This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa
File:                     AS137517.roa (raw, json)
Hash identifier:          DKDWwJ40FA757tMZPxklhugzRexrsIXVbTOOcOecRuk=
Subject key identifier:   EE:58:AC:C8:46:B3:9F:DE:4C:26:87:33:FF:AE:A8:0F:D5:3A:17:82
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5AA843B8FAF8FC8DA4A7AF49CA0D122FEE7AD020
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     137517
IP address blocks:        169.40.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 19:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a8:43:b8:fa:f8:fc:8d:a4:a7:af:49:ca:0d:12:2f:ee:7a:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=EE58ACC846B39FDE4C268733FFAEA80FD53A1782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e8:ab:a0:05:40:2b:de:79:b1:88:28:14:48:
                    dc:fb:f3:4e:8b:db:c5:a1:45:f2:71:0e:69:08:5a:
                    df:0a:88:21:49:f6:5f:3e:be:65:f0:18:f5:1b:15:
                    38:4f:c1:79:f8:22:16:d9:91:a2:3b:99:2b:33:41:
                    b9:04:e7:2e:a4:0e:3e:d0:09:a7:8a:4c:a8:a1:16:
                    4f:7a:25:65:d1:7a:97:69:a1:84:bd:4a:17:be:a9:
                    7a:b3:1e:18:4a:55:dd:5d:cb:35:43:0e:1b:f4:3d:
                    18:a1:35:2e:f3:70:1d:7b:d7:36:6e:06:89:c8:4c:
                    28:29:12:4a:a9:10:88:1a:66:b5:40:1a:b2:3d:bc:
                    78:a3:83:c3:f2:f2:9f:bb:01:df:ff:77:b8:20:27:
                    87:54:03:8d:c0:11:82:d0:e4:ce:bd:18:3b:24:5b:
                    9e:92:ab:e0:37:32:c8:09:3e:5a:41:43:f9:e6:27:
                    c9:fb:55:d5:ec:b9:ba:2e:30:8b:84:20:ab:5b:16:
                    46:d5:c0:45:cc:1a:c3:dc:7f:2e:07:86:94:4a:a5:
                    dd:7d:9e:18:80:d3:74:b7:5b:38:1f:73:1a:50:6c:
                    ed:c3:39:e8:0b:19:c8:b9:ea:d5:6b:45:2e:bf:0f:
                    25:5c:3c:6e:2c:fc:ee:64:2b:d3:25:9b:84:99:96:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:AC:C8:46:B3:9F:DE:4C:26:87:33:FF:AE:A8:0F:D5:3A:17:82
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:55:4c:7f:7c:0c:94:81:aa:37:6d:7a:86:46:eb:70:17:
         d5:08:09:9e:13:ef:26:d3:52:c2:45:24:bd:57:1b:df:e4:cf:
         17:6d:65:5f:b8:d6:b6:ef:eb:d3:d3:fc:37:f2:02:52:b4:a8:
         ab:a1:51:56:d3:e3:82:dc:5b:c9:58:85:05:d4:0d:c2:71:c7:
         fd:d6:19:82:bd:0e:ad:d8:47:32:b5:90:ca:7a:c7:72:72:1e:
         56:39:ab:9a:7f:f1:49:d7:41:d9:ff:b6:06:39:49:8d:5a:1b:
         f7:8c:21:87:28:5d:b4:1b:e0:71:92:6b:f0:0f:90:91:c0:21:
         02:63:fa:95:df:37:a1:d5:ce:e1:5c:6f:3d:12:8a:10:ac:bd:
         e3:bc:d4:c7:b3:e7:03:e4:77:5e:6e:ee:44:45:1c:f5:b4:26:
         14:29:bb:58:d9:87:d1:65:cb:68:74:2b:e9:e1:36:27:f2:41:
         12:ff:41:9d:2a:53:6a:b2:eb:4a:ee:13:03:fc:c1:43:69:be:
         f8:8a:32:f9:02:f5:a4:e3:ec:d8:87:c8:31:69:01:aa:9f:bf:
         0f:58:52:39:48:59:60:96:7f:c4:95:5f:c7:28:38:e2:a3:e8:
         35:d2:91:f7:32:1a:d4:04:d8:8e:44:e2:56:77:87:33:d4:6e:
         a5:af:0f:d0
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUWqhDuPr4/I2kp69Jyg0SL+560CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAxMTYwMDE1MzJaFw0yNzAxMTUwMDIwMzJaMDMxMTAvBgNV
BAMTKEVFNThBQ0M4NDZCMzlGREU0QzI2ODczM0ZGQUVBODBGRDUzQTE3ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs6KugBUAr3nmxiCgUSNz7806L
28WhRfJxDmkIWt8KiCFJ9l8+vmXwGPUbFThPwXn4IhbZkaI7mSszQbkE5y6kDj7Q
CaeKTKihFk96JWXRepdpoYS9She+qXqzHhhKVd1dyzVDDhv0PRihNS7zcB171zZu
BonITCgpEkqpEIgaZrVAGrI9vHijg8Py8p+7Ad//d7ggJ4dUA43AEYLQ5M69GDsk
W56Sq+A3MsgJPlpBQ/nmJ8n7VdXsubouMIuEIKtbFkbVwEXMGsPcfy4HhpRKpd19
nhiA03S3WzgfcxpQbO3DOegLGci56tVrRS6/DyVcPG4s/O5kK9Mlm4SZlq53AgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU7lisyEazn95MJocz/66oD9U6F4IwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzEzNzUxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkojTANBgkqhkiG9w0B
AQsFAAOCAQEApRBVTH98DJSBqjdteoZG63AX1QgJnhPvJtNSwkUkvVcb3+TPF21l
X7jWtu/r09P8N/ICUrSoq6FRVtPjgtxbyViFBdQNwnHH/dYZgr0OrdhHMrWQynrH
cnIeVjmrmn/xSddB2f+2BjlJjVob94whhyhdtBvgcZJr8A+QkcAhAmP6ld83odXO
4VxvPRKKEKy947zUx7PnA+R3Xm7uREUc9bQmFCm7WNmH0WXLaHQr6eE2J/JBEv9B
nSpTarLrSu4TA/zBQ2m++Ioy+QL1pOPs2IfIMWkBqp+/D1hSOUhZYJZ/xJVfxyg4
4qPoNdKR9zIa1ATYjkTiVneHM9Rupa8P0A==
-----END CERTIFICATE-----
Generated at Tue Jan 20 06:02:45 2026 by rpki-client