This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3136342e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          MyUw+PzcDjsT0jFZCxoO9Fh2A8MLgfODUAPSWwGfa50=
Subject key identifier:   95:49:56:8F:91:E7:CB:65:52:EA:2F:B6:BA:09:5C:3B:74:95:FF:C4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       09E279EB0132BE2DEAC3D598C08DCB961C389F2E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:04 +0000
ROA not before:           Thu 04 Dec 2025 09:45:04 +0000
ROA not after:            Thu 03 Dec 2026 09:50:04 +0000
asID:                     5650
IP address blocks:        169.40.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e2:79:eb:01:32:be:2d:ea:c3:d5:98:c0:8d:cb:96:1c:38:9f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:04 2025 GMT
            Not After : Dec  3 09:50:04 2026 GMT
        Subject: CN=9549568F91E7CB6552EA2FB6BA095C3B7495FFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:7f:0c:e7:38:96:bc:74:87:1e:b2:37:77:
                    81:1b:ae:68:8a:bb:fb:4a:d1:aa:23:c2:18:b7:10:
                    18:bd:ad:67:b5:d0:a5:39:82:ee:b8:e2:32:4f:25:
                    62:f3:c4:ec:87:d8:bb:6d:bf:2c:fc:5d:0a:2a:6a:
                    81:78:a6:b4:ae:cd:7a:b7:4a:0c:e9:d2:e3:0a:2b:
                    ee:39:9d:4b:43:70:1d:11:90:f1:78:71:d2:64:7b:
                    f2:8c:e4:1c:b2:aa:d1:49:f6:5d:59:2e:3c:00:1d:
                    3b:28:5a:04:ec:3c:e5:ed:ba:b1:82:a2:35:f2:3b:
                    74:b2:ef:15:5e:30:4f:70:ff:a0:1b:68:5f:b1:87:
                    4e:42:b5:2a:a1:ec:96:5c:3a:ec:c7:60:38:61:52:
                    72:80:a0:08:49:1f:fb:cf:b8:08:12:0d:54:da:40:
                    66:cb:c5:17:56:2b:7c:40:b8:77:ea:5f:6d:d0:af:
                    44:59:02:31:16:8c:9c:32:d5:8b:f6:c6:84:65:73:
                    96:04:a1:95:eb:26:75:1c:b3:7e:2f:63:32:76:f9:
                    2c:bb:6a:58:59:a7:66:03:af:22:0e:00:08:50:60:
                    88:3a:26:57:e6:7b:9a:e0:85:b6:a2:46:6a:60:2e:
                    16:ae:a8:19:21:e0:a3:89:f8:d8:e5:fa:6e:b6:94:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:56:8F:91:E7:CB:65:52:EA:2F:B6:BA:09:5C:3B:74:95:FF:C4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:98:de:8b:c6:45:6a:3b:04:23:d6:c2:69:dc:ec:6f:a5:a2:
         8c:ae:ba:2a:80:17:f4:7c:b2:b4:40:b3:59:41:c0:b4:27:5e:
         dc:6f:cd:07:6d:61:a8:7a:59:87:d5:4c:80:78:44:69:b6:3d:
         c9:9e:51:47:34:e5:39:10:be:1d:18:e7:ae:60:d3:a6:cc:a8:
         0c:2a:13:bf:a2:e5:8c:13:68:b0:2b:f7:90:a7:0e:a0:d7:9c:
         5a:47:0f:51:3a:03:d0:87:de:eb:e2:98:49:85:79:ed:e5:20:
         2a:b4:7d:f1:17:16:33:b4:12:bc:ca:60:4d:cb:1d:87:a9:85:
         d9:34:ba:f8:65:0e:01:3c:73:19:12:6d:03:3a:78:08:73:c4:
         60:76:28:05:6e:c1:c8:fd:8d:77:84:aa:09:03:74:5b:f3:6d:
         1e:a3:ef:63:5b:72:28:2e:72:00:66:74:47:2a:a6:03:be:30:
         6f:6f:54:71:41:2c:f4:c8:24:e3:65:ad:1f:92:2a:f5:7d:33:
         e6:02:4f:f7:9e:a7:01:77:99:f8:3d:c6:9a:6f:32:7a:62:38:
         6c:41:df:67:8d:7f:a3:68:0f:98:b2:ee:87:b0:0f:7e:e9:21:
         f3:81:e3:7d:0c:7c:12:f6:55:26:28:6b:21:9b:c8:e3:04:b2:
         18:87:63:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:57:59 2025 by rpki-client