This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa
File:                     AS214432.roa (raw, json)
Hash identifier:          PuU0cmV3IRxwfIMRif5uVNFiyUuNwuFETqF1Yg4mDuk=
Subject key identifier:   99:49:6F:2D:C6:06:4E:84:75:EA:09:C2:96:EE:7A:1E:CC:1F:82:AF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       317A0EA0A766F9FA92E1A4C0918C4966B40FFBE1
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     214432
IP address blocks:        169.40.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 15:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7a:0e:a0:a7:66:f9:fa:92:e1:a4:c0:91:8c:49:66:b4:0f:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=99496F2DC6064E8475EA09C296EE7A1ECC1F82AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:aa:dc:dd:f4:d9:ec:ea:af:ce:21:2f:03:
                    ff:11:57:9a:67:dd:ca:8c:69:f0:b7:20:5a:b9:09:
                    78:2b:bb:f8:48:f9:37:a7:1e:b2:ed:db:0a:3b:f9:
                    83:4a:35:ee:85:b3:47:c1:e2:cc:88:04:ff:d8:89:
                    d5:fd:1c:ff:4c:38:79:c7:ee:9b:42:8b:c7:1e:ce:
                    07:34:1d:6d:5c:ed:6c:f5:53:73:b1:2c:32:a2:35:
                    fd:be:99:76:a6:b4:4d:b4:3b:a2:46:67:73:85:0b:
                    dd:83:44:95:1e:bf:46:27:db:1b:8e:6f:74:ac:e9:
                    ef:72:34:bf:f2:89:89:7c:a5:f6:37:5f:90:09:43:
                    e5:6a:d0:70:ae:73:25:e0:6a:67:4e:96:8e:cb:c5:
                    ae:4e:28:b4:a0:67:d9:5a:d1:3c:87:81:1d:4e:eb:
                    b3:a8:d7:51:70:8b:f8:2d:f1:e0:e2:d0:08:c1:74:
                    5a:9d:9b:4c:31:f8:ca:9d:ec:81:f9:38:ef:58:7c:
                    85:9c:d9:44:90:bb:40:88:35:d6:35:7f:72:59:23:
                    3a:da:53:7f:ed:d5:49:45:33:0b:27:53:92:18:08:
                    3b:06:3d:a9:0f:17:c9:99:e6:3c:a9:40:9e:7e:ec:
                    e2:ae:f5:e1:16:ba:20:76:19:09:2b:08:f2:7e:5a:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:6F:2D:C6:06:4E:84:75:EA:09:C2:96:EE:7A:1E:CC:1F:82:AF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:18:85:6f:b9:61:ca:a7:70:91:dd:1a:3f:5c:20:73:2e:5f:
         12:76:30:8a:cc:8b:22:2d:4c:77:b9:f5:da:c6:e1:55:23:ab:
         34:5b:65:3a:54:ef:2d:ee:6b:b8:4b:bb:26:6f:02:74:ec:b6:
         24:c5:0a:36:de:99:0e:d5:4f:5f:f4:a9:49:43:4e:06:17:3f:
         53:b2:fb:ff:76:e1:26:36:ad:90:99:dc:f2:df:15:2a:8f:cb:
         af:80:c8:b1:d6:4b:1c:b8:df:23:21:2d:83:2a:43:09:97:c0:
         97:68:9a:36:cb:52:0b:36:7e:d4:9b:37:ec:be:82:a7:75:11:
         db:1c:e1:a6:18:c4:01:83:7d:63:01:66:55:cf:60:8f:f0:99:
         f0:08:2d:74:74:c2:56:1f:e0:6c:d6:fd:16:23:cf:e9:8b:4e:
         01:59:40:13:8d:26:8a:22:e0:c5:4c:b6:b0:80:bd:21:23:ff:
         cf:5a:50:50:dd:1e:9b:3e:7c:da:e6:b8:ce:a0:74:97:e5:29:
         02:84:6b:2c:45:9f:81:69:14:c4:8f:27:93:9f:40:e3:3e:9a:
         99:77:a5:3e:9a:e6:6a:82:85:69:40:70:b7:bd:94:66:26:c9:
         7e:96:8b:fa:af:f5:ed:b4:a0:8b:45:a6:aa:dc:ab:9d:09:c4:
         94:37:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:34 2026 by rpki-client