This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34302e302f32312d3234203d3e20383334.roa
File:                     3136392e34302e34302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          UOJ1NL3VDATIweuq+GzcDSQiup7DipA9xFbv8BbEtkI=
Subject key identifier:   84:5B:36:EC:65:35:43:AA:08:2A:A2:E6:F8:17:D6:30:4E:58:E8:EC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1CC4869F1F706C3AF0D4F54FBD728B706641BA10
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34302e302f32312d3234203d3e20383334.roa
Signing time:             Thu 12 Feb 2026 01:05:31 +0000
ROA not before:           Thu 12 Feb 2026 01:00:31 +0000
ROA not after:            Thu 11 Feb 2027 01:05:31 +0000
asID:                     834
IP address blocks:        169.40.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 07:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c4:86:9f:1f:70:6c:3a:f0:d4:f5:4f:bd:72:8b:70:66:41:ba:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:31 2026 GMT
            Not After : Feb 11 01:05:31 2027 GMT
        Subject: CN=845B36EC653543AA082AA2E6F817D6304E58E8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:11:09:78:16:fa:be:8d:5b:84:c3:18:3a:
                    b9:ba:fa:41:48:4a:15:ba:ca:e4:d5:c8:b9:e2:a5:
                    1b:44:bb:03:d5:37:97:7f:5a:2d:d2:4f:94:35:ad:
                    c3:0c:b3:b5:b1:d4:ea:27:92:57:2b:f7:eb:06:9c:
                    b4:5f:6c:4b:1a:8f:cc:62:d1:dd:58:f8:da:ee:97:
                    26:2d:b2:b5:f0:c6:74:b6:88:b9:1d:23:0d:b3:be:
                    f7:fa:94:a8:d6:9d:b2:ed:48:6d:71:85:67:a8:c7:
                    6c:e0:7c:e4:71:8a:2b:d7:7d:f2:9d:35:9d:4b:b8:
                    c0:06:03:41:be:19:32:53:c4:28:c9:5c:a7:ab:67:
                    52:61:5f:14:19:1a:0c:f9:64:14:57:c6:5d:aa:64:
                    ed:60:27:3d:41:71:a3:0a:f9:c5:02:85:01:95:30:
                    f0:90:53:79:44:3d:47:8e:73:d0:85:2f:64:55:18:
                    20:4a:62:b7:cf:cb:de:72:db:6c:86:94:4d:aa:ad:
                    33:1f:12:8a:44:d9:cd:e1:fd:bf:04:46:04:08:77:
                    a8:43:66:ad:43:58:88:d2:99:de:d4:31:bd:a2:07:
                    69:cd:76:ac:70:a3:02:1d:15:db:cb:9b:27:ce:59:
                    b8:ed:f3:8a:15:d7:8d:ae:e3:6b:29:d0:4d:48:e7:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:36:EC:65:35:43:AA:08:2A:A2:E6:F8:17:D6:30:4E:58:E8:EC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e34302e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:89:03:f4:a6:98:50:50:e9:f3:12:1c:9a:35:55:0d:c3:
         dc:a1:30:36:5d:32:98:e9:6a:cc:cd:83:84:00:a3:66:47:f5:
         52:1f:32:b8:ea:b3:97:b0:4e:72:e3:db:2a:9c:82:cb:cc:e2:
         2b:39:c3:fc:09:fb:e3:90:17:42:ca:15:0e:b3:b1:12:d9:76:
         7f:91:97:32:eb:34:e3:94:b0:b4:6e:2d:31:f4:93:2f:9a:b2:
         b1:51:45:83:b4:6d:24:79:8d:ff:53:35:e5:a9:d1:5f:19:4f:
         38:af:a0:32:18:fe:90:53:5d:2f:84:08:5c:75:e3:b0:4c:8b:
         57:a8:e1:38:b9:ca:3b:51:9d:a0:c2:2a:66:a3:e8:67:2a:a1:
         79:53:c1:29:c4:bb:ee:50:32:c4:80:b2:90:3f:28:4e:5d:a0:
         22:b5:8d:83:e5:39:33:c5:51:1c:16:8d:09:95:a0:53:a0:be:
         0a:c8:f4:ca:1f:73:b8:c4:76:77:5d:10:c1:68:a4:b2:c9:03:
         81:87:88:ae:46:70:e8:8a:3c:da:02:da:89:40:3a:28:ba:42:
         c4:8a:a6:93:22:78:65:d2:05:d3:51:a0:90:55:e0:3a:fe:db:
         2e:d4:e7:ea:34:18:33:ac:30:4e:c2:f5:97:9d:98:f2:8a:ab:
         76:24:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:09 2026 by rpki-client