This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa
File:                     3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier:          JuD6bIm3NYiNlkfnz0stq5G2nXHVDZJ/m0CGCq0LXZM=
Subject key identifier:   B9:27:E9:99:8F:DE:E3:6F:38:F8:79:D7:44:95:55:EB:2C:B2:0E:BB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1F5C4B6E7441145137130E2E593EAA8663AEB50B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa
Signing time:             Thu 04 Dec 2025 04:40:53 +0000
ROA not before:           Thu 04 Dec 2025 04:35:53 +0000
ROA not after:            Thu 03 Dec 2026 04:40:53 +0000
asID:                     401776
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5c:4b:6e:74:41:14:51:37:13:0e:2e:59:3e:aa:86:63:ae:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 04:35:53 2025 GMT
            Not After : Dec  3 04:40:53 2026 GMT
        Subject: CN=B927E9998FDEE36F38F879D7449555EB2CB20EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:c1:30:5a:69:2c:d2:2f:9d:30:94:3f:8f:
                    e8:dd:3d:cd:24:04:b6:4f:ab:2c:d8:6b:48:b6:78:
                    ea:3c:d3:de:e4:6b:a1:b0:ed:d9:bf:0b:27:e7:ec:
                    f1:96:57:2c:ac:61:f8:57:d6:59:62:50:ba:47:1c:
                    86:54:d3:56:de:39:4b:5f:83:be:e9:87:ff:3f:0b:
                    a2:0a:08:aa:32:4f:25:83:b1:b9:b9:b3:c4:4e:fa:
                    b5:a3:3c:9e:4c:7d:7f:4a:f5:b2:c3:03:32:77:0e:
                    f0:fb:e6:d6:54:f1:eb:61:e3:7b:e4:15:61:a7:a6:
                    43:ea:b3:15:5b:ec:3e:37:d5:be:20:24:c7:06:f9:
                    66:4c:86:b7:7d:94:2f:f3:9b:f1:5a:a7:4b:5e:98:
                    e2:c1:2e:df:ed:5a:08:e9:48:29:2c:99:7a:81:f4:
                    de:d7:b3:64:82:f0:d6:33:ff:50:fb:71:69:0d:c6:
                    c0:38:a4:de:ed:e8:f9:28:63:69:6a:ba:05:58:91:
                    74:33:dc:f5:49:ee:88:d8:b4:d2:d8:54:25:ce:fa:
                    9b:1d:d0:ec:7f:bd:03:60:00:cb:4e:40:a8:67:49:
                    1d:1d:6e:7d:b3:a5:8e:94:3b:ab:de:a1:48:f0:c9:
                    98:e6:ef:94:da:a0:c3:3f:5f:ed:22:c5:9f:47:44:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:E9:99:8F:DE:E3:6F:38:F8:79:D7:44:95:55:EB:2C:B2:0E:BB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:60:b0:82:9e:cb:83:61:4d:a1:cc:16:c0:6c:07:f3:7f:
         13:76:a2:4a:e4:c4:32:02:89:93:36:e0:7b:7a:ee:4b:d3:c9:
         e7:82:28:ca:0e:6d:1e:4a:34:dd:fe:a4:3e:18:24:58:5c:dd:
         7c:77:73:11:b7:3a:4c:2c:87:63:20:cc:6a:d6:49:28:2f:58:
         34:33:ea:54:37:b1:0f:e3:7f:15:b8:b5:2f:06:88:e9:92:f3:
         30:97:82:95:7d:4a:0a:18:41:a6:bc:b4:9f:cd:4c:22:f0:c2:
         95:c5:34:e2:e2:1b:b3:07:19:88:c9:62:f6:69:97:62:41:e6:
         3b:20:8d:3f:c2:d9:a7:0d:d3:49:92:31:eb:13:8e:60:32:69:
         11:89:66:d5:10:8b:8c:c6:e2:69:21:f4:05:bb:e6:78:19:6e:
         7d:a0:86:b4:00:c7:28:53:b7:ac:5b:b5:9c:b5:b0:25:0f:9e:
         6a:39:1d:71:2d:5f:ad:91:68:e9:bf:ab:dd:3d:97:21:8a:a8:
         bd:0d:7b:4d:21:60:fd:f0:eb:b4:c8:7b:4d:a2:26:d7:63:18:
         10:7d:ce:90:1f:cb:19:f6:8f:61:54:19:73:4f:1e:79:4d:bd:
         dd:48:ef:f4:63:f4:a5:3d:90:0c:79:cb:a6:f3:ce:41:bd:ed:
         de:bf:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:31 2025 by rpki-client