This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33382e302f32332d3234203d3e20383334.roa
File:                     3136392e34302e33382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          T+/1LCwLupZLaTk1M4BCXBDCZgJY0PpwA09AuVQlj+M=
Subject key identifier:   6E:0B:C3:7E:AE:DC:81:D3:06:6A:29:AC:E5:D4:57:1E:0C:EF:A1:5F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       67BD7384C3942C6733C9E54A70E7878D9EBC0A39
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33382e302f32332d3234203d3e20383334.roa
Signing time:             Thu 12 Feb 2026 01:05:31 +0000
ROA not before:           Thu 12 Feb 2026 01:00:31 +0000
ROA not after:            Thu 11 Feb 2027 01:05:31 +0000
asID:                     834
IP address blocks:        169.40.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:73:84:c3:94:2c:67:33:c9:e5:4a:70:e7:87:8d:9e:bc:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:31 2026 GMT
            Not After : Feb 11 01:05:31 2027 GMT
        Subject: CN=6E0BC37EAEDC81D3066A29ACE5D4571E0CEFA15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:d8:26:62:ac:c7:cd:5c:4b:02:07:aa:59:
                    11:7e:de:fc:f0:84:37:66:09:38:76:15:b6:0c:fa:
                    e1:9d:af:9c:22:af:ef:c7:d1:35:13:3c:db:95:29:
                    1b:86:d7:10:b0:da:5d:e3:60:3d:5a:ec:99:e3:e0:
                    bc:77:01:81:4d:cc:bb:91:11:3a:a6:03:77:3c:e3:
                    63:e0:20:ec:ea:8d:b3:72:95:30:4e:a7:41:49:a7:
                    ac:9b:77:61:1e:81:2d:36:4d:d5:8c:a1:b7:37:ae:
                    85:6a:88:9c:e4:65:84:ec:16:40:79:69:60:9d:90:
                    a1:e5:ba:1e:77:cf:db:71:11:a5:18:dc:a9:da:69:
                    b4:33:9d:5f:70:5d:fe:ce:18:2e:f2:23:a8:6f:7b:
                    62:e3:0c:88:04:d6:e2:f8:e5:bf:29:db:34:88:c9:
                    79:18:7f:71:c5:ee:76:e8:50:e7:b4:9e:0f:56:ad:
                    6f:9e:d1:c3:3c:64:f8:e3:cb:4d:25:89:0e:84:da:
                    a0:58:61:7a:10:5c:c9:9e:8e:25:08:bf:90:8c:48:
                    51:61:e4:f3:87:3e:32:3b:cf:92:ea:6c:ed:30:f9:
                    a4:99:bd:03:02:de:f7:19:1b:fc:4b:44:e0:71:04:
                    b2:b4:98:3d:84:f2:4f:ac:a4:12:f3:8f:9f:8e:04:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:C3:7E:AE:DC:81:D3:06:6A:29:AC:E5:D4:57:1E:0C:EF:A1:5F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e33382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:c6:d5:2c:0d:dc:ca:1e:f3:ba:c1:e2:75:25:07:5c:58:
         ba:01:e9:00:b8:f2:83:80:eb:68:ef:46:ff:bd:d6:45:43:15:
         ab:f1:8e:ca:aa:f7:1d:5a:47:27:cd:d1:11:5f:8f:4d:22:e5:
         0f:92:30:c7:13:59:85:21:30:3e:00:12:81:3f:9a:bf:bd:7e:
         08:16:52:b6:e9:b7:d6:9f:00:21:e4:8a:3e:4a:5a:3b:64:fc:
         8a:d0:d2:f9:9c:ae:f3:20:64:95:19:12:8b:69:ce:02:64:cb:
         e2:0b:c5:97:81:9e:31:c6:10:c4:c3:ce:73:97:b1:fc:5a:6a:
         3a:f0:04:1e:33:ca:5c:d7:b5:3e:68:7c:5e:f9:08:8f:97:4f:
         49:5e:d2:61:f7:18:27:9e:34:6f:16:5e:e5:a9:f2:2e:45:46:
         e6:ce:88:72:dd:38:0e:bd:ca:50:28:d7:67:f4:a3:68:14:78:
         a6:ae:94:66:f1:1f:7d:d9:44:20:27:eb:ad:2e:e5:17:dc:25:
         9c:64:5f:dd:bc:9b:15:1d:a0:ff:b3:17:a6:10:31:5d:fb:38:
         ab:9a:7a:5b:14:af:1e:e2:86:ec:4f:21:20:9d:42:47:33:22:
         c3:68:64:59:63:ad:2c:11:f0:03:b6:fc:18:a8:a5:4c:c9:9a:
         c4:bb:65:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:10 2026 by rpki-client