This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138382e302f32322d3234203d3e2035363530.roa
File:                     3136392e34302e3138382e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          M9AwAEx9+HRDzbLgsnbSJv3B1ZL5y/TZElfiW8dCqmo=
Subject key identifier:   8A:04:F1:FC:12:C1:13:9C:A8:06:65:20:58:32:0F:29:77:9C:A8:BA
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5A392B7FE69DA6AC9E38233EC72C28F20DBB0FD4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138382e302f32322d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:07 +0000
ROA not before:           Thu 04 Dec 2025 09:45:07 +0000
ROA not after:            Thu 03 Dec 2026 09:50:07 +0000
asID:                     5650
IP address blocks:        169.40.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:39:2b:7f:e6:9d:a6:ac:9e:38:23:3e:c7:2c:28:f2:0d:bb:0f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:07 2025 GMT
            Not After : Dec  3 09:50:07 2026 GMT
        Subject: CN=8A04F1FC12C1139CA806652058320F29779CA8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:c2:db:3a:04:b8:50:fe:75:99:29:39:1c:
                    52:5b:b1:a3:83:d0:3a:c1:93:e6:fe:1d:f1:96:98:
                    47:4b:92:e2:d6:79:3e:7b:3a:b2:75:d5:d6:3e:71:
                    d2:5d:aa:1b:41:cf:ff:85:b5:e5:f9:40:55:fa:2b:
                    c4:f0:a0:a9:ca:ed:ff:88:77:89:ad:78:69:d1:f4:
                    f5:8e:5e:81:b3:61:ac:10:3b:8c:a7:3e:36:2e:30:
                    b7:18:11:81:4f:bb:ce:f0:76:51:ca:91:e8:3a:d2:
                    9e:25:02:8f:1c:cc:99:cd:f1:75:6c:a4:18:a2:2d:
                    73:93:23:c1:7f:86:49:23:0e:c7:0a:60:07:33:22:
                    05:b9:be:3f:62:20:b4:fb:ec:1a:a6:07:a4:a1:53:
                    11:f8:02:ca:bb:a3:db:da:fc:6d:4f:bf:2a:b1:f7:
                    e3:c9:6d:17:4d:02:05:a0:9a:fb:be:96:da:c8:b9:
                    40:25:31:ac:04:73:75:f2:7e:14:36:e7:fe:cd:25:
                    7a:9d:b7:0a:38:ce:ad:12:55:7c:2a:c8:e9:89:3e:
                    21:0d:47:ec:0d:f9:4e:58:5f:27:d7:12:ae:2c:67:
                    d5:dd:d4:48:0a:e9:00:1e:6c:c4:14:2e:bd:b3:0f:
                    7c:ec:df:10:4b:32:7c:20:f9:9e:4c:fe:e1:7a:5d:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:F1:FC:12:C1:13:9C:A8:06:65:20:58:32:0F:29:77:9C:A8:BA
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138382e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:12:ef:b8:47:d4:b2:15:0b:ae:1b:68:4e:d6:14:78:b0:23:
         fd:ca:22:25:51:c5:57:0c:37:8f:2c:19:b1:80:9d:45:35:3e:
         9f:7b:fc:bd:03:7f:1f:75:82:da:eb:8e:12:03:7d:78:b6:2e:
         69:5d:8a:c2:82:63:70:89:a5:5c:10:04:73:28:e4:e2:18:c8:
         b0:5e:0a:dd:c0:38:81:36:af:9e:ce:42:e2:06:da:35:ec:1c:
         b3:aa:47:2d:6f:ec:84:ad:f6:bf:f0:42:87:56:11:9c:e9:b9:
         06:cc:5f:ab:93:11:31:09:b0:52:45:f4:e8:80:7b:45:d8:7d:
         12:1b:75:0b:09:0b:ab:e2:b7:03:8e:27:7a:77:2b:cf:7c:91:
         2b:3e:4a:60:32:ee:8a:f5:aa:d7:3b:07:91:bf:47:eb:cf:7f:
         cd:9d:de:9a:8d:44:96:0c:05:0c:f7:a2:e4:4b:3d:f8:bc:2f:
         2e:b6:e0:b6:98:19:65:ad:50:30:fa:ad:00:62:13:96:e8:15:
         a3:8f:b2:44:b1:36:b8:68:09:31:65:5b:bd:ac:cb:a6:51:44:
         ed:4e:42:b7:2c:43:51:e9:88:d1:2c:4a:a9:95:c3:fa:d4:12:
         e0:ce:d3:a3:91:4a:83:d7:0f:f9:d0:cb:4c:41:65:70:71:c2:
         20:f5:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:58:12 2025 by rpki-client