This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa
File:                     AS137897.roa (raw, json)
Hash identifier:          pd3g8LAm4WoDm7zGzcMgYg4MCvanPErKEM2q21g+dZ0=
Subject key identifier:   AF:69:D9:57:9B:D6:06:82:2F:BD:11:AC:44:C6:42:16:C9:9C:BA:EB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6BA42EF37582FBFFC22FCBD7C14DB726009E9FD6
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     137897
IP address blocks:        169.40.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a4:2e:f3:75:82:fb:ff:c2:2f:cb:d7:c1:4d:b7:26:00:9e:9f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=AF69D9579BD606822FBD11AC44C64216C99CBAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:2d:47:8e:5a:3d:17:d0:ee:2b:0e:dd:8c:
                    5e:f0:21:07:b1:28:d2:77:fb:d3:74:cf:00:b4:0b:
                    d9:2f:1d:c4:8e:bb:ec:ba:67:f8:99:db:4c:e1:94:
                    12:94:71:bd:ed:71:1d:29:f9:ba:25:8a:f5:d3:60:
                    d3:53:05:ad:ae:e8:6f:03:ec:db:db:64:b0:67:51:
                    28:66:3c:a2:59:89:e3:81:6b:67:9e:a3:79:ef:cd:
                    c9:a6:bf:fd:de:f9:ba:72:20:ab:0b:cd:a2:36:f9:
                    0f:64:8e:f5:4f:b0:c1:09:68:e6:6e:c8:6d:2c:06:
                    49:14:e7:a7:e7:05:20:d2:9e:6b:9e:0f:a5:a6:d3:
                    4d:f0:8e:ce:09:70:0f:18:66:7d:0d:24:7e:69:e3:
                    3b:2c:5a:62:ba:53:e7:9d:2b:bc:81:a2:ab:79:13:
                    31:f5:8d:6e:40:43:91:ef:c0:2a:75:97:b8:1a:04:
                    1d:02:1e:c1:d4:9e:bc:2e:7c:af:c0:7b:9d:08:b1:
                    79:9d:99:8b:45:99:b4:21:ad:4d:a6:c5:9b:63:ff:
                    27:3d:aa:e9:bf:11:23:c0:b4:cc:59:a3:11:94:d3:
                    80:81:15:62:0f:fa:e0:68:f9:3b:6e:de:3f:01:d4:
                    c1:eb:a0:a9:ca:f7:91:c3:81:7b:d3:22:ae:3e:63:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:D9:57:9B:D6:06:82:2F:BD:11:AC:44:C6:42:16:C9:9C:BA:EB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:72:c8:b7:37:2b:05:bc:b3:3e:7b:7b:22:3d:53:9c:87:
         7f:f3:14:bf:2c:f7:74:bc:e2:3e:68:9a:be:12:33:c2:3a:b2:
         d6:e3:d1:d5:6b:17:73:6a:45:a1:84:21:94:11:4e:e2:c6:7a:
         d3:67:2d:44:b8:07:44:ff:dd:50:8c:e4:e3:95:3e:7e:de:a1:
         e8:45:a1:3a:10:4b:20:ff:aa:c4:d9:59:7f:11:48:27:48:b1:
         6e:2d:23:24:8e:60:a4:18:89:36:37:40:50:5f:eb:49:ec:74:
         9f:c0:c6:bc:4f:0e:a1:59:7f:ce:db:d0:9d:44:3e:8b:54:df:
         f8:ad:cf:5a:38:10:60:34:6e:1a:35:5e:27:58:f0:bf:1b:aa:
         15:ce:17:a2:5b:67:c3:22:aa:55:33:90:81:17:f1:0a:12:dd:
         10:2d:65:9c:34:e5:b6:26:41:71:02:8c:3a:bd:f4:33:7f:ba:
         8a:96:79:e6:26:f7:d6:3e:d9:03:c3:c9:ea:9a:7e:f0:98:4b:
         da:da:e6:ba:ce:35:25:0d:a5:20:cb:53:f6:ca:97:51:86:87:
         ab:37:4c:11:96:be:33:2c:ca:10:e4:47:a2:6b:ed:18:f3:44:
         0e:51:de:ff:5d:4c:fc:73:07:88:f4:f0:ac:ba:33:45:ef:86:
         49:8f:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:37 2026 by rpki-client