This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3234302e302f32302d3234203d3e2035363530.roa
File:                     3136392e34302e3234302e302f32302d3234203d3e2035363530.roa (raw, json)
Hash identifier:          v0SgB5BUPCRU7phVCuDGTuYHgL0a/rUQWv2cc32TyQU=
Subject key identifier:   5D:D6:0F:03:72:46:C4:5E:22:E2:64:BA:B2:6A:68:79:A9:B8:8D:CC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       76B1A5D17FA3A219FBCF67494144F0BA60BC640B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3234302e302f32302d3234203d3e2035363530.roa
Signing time:             Thu 04 Dec 2025 09:50:09 +0000
ROA not before:           Thu 04 Dec 2025 09:45:09 +0000
ROA not after:            Thu 03 Dec 2026 09:50:09 +0000
asID:                     5650
IP address blocks:        169.40.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 13:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b1:a5:d1:7f:a3:a2:19:fb:cf:67:49:41:44:f0:ba:60:bc:64:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  4 09:45:09 2025 GMT
            Not After : Dec  3 09:50:09 2026 GMT
        Subject: CN=5DD60F037246C45E22E264BAB26A6879A9B88DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:a2:83:ec:9d:84:03:e8:da:15:82:48:5e:
                    e5:f6:c5:40:d9:2d:b7:62:8e:be:60:d9:6e:03:df:
                    d1:f2:00:70:d4:10:99:b3:d4:62:bb:e5:70:05:05:
                    54:0f:63:7a:d9:40:e5:d8:40:e6:c4:88:72:1f:01:
                    b1:83:42:dd:74:87:bc:5f:a8:34:03:0e:f9:c3:f6:
                    31:5b:c8:28:fd:bb:80:7e:5a:7e:b2:85:b5:e6:a5:
                    d5:c9:14:30:e5:6a:f4:f5:48:e9:a6:cf:62:e6:36:
                    9c:37:f8:bc:17:bc:8c:21:f5:a8:ae:ab:8b:b9:a6:
                    9d:c0:3f:89:6c:b4:4a:01:ce:cc:7f:6c:ac:70:e6:
                    64:9f:8d:50:a8:22:16:4b:65:24:9c:9b:3e:9a:d6:
                    a7:d5:a8:e9:c1:c5:b2:07:e7:bc:16:86:f2:bd:da:
                    14:5a:50:dc:ba:7e:05:2c:17:39:e9:16:33:4a:0a:
                    cd:2e:0e:cf:23:b1:aa:44:6a:e2:cf:3e:84:67:78:
                    cb:33:81:b4:3f:e1:d6:a1:d3:04:ec:48:67:c5:3e:
                    8d:70:8e:f5:a8:5f:4a:93:69:6c:88:bc:b8:b4:f8:
                    ac:64:ca:c2:e7:df:09:aa:99:ef:68:3b:ac:3a:b4:
                    4c:2d:a9:13:dd:7d:ff:4c:ea:cc:b7:1e:47:59:f0:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D6:0F:03:72:46:C4:5E:22:E2:64:BA:B2:6A:68:79:A9:B8:8D:CC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3234302e302f32302d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:b7:41:c8:d1:6b:c5:35:8c:32:06:51:3f:22:b7:fe:a6:
         00:63:4e:dd:32:84:a1:5e:9e:f1:97:e9:78:1f:7f:ed:9e:57:
         97:46:18:8b:35:03:79:12:88:3e:e1:49:cd:f3:2a:61:af:63:
         bc:d6:b8:6f:59:e5:ca:78:35:c2:fa:9e:2b:ca:40:be:92:1e:
         59:7a:08:ce:ec:58:c5:ad:92:4f:f3:c5:ed:af:fe:e9:51:49:
         7e:38:a7:9b:9e:f5:44:b3:d0:e9:24:ae:45:f2:b4:4f:07:08:
         bb:9e:e3:9c:1e:c2:fa:10:f8:df:49:9c:f7:43:ab:77:b0:7a:
         fa:b9:c4:70:bb:a6:73:b5:65:05:3f:6c:f7:21:69:10:e8:69:
         e2:a8:88:5e:d8:11:80:35:e3:1e:51:8b:4c:e3:27:07:a6:39:
         74:4e:a3:7b:0d:f2:c8:22:b0:d0:4b:51:81:29:db:77:ed:7e:
         78:fa:13:91:79:c0:b7:cd:6d:63:50:1e:54:5e:16:b7:66:73:
         cd:c2:d9:df:d5:7f:1f:7c:17:9f:0d:40:48:4a:e8:b7:6e:e9:
         7e:96:76:f0:79:c9:a7:4e:b9:ee:3d:ad:31:8b:ad:16:d5:d3:
         aa:56:4e:21:aa:a5:99:34:ca:6a:77:f3:2a:c7:bf:e6:0a:06:
         66:a3:00:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 06:03:33 2025 by rpki-client