This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135352e302f32342d3234203d3e203136323736.roa
File:                     3136392e34302e3135352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          Mp7DMRMTV4rYzUxscN+sYeaoewY9eDW9zHz9HEF612s=
Subject key identifier:   12:61:F5:53:3F:72:D5:7C:64:DD:0A:7C:A5:A3:52:82:E6:01:C9:7F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3CF289E026D4C04919D98D31F5835F4630D1211F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135352e302f32342d3234203d3e203136323736.roa
Signing time:             Mon 08 Dec 2025 06:10:01 +0000
ROA not before:           Mon 08 Dec 2025 06:05:01 +0000
ROA not after:            Mon 07 Dec 2026 06:10:01 +0000
asID:                     16276
IP address blocks:        169.40.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:89:e0:26:d4:c0:49:19:d9:8d:31:f5:83:5f:46:30:d1:21:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  8 06:05:01 2025 GMT
            Not After : Dec  7 06:10:01 2026 GMT
        Subject: CN=1261F5533F72D57C64DD0A7CA5A35282E601C97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:76:cf:07:74:78:8b:b2:2b:08:5b:d5:46:
                    8b:91:9c:13:3d:41:20:dc:12:46:9d:2d:e4:1c:5b:
                    93:9b:49:4d:d2:38:97:2d:57:6f:06:7d:78:2d:d7:
                    70:1c:14:72:23:39:fd:29:58:0a:c9:27:3e:f8:18:
                    28:b2:fe:6a:3a:27:48:73:4f:2f:c5:a9:a5:f1:f2:
                    cd:a7:56:41:f9:44:f8:79:b7:e2:d7:91:75:63:8b:
                    db:5a:d7:67:57:28:e3:44:e9:c5:95:a3:b2:91:94:
                    39:04:52:8c:ef:1b:47:9f:5d:c5:1c:fa:a4:80:88:
                    73:29:9d:12:12:14:2d:6a:ea:49:57:8d:db:dd:4d:
                    c8:6e:b4:75:f2:1a:e5:36:64:45:c7:41:5a:dc:5b:
                    24:e3:89:4c:e3:1b:93:fb:2d:f4:2f:81:8c:b2:70:
                    ca:2d:2a:d6:73:c7:6f:d4:f6:26:32:b2:f5:6d:a8:
                    bb:41:01:1c:1a:5d:13:80:f7:83:ca:e3:4b:bf:bd:
                    a1:83:a8:78:88:98:15:32:47:b2:62:62:36:df:2a:
                    9b:37:2f:8a:8d:4e:c6:d2:7c:7f:1a:a1:8d:de:41:
                    83:2f:94:b3:32:19:92:49:35:16:61:8b:9b:1e:63:
                    a1:83:cf:32:2e:93:ec:e6:aa:78:02:ce:b2:c2:d5:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:F5:53:3F:72:D5:7C:64:DD:0A:7C:A5:A3:52:82:E6:01:C9:7F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135352e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1c:c1:f5:24:d0:e2:ac:2b:ac:5b:07:a0:ad:37:00:12:f8:
         89:e5:71:3a:a3:13:d1:aa:45:c4:82:cd:9d:79:39:85:8c:c1:
         04:0d:6b:c2:d2:89:72:5f:4d:51:a8:ce:11:24:86:bf:dd:76:
         d7:ae:d6:5f:9d:42:5c:81:7b:b8:e2:47:9f:ec:7c:87:63:1b:
         e0:f8:7a:34:cb:95:5c:91:57:fa:e3:c7:59:0e:29:f1:90:38:
         f1:ae:62:47:d6:a0:ee:e9:f4:f9:39:24:69:41:23:6e:c0:17:
         fb:96:0c:ad:b7:ba:a0:2e:86:e2:db:7c:e7:db:e9:0c:5e:b1:
         99:ad:87:6f:ef:76:4b:ab:b5:72:ef:1e:0c:b4:40:89:7d:6c:
         84:43:b3:ea:56:d5:18:87:df:5b:fd:32:05:79:d5:b2:1c:8e:
         90:91:ee:cc:0f:9e:99:68:61:1a:13:e8:6d:35:1f:9a:41:db:
         69:48:86:2e:80:ce:1b:72:f8:83:ff:b1:33:dc:8c:36:0f:02:
         8a:51:6f:c2:f0:87:ec:12:1a:04:4b:d8:e2:88:a7:c5:4c:a7:
         42:f0:b6:11:c5:61:67:a0:41:64:b8:e4:9a:45:c1:92:ed:ac:
         91:ed:8f:da:4f:8f:81:37:fd:4d:74:c2:54:bc:e9:60:c1:44:
         21:f3:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:40:02 2025 by rpki-client