This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e20383334.roa
File:                     3136392e34302e3135312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          DXTdmPyZOFiz1AOxiJd2sJR0ThA4P6eqgNQrn5XjLGw=
Subject key identifier:   9E:5D:D0:6E:B6:F4:36:AD:9B:B2:23:95:41:65:50:06:04:37:3F:56
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       38C70A738335C238820EC314B80409740AA3E1B3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e20383334.roa
Signing time:             Tue 02 Dec 2025 08:24:43 +0000
ROA not before:           Tue 02 Dec 2025 08:19:43 +0000
ROA not after:            Tue 01 Dec 2026 08:24:43 +0000
asID:                     834
IP address blocks:        169.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:0a:73:83:35:c2:38:82:0e:c3:14:b8:04:09:74:0a:a3:e1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  2 08:19:43 2025 GMT
            Not After : Dec  1 08:24:43 2026 GMT
        Subject: CN=9E5DD06EB6F436AD9BB223954165500604373F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:1c:ed:e4:32:96:91:37:8c:97:5d:9e:94:
                    e4:58:21:5d:c5:9c:d3:64:38:9f:09:6e:f8:26:5b:
                    c4:7e:ac:05:12:14:b3:91:07:da:8f:08:2a:c9:df:
                    d6:66:ca:24:e1:75:a7:93:fd:a3:5b:89:fb:fa:c2:
                    70:c6:64:20:f0:32:a4:58:41:fe:3f:a8:95:5f:7c:
                    c0:a9:f3:90:9a:83:2d:43:e8:2e:ad:1b:a0:8b:f3:
                    fd:79:16:dd:00:06:8c:00:a5:f4:d3:1a:d1:37:f6:
                    05:db:7b:08:4c:02:84:94:b0:95:6d:fd:52:44:6f:
                    c4:af:ec:59:71:65:d9:87:1e:6a:de:32:f4:92:52:
                    12:3a:1b:cd:33:55:e5:4f:68:12:68:95:ab:9c:93:
                    07:45:e9:de:c3:5b:fb:5c:4c:48:36:2e:a1:b7:e2:
                    a8:d0:87:8e:89:37:ee:52:94:52:a3:1d:54:b4:e0:
                    85:98:0d:4a:06:a2:a0:84:41:7f:59:15:a6:66:f4:
                    16:50:9d:da:c6:71:ee:1f:52:ce:a6:83:39:53:6b:
                    27:b7:ee:80:24:c7:f0:68:50:d8:1d:a9:e8:59:82:
                    b8:b0:33:ec:24:5c:0e:86:d4:24:74:58:d5:12:73:
                    2c:68:fd:41:f9:5d:58:48:b0:1d:f2:72:1a:48:e3:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:D0:6E:B6:F4:36:AD:9B:B2:23:95:41:65:50:06:04:37:3F:56
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:49:f5:ef:27:f2:71:bc:d9:13:58:8d:d5:35:95:96:23:e8:
         01:12:d8:79:18:bb:51:25:63:bc:8b:68:6c:39:d0:a5:5f:6f:
         2a:59:54:78:1f:ca:af:76:49:64:9c:8c:80:c9:86:00:b5:47:
         b1:92:96:55:b5:15:ae:da:32:e6:7c:27:b1:eb:c2:03:be:7b:
         94:85:7e:5f:4e:e7:1b:71:1f:a1:a1:73:4c:7a:e4:ee:e1:ce:
         54:c2:19:6b:50:ef:d1:03:f3:88:84:61:24:9f:2d:1e:3e:cd:
         7f:e7:d7:f9:1e:fb:bc:df:be:42:93:7b:dd:cf:2c:02:ad:c6:
         54:9b:f6:66:88:62:b4:0c:f8:c7:c1:08:8f:43:49:c4:56:e5:
         8d:9d:21:53:c3:11:c6:f9:78:ff:aa:8d:cc:73:e1:3d:93:0c:
         e4:ca:c9:d2:50:fe:fd:2f:d4:6d:20:7f:c8:65:f4:d0:82:9b:
         6a:d2:74:5a:af:3f:41:b2:67:00:d4:d4:45:d1:64:86:99:3f:
         67:9f:58:e1:13:02:bc:1e:f2:2e:5a:ca:83:22:f6:63:ce:4a:
         76:2f:c8:22:22:00:3e:f9:b7:0f:e7:fa:83:37:90:86:9d:4d:
         4c:f0:49:7f:72:9f:50:f9:b3:7f:45:e6:5b:cd:ae:30:7d:32:
         c3:c7:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:03:32 2025 by rpki-client