:14:5a:b8:07:f5:8d:76:13:06:dd:ba:17:0c:48:
         30:e7:50:20:b6:58:be:34:a5:53:a6:78:48:6f:fe:00:40:b9:
         73:5d:15:a3:63:a4:46:86:32:04:92:41:a5:e1:66:bf:e7:98:
         e7:1f:67:40:72:90:ce:18:d9:5d:d7:f0:a1:fb:cf:fc:f1:d7:
         43:a9:a6:d8:87:1e:31:d0:8f:18:8a:17:21:a9:8b:35:49:84:
         bf:47:4d:e6:df:f2:8f:4b:c9:88:f1:2d:14:5e:cb:7a:dd:f4:
         fc:03:70:fc:94:98:5f:26:01:e9:26:fc:d7:b3:4f:a2:e2:6c:
         5b:8e:35:3b:17:1e:4c:a7:00:42:15:87:f5:18:57:47:22:3e:
         cb:c1:2b:98:f8:c2:68:60:b0:90:1f:34:42:c2:20:3c:26:f9:
         7d:b3:9f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:12 2025 by rpki-client