This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa
File:                     3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          IYHLla8ouZ8nohNajkW/m6cu8N46jGRZsDlDSuztkvk=
Subject key identifier:   D0:25:D3:01:C4:D2:94:56:EA:FF:A4:41:0D:32:35:1D:05:66:F2:3D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       05E41B9E16A447FA8718F4EF72568C887584AE10
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa
Signing time:             Thu 11 Dec 2025 08:09:18 +0000
ROA not before:           Thu 11 Dec 2025 08:04:18 +0000
ROA not after:            Thu 10 Dec 2026 08:09:18 +0000
asID:                     205886
IP address blocks:        169.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 23:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e4:1b:9e:16:a4:47:fa:87:18:f4:ef:72:56:8c:88:75:84:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec 11 08:04:18 2025 GMT
            Not After : Dec 10 08:09:18 2026 GMT
        Subject: CN=D025D301C4D29456EAFFA4410D32351D0566F23D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:20:bd:e1:fb:2e:5f:bc:26:4f:dc:2a:4c:
                    57:95:f4:08:4d:85:36:9a:d4:3f:31:43:b2:a9:53:
                    c9:dc:e0:7c:ed:5b:b5:6d:05:64:00:6b:48:9d:08:
                    a8:f2:44:48:20:9f:62:49:d4:7b:e1:59:7a:87:e1:
                    4b:c9:72:3c:6d:08:73:91:4d:63:55:0a:87:c1:0e:
                    bb:70:92:7e:0f:92:54:ec:c0:e1:2b:40:9a:e0:5a:
                    32:0a:b0:28:37:16:68:f4:30:d5:1c:95:bc:8f:83:
                    f7:d7:d1:6c:08:9e:be:29:e6:20:36:44:1e:1d:3b:
                    40:a6:0c:d2:26:0f:aa:8f:b5:7a:6a:6f:41:bc:d4:
                    52:c0:df:1a:41:fc:ca:2e:08:f6:24:de:94:a1:e1:
                    ba:66:1e:1b:ac:2a:fd:3f:a0:c9:5a:89:ea:f5:b9:
                    c8:5d:e6:43:07:ce:89:55:52:12:6a:a2:40:66:1b:
                    4a:be:72:51:0c:13:4a:0d:65:b7:33:dc:9a:eb:6d:
                    13:de:c0:c1:3a:e9:c9:5f:f7:74:8e:74:4e:36:30:
                    f3:44:63:89:94:2f:5e:78:ef:06:cc:75:df:3e:00:
                    f1:d7:1c:b7:56:2d:3c:7f:73:fa:11:a6:a3:64:18:
                    75:7e:24:7e:1c:cc:46:39:0f:1d:1c:6f:de:88:29:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:D3:01:C4:D2:94:56:EA:FF:A4:41:0D:32:35:1D:05:66:F2:3D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:da:19:76:4e:99:e1:27:c6:d5:4e:25:83:6b:a8:da:f8:c0:
         2f:fd:82:3d:e7:fb:20:9f:f3:2e:44:7f:64:a7:7b:71:52:70:
         3b:72:51:4a:82:8f:0d:08:61:a7:03:30:65:de:89:25:18:6d:
         a8:80:86:37:c1:f9:06:ff:df:09:52:21:d7:8c:16:06:5b:7b:
         8a:c8:45:02:0e:ea:a1:14:2f:d7:d4:a5:92:57:11:0a:99:b3:
         8b:98:e8:ca:43:c6:39:b9:2b:8d:7a:5b:4b:ea:c5:16:62:17:
         27:b4:58:04:05:ff:12:b7:7d:79:65:48:f4:1d:66:24:bf:f9:
         1f:ca:bb:01:fc:4e:01:2b:65:4f:e4:f4:83:dd:98:4f:a0:1e:
         b0:30:e1:0d:ff:24:f1:1e:cc:05:80:2d:16:cf:79:3f:aa:36:
         28:f7:e7:e1:46:dd:5a:b0:24:37:85:f8:b8:71:6a:2f:76:18:
         0a:72:1f:78:7b:09:01:d7:ad:30:b0:57:d1:13:d4:b3:66:77:
         70:33:ca:47:9f:9b:ea:f6:25:de:97:b9:a5:d2:6e:58:ea:15:
         5c:1d:61:b7:67:eb:e2:db:15:de:b0:27:1b:68:8d:88:6d:62:
         44:11:ce:72:51:40:43:10:65:ed:04:36:25:73:6c:9a:9e:dc:
         e3:1e:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:44:33 2025 by rpki-client