This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400866.roa
File:                     AS400866.roa (raw, json)
Hash identifier:          lFN9ARqT7DHmakU/sEhRLsznzCagZ5jlG1xb+VtGa7c=
Subject key identifier:   44:D9:04:CD:3D:03:3D:B9:D5:FC:70:1B:23:3F:B6:70:54:33:63:74
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       78FCBC6AA24E352D53410D086C83241C7B9FE4F3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400866.roa
Signing time:             Fri 16 Jan 2026 00:20:31 +0000
ROA not before:           Fri 16 Jan 2026 00:15:31 +0000
ROA not after:            Fri 15 Jan 2027 00:20:31 +0000
asID:                     400866
IP address blocks:        2.59.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 19:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fc:bc:6a:a2:4e:35:2d:53:41:0d:08:6c:83:24:1c:7b:9f:e4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:31 2026 GMT
            Not After : Jan 15 00:20:31 2027 GMT
        Subject: CN=44D904CD3D033DB9D5FC701B233FB67054336374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:08:5f:fe:d5:c8:1d:ba:ad:2e:77:4e:31:
                    0a:f7:4a:12:26:7b:52:d9:9a:87:17:70:fb:86:d2:
                    d4:b9:e9:20:40:6c:e4:9a:08:f1:83:53:bf:0a:5c:
                    21:9c:73:7e:25:d6:35:f4:f9:03:0b:a7:36:97:9e:
                    f4:37:41:f6:b4:b7:c9:4b:b7:50:03:b0:b5:31:4e:
                    fb:a8:db:b2:43:1d:de:b2:30:f3:85:2c:c4:dc:14:
                    34:b1:e3:d5:82:49:e2:07:72:8b:cc:b6:42:38:33:
                    06:20:51:3f:56:0e:fa:9a:d3:e3:66:d2:e3:03:2a:
                    d1:e2:da:a5:90:b3:34:dc:8c:0e:60:f9:c6:6b:69:
                    bf:b7:4a:e6:bb:05:7a:1f:4d:b4:0b:0e:af:9e:8b:
                    a0:65:85:22:d2:09:ad:a8:4a:70:2c:e6:23:36:96:
                    20:56:d5:9c:13:e5:cd:b9:d0:de:7b:6d:47:0e:f1:
                    e1:12:e3:63:63:96:cd:83:e4:ae:56:32:ec:f6:40:
                    13:27:6c:15:fc:75:c3:03:75:01:49:8c:95:cc:e7:
                    a5:15:37:28:b0:cf:a2:62:29:ad:8f:e1:5e:28:e2:
                    a6:8c:5a:1a:b1:5d:12:83:50:98:cd:3c:dd:27:e9:
                    ec:b5:43:d2:31:f5:b8:53:b2:85:ea:1a:03:fa:04:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:04:CD:3D:03:3D:B9:D5:FC:70:1B:23:3F:B6:70:54:33:63:74
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:85:8d:03:11:a0:3c:9c:26:43:46:7e:5d:5b:c8:d3:d0:b2:
         84:ff:1b:da:c1:13:79:3f:79:bb:8d:fc:69:8d:00:af:25:1f:
         84:bf:e5:a1:a7:67:9e:1c:db:fe:87:f8:4d:36:7b:a6:e5:bb:
         8c:4f:84:a2:91:14:50:21:05:fe:50:80:d7:82:9f:84:df:84:
         c2:d5:2b:30:1b:4c:66:ad:de:62:59:3e:5a:66:1e:c4:c8:c5:
         09:31:49:42:47:a7:0c:73:6c:52:23:fc:b3:52:25:4b:21:7f:
         38:e4:c5:f2:71:8f:50:8c:02:dd:94:1d:7b:10:46:dd:46:d6:
         2c:f0:f9:33:5a:05:a0:62:c5:79:b8:48:62:1d:b8:5f:16:7e:
         70:b0:bc:b9:f1:59:cb:ae:38:f8:fe:fd:ab:50:52:b6:62:d4:
         0f:8e:e3:ac:cc:ad:b2:8c:84:6f:c0:a4:b9:b0:cb:fd:ab:5f:
         9a:ae:d5:4e:42:88:32:63:4a:e5:ba:64:3b:bb:30:78:c6:50:
         6c:1f:85:de:27:c2:89:93:76:43:5c:b6:23:8e:0c:74:db:fe:
         c0:c7:ca:b8:9c:f2:92:17:e7:bc:8f:20:96:d5:f1:21:69:0c:
         06:42:4e:c7:02:47:cf:b2:29:a5:30:b1:e8:34:cc:64:ec:87:
         57:3d:01:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 11:55:11 2026 by rpki-client