This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3137362e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          zzsKpxmqadYafLXpEhNO5jmfeAWCrC+uN+ZtAC73VD8=
Subject key identifier:   7E:A3:92:9F:40:B4:A8:D4:01:02:91:DC:64:E3:E4:AA:96:CE:9C:93
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       34D712B8F0AC0C18D61DA9B707D832DB7638004D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:05 +0000
ROA not before:           Thu 04 Dec 2025 09:45:05 +0000
ROA not after:            Thu 03 Dec 2026 09:50:05 +0000
asID:                     5650
IP address blocks:        169.40.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d7:12:b8:f0:ac:0c:18:d6:1d:a9:b7:07:d8:32:db:76:38:00:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:05 2025 GMT
            Not After : Dec  3 09:50:05 2026 GMT
        Subject: CN=7EA3929F40B4A8D4010291DC64E3E4AA96CE9C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d9:5a:2c:c6:09:4c:58:5f:41:5f:fb:6d:ae:
                    0a:6b:ca:a2:b0:39:9e:ed:80:c3:88:e7:08:ba:01:
                    b5:6c:60:dd:4b:80:0c:0b:67:eb:81:3e:e1:ad:df:
                    33:24:05:54:46:f1:29:1b:a4:95:24:d4:9a:01:a5:
                    bf:d6:f7:26:4a:cd:84:cd:e7:2e:b5:4a:4d:79:92:
                    d5:84:e4:5d:5c:0d:dc:c6:fa:d3:0c:03:d6:b5:3a:
                    23:1e:72:19:23:65:6d:8e:47:15:39:e8:14:cf:0d:
                    8c:e2:e1:cf:c4:0b:a7:18:8a:c7:b9:3a:7f:a9:7c:
                    28:ad:e9:fa:ac:6a:5f:44:75:48:72:30:38:fa:91:
                    47:3d:53:23:e6:ea:20:15:b5:ff:fd:50:0c:b7:4f:
                    65:a7:19:d8:5b:87:79:fb:a7:ce:35:ee:fa:e0:3c:
                    a7:bf:96:5e:c6:41:26:66:72:70:03:d1:df:2f:56:
                    a8:7e:12:82:ff:44:d3:15:e8:8e:b2:0e:e8:29:09:
                    ee:f7:59:ee:51:64:b8:4b:ed:72:b9:43:c2:23:5e:
                    a6:c9:b6:8a:81:0e:86:df:e9:95:08:2b:f2:e9:c7:
                    cc:c2:33:65:66:85:66:03:8f:06:7d:56:f8:73:34:
                    7e:74:0e:ad:29:15:27:99:55:a1:7d:34:46:9c:b9:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:92:9F:40:B4:A8:D4:01:02:91:DC:64:E3:E4:AA:96:CE:9C:93
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3137362e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:1c:84:dc:93:2e:89:52:cc:13:2a:37:90:fb:5a:d6:61:f8:
         c5:a1:5e:03:ae:df:47:b0:08:9e:ca:82:9f:23:91:4a:a1:50:
         f7:82:3f:45:d6:9c:ec:61:c2:56:27:2d:06:0a:d7:18:b0:55:
         2e:30:20:73:83:f8:e7:48:ac:5c:fc:63:61:e2:d9:a4:14:04:
         50:37:01:15:32:35:07:9a:2f:10:89:3d:ed:d1:e9:4f:56:33:
         13:39:1d:71:53:5f:b4:bc:cf:41:35:33:95:81:8b:64:55:6b:
         e0:69:2b:d5:d2:6e:d6:3c:09:2e:8a:f2:48:ca:c6:24:da:64:
         d9:1f:26:4e:13:39:09:35:23:84:73:53:79:9f:2f:d0:45:a1:
         5b:7c:c2:b3:8a:eb:15:01:45:fa:77:5c:59:a6:84:f4:32:99:
         b6:43:44:21:67:94:be:1e:f4:89:d7:87:d7:88:0e:28:c3:9a:
         58:a2:d0:27:07:9b:5a:61:4f:07:0f:56:22:84:58:30:96:df:
         64:2f:7b:e5:32:f3:a9:b6:0f:1a:6e:20:ab:d9:68:02:b0:20:
         15:89:89:fd:0a:b2:68:c7:9e:ae:24:88:fa:71:e8:b2:6e:0c:
         03:42:08:d2:39:3a:81:d2:a7:3f:06:78:9a:06:55:cf:d4:8c:
         98:75:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:03:32 2025 by rpki-client