This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137322e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3137322e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          anWh/umcN76OpEW+F3wTuWlB6SEpLCvcbl2NroRa3Ic=
Subject key identifier:   54:86:40:DF:6F:D9:26:9A:CB:F9:45:D9:D2:69:EE:BB:0E:31:22:CC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2CAF6F80A92B4E0E8B3942935B3160CCF9384D5B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137322e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:07 +0000
ROA not before:           Thu 04 Dec 2025 09:45:07 +0000
ROA not after:            Thu 03 Dec 2026 09:50:07 +0000
asID:                     5650
IP address blocks:        169.40.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:af:6f:80:a9:2b:4e:0e:8b:39:42:93:5b:31:60:cc:f9:38:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:07 2025 GMT
            Not After : Dec  3 09:50:07 2026 GMT
        Subject: CN=548640DF6FD9269ACBF945D9D269EEBB0E3122CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:bb:e8:59:a6:6d:30:01:15:5d:32:10:a7:
                    e6:eb:81:15:89:5d:b0:c7:89:31:49:a3:be:ff:04:
                    4e:f6:8d:81:01:61:b8:7e:74:94:26:b1:bf:a9:12:
                    af:1e:c0:fe:d8:94:b0:c5:94:7a:89:3f:ae:33:b1:
                    83:46:67:a7:db:71:e7:aa:17:10:6c:55:7d:70:31:
                    b2:f6:b8:cb:35:a8:8f:de:98:27:b3:7f:05:2b:66:
                    c9:7a:fd:01:6c:bc:9b:2e:f2:73:6d:b0:2a:37:a8:
                    23:d8:dc:f5:1e:dc:3e:59:b2:ef:21:74:ce:49:24:
                    18:dc:0e:17:3a:5a:dd:3c:57:c3:04:ad:26:21:a2:
                    bd:5e:83:95:ad:e0:a1:7a:68:ff:ae:ed:03:d6:c4:
                    41:ef:17:fb:70:2e:ad:e0:8e:2d:38:fe:68:5f:73:
                    fd:98:55:c9:39:33:2b:78:33:f8:a1:e2:c7:af:de:
                    2a:cc:57:97:53:d5:8c:c7:93:2f:f0:b7:4f:89:97:
                    29:22:b0:17:26:1f:ce:cc:91:83:97:7c:c0:7c:78:
                    c0:74:81:53:87:67:7f:ec:12:eb:94:b4:73:52:19:
                    a3:cf:6e:3d:8a:95:ee:53:ba:05:4b:93:2c:ed:18:
                    3d:e0:ea:2c:d5:32:d7:05:16:f8:a6:9c:dd:34:b2:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:40:DF:6F:D9:26:9A:CB:F9:45:D9:D2:69:EE:BB:0E:31:22:CC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137322e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:48:14:97:12:fb:a2:41:15:62:fd:77:52:02:45:e4:2d:
         cd:fb:3c:54:c9:32:91:5e:c3:3a:9f:c3:b3:bf:bd:6d:fd:cc:
         e4:1f:ce:9b:e5:77:6b:82:19:5e:8f:b6:1d:a7:2b:8f:5a:88:
         db:8d:ab:08:ab:a5:1d:5c:8f:cf:13:a0:2d:f4:fc:ab:50:2d:
         c2:bc:0b:a2:5a:21:86:ad:40:ab:32:a3:c6:25:f4:9e:f6:74:
         3e:5e:9d:3d:e4:11:36:03:30:fa:16:2e:a5:9b:7f:e7:9e:c6:
         3a:98:38:f6:c2:90:e5:59:c6:f4:d2:28:b8:8b:ec:2f:db:05:
         b9:62:04:83:be:a3:cc:80:88:91:ca:1b:9e:98:7d:37:17:eb:
         04:09:f1:f0:f2:4f:5d:21:75:d0:e3:91:e7:35:f5:1b:b6:10:
         1f:13:2d:d0:ee:a7:30:fd:95:b3:f6:b6:8c:33:37:67:5f:d9:
         43:60:8c:75:2c:d7:23:0c:bd:ff:e8:d4:3f:78:46:f5:d0:01:
         83:e5:05:c9:88:41:77:b0:15:8a:d0:61:60:f3:48:d2:28:e3:
         30:bf:cd:e7:3e:89:b7:1f:5d:8b:7a:9f:e9:29:76:c3:7f:bb:
         74:97:4c:de:c3:cd:3e:1a:09:8e:f7:0e:23:92:7d:96:8c:fb:
         98:64:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:10 2025 by rpki-client