This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          /lk+LpkjNkpQM0XbmWsCOdBSxBclFFlrhu8U9xyiAR4=
Subject key identifier:   44:0E:C6:C8:5C:65:06:AF:46:F7:3F:5F:8F:94:BC:89:35:2D:BB:60
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       692B9CC84F38AB7AF7E13C3943CAF7DE40EEE4B1
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa
Signing time:             Fri 06 Feb 2026 12:23:31 +0000
ROA not before:           Fri 06 Feb 2026 12:18:31 +0000
ROA not after:            Fri 05 Feb 2027 12:23:31 +0000
asID:                     29802
IP address blocks:        169.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 07:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2b:9c:c8:4f:38:ab:7a:f7:e1:3c:39:43:ca:f7:de:40:ee:e4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb  6 12:18:31 2026 GMT
            Not After : Feb  5 12:23:31 2027 GMT
        Subject: CN=440EC6C85C6506AF46F73F5F8F94BC89352DBB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:c1:2e:81:3a:5b:24:ad:4e:b8:a5:e5:2c:
                    4e:b0:77:cf:7b:b3:8b:93:ce:72:a6:33:77:82:27:
                    52:b6:ce:78:d4:9e:dd:fe:66:ea:c0:a4:25:bb:03:
                    dc:01:13:61:79:37:f8:ea:37:ab:a0:56:c2:1d:c6:
                    d9:4c:38:ee:19:a6:30:94:e4:7c:c6:72:4c:95:b6:
                    0a:03:17:ea:81:a7:87:df:bd:9b:20:27:48:c6:48:
                    c4:c5:d0:70:4f:e0:65:2f:e4:f6:5d:14:06:34:d5:
                    76:94:87:13:6f:ae:c3:5c:de:28:b8:c1:61:43:18:
                    55:69:25:0c:d6:e0:73:6c:c0:ed:55:18:88:51:96:
                    4b:f4:77:ee:37:80:76:84:05:91:2b:fd:c9:ef:21:
                    e1:28:f0:3c:85:f6:6e:a3:ee:32:e7:77:11:94:c2:
                    8f:f5:f1:07:e8:ed:16:ab:5d:ac:00:c2:57:ab:d1:
                    c7:3c:fa:85:05:ca:36:9a:8c:6d:89:b5:4a:a3:96:
                    bd:14:22:f7:77:4d:78:e4:76:ec:15:f9:36:83:e0:
                    b2:08:e4:88:99:ef:32:a3:7d:f9:72:54:17:9d:23:
                    d7:45:1f:d4:67:24:2b:65:82:7f:3d:2f:0a:df:d7:
                    9d:7b:d9:df:8a:82:c4:63:fd:a8:19:ba:20:48:fc:
                    cf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:C6:C8:5C:65:06:AF:46:F7:3F:5F:8F:94:BC:89:35:2D:BB:60
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:3e:b2:66:8f:f6:e4:2c:89:df:f6:29:40:95:7a:1c:11:
         0a:62:fa:01:63:6e:03:64:28:40:4b:a7:67:2e:2b:2e:cc:2b:
         e7:7b:ce:6c:d5:3e:0f:59:35:76:64:93:1e:ef:1a:b2:62:3e:
         d8:a8:80:90:de:3d:94:03:12:2e:87:04:17:50:bd:7d:fc:12:
         17:a6:60:d0:a3:57:33:6c:61:11:51:c0:7d:c0:c1:cd:64:0e:
         ee:4f:b5:cc:41:57:2d:4f:eb:39:39:97:b0:02:63:21:db:d7:
         5a:78:96:c5:37:79:5b:02:e7:5b:f3:8d:e0:44:d7:a4:ff:a9:
         22:7b:ab:8e:4d:e8:ec:9b:2a:e6:b2:44:ab:a9:41:8f:dc:ef:
         9c:91:4f:4d:64:1e:f3:af:eb:47:3b:f1:a0:b8:8f:37:2d:42:
         a7:99:3f:23:f9:9c:f3:5f:dd:01:c0:10:79:67:5a:62:0d:51:
         55:a6:a7:61:b4:15:2c:a2:6c:6a:74:5e:fe:be:a5:84:73:59:
         23:87:6a:65:a8:1a:cb:64:a1:60:18:6e:c4:58:7b:5c:1d:55:
         3d:8f:e4:4d:75:3d:96:89:df:2b:86:b3:2e:34:67:f6:8d:59:
         ce:8c:91:c7:12:6f:51:97:18:f7:52:b8:44:1f:a8:e0:82:a3:
         3d:df:62:2b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUaSucyE84q3r34Tw5Q8r33kDu5LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMDYxMjE4MzFaFw0yNzAyMDUxMjIzMzFaMDMxMTAvBgNV
BAMTKDQ0MEVDNkM4NUM2NTA2QUY0NkY3M0Y1RjhGOTRCQzg5MzUyREJCNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34sEugTpbJK1OuKXlLE6wd897
s4uTznKmM3eCJ1K2znjUnt3+ZurApCW7A9wBE2F5N/jqN6ugVsIdxtlMOO4ZpjCU
5HzGckyVtgoDF+qBp4ffvZsgJ0jGSMTF0HBP4GUv5PZdFAY01XaUhxNvrsNc3ii4
wWFDGFVpJQzW4HNswO1VGIhRlkv0d+43gHaEBZEr/cnvIeEo8DyF9m6j7jLndxGU
wo/18Qfo7RarXawAwler0cc8+oUFyjaajG2JtUqjlr0UIvd3TXjkduwV+TaD4LII
5IiZ7zKjfflyVBedI9dFH9RnJCtlgn89Lwrf15172d+KgsRj/agZuiBI/M/lAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQURA7GyFxlBq9G9z9fj5S8iTUtu2AwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiOMA0GCSqGSIb3DQEB
CwUAA4IBAQAbFj6yZo/25CyJ3/YpQJV6HBEKYvoBY24DZChAS6dnLisuzCvne85s
1T4PWTV2ZJMe7xqyYj7YqICQ3j2UAxIuhwQXUL19/BIXpmDQo1czbGERUcB9wMHN
ZA7uT7XMQVctT+s5OZewAmMh29daeJbFN3lbAudb843gRNek/6kie6uOTejsmyrm
skSrqUGP3O+ckU9NZB7zr+tHO/GguI83LUKnmT8j+ZzzX90BwBB5Z1piDVFVpqdh
tBUsomxqdF7+vqWEc1kjh2plqBrLZKFgGG7EWHtcHVU9j+RNdT2Wid8rhrMuNGf2
jVnOjJHHEm9Rlxj3UrhEH6jggqM932Ir
-----END CERTIFICATE-----
Generated at Tue Feb 10 11:37:21 2026 by rpki-client