This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          kFHBhGQe+KXnRahuPGfnMLr0ujJR2N6DOst7E/MoGck=
Subject key identifier:   3B:E4:16:A0:A6:08:80:6A:4F:4C:4F:65:A7:4B:E2:FC:9F:0E:66:C7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       189BC14B3A4CABD84217C23D6925FB31E0507157
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     42831
IP address blocks:        169.40.105.0/24 maxlen: 24
                          169.40.106.0/24 maxlen: 24
                          169.40.109.0/24 maxlen: 24
                          169.40.114.0/24 maxlen: 24
                          169.40.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9b:c1:4b:3a:4c:ab:d8:42:17:c2:3d:69:25:fb:31:e0:50:71:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=3BE416A0A608806A4F4C4F65A74BE2FC9F0E66C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:41:23:eb:b9:df:59:69:a7:c6:a8:94:e2:
                    4c:6b:c5:ea:bf:92:ea:21:36:f0:56:e7:23:6d:7b:
                    a5:cb:ba:c2:30:dc:d3:9b:20:18:17:d6:9e:24:e3:
                    d7:07:69:0c:70:87:44:9d:1a:fc:6e:23:c6:bd:2b:
                    c8:14:df:a4:eb:cc:a4:8e:a4:ea:f3:47:05:5c:e2:
                    a4:80:a6:5d:28:71:97:c5:ff:f1:b9:d4:09:d7:e3:
                    63:7b:02:bb:98:fb:b9:f3:29:00:a8:75:72:c0:25:
                    2e:16:11:10:e6:33:2c:c5:bc:f3:29:86:05:4c:5e:
                    37:62:12:76:42:63:ea:a4:76:20:d1:0d:74:88:d7:
                    04:29:a3:5f:af:04:e4:31:c4:d1:e6:2d:7f:a6:3a:
                    60:b8:60:33:0f:9c:d1:37:11:ef:af:02:f4:aa:e7:
                    b0:2c:4c:46:9c:fd:07:6b:55:77:75:82:e7:97:1d:
                    05:6c:8a:d2:e6:e4:ee:bb:91:9f:96:02:91:f5:58:
                    b8:7b:0b:34:af:e2:1d:ce:ef:b6:08:62:6e:ff:44:
                    ac:79:5a:2f:70:c6:87:5e:eb:ea:50:31:98:8a:cb:
                    f4:de:02:b9:4e:11:eb:6c:99:61:74:4c:0d:9e:70:
                    b1:cf:0f:6a:35:6c:2f:16:91:80:c1:05:c7:76:89:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:16:A0:A6:08:80:6A:4F:4C:4F:65:A7:4B:E2:FC:9F:0E:66:C7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.105.0-169.40.106.255
                  169.40.109.0/24
                  169.40.114.0/24
                  169.40.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:90:d9:1e:27:33:5b:98:79:91:58:71:90:41:a6:cc:bb:e8:
         62:fe:64:92:d6:73:34:c1:6d:d2:71:7d:da:3a:0f:b3:db:a1:
         e4:39:dc:62:e5:ae:98:dc:11:9c:ad:5b:85:c6:a9:2f:10:8f:
         2b:c7:d6:9d:0e:d9:40:bd:cd:a7:8b:be:fb:b7:3d:64:75:4f:
         c7:a0:39:28:f9:42:35:0a:90:45:8c:ba:17:67:d1:1b:1b:7d:
         3a:94:a0:2b:77:c8:b7:de:36:9e:4a:d1:6e:dd:3d:d3:ac:ac:
         91:94:a4:80:8a:d0:23:56:c5:ef:81:66:99:28:93:92:10:8e:
         86:a7:fe:c9:b0:30:c9:9c:9b:b3:c8:5f:40:99:37:a1:82:2d:
         7f:90:f2:62:26:c2:b2:32:11:7a:93:8f:da:dd:fc:19:7a:45:
         7e:fb:44:75:4d:6c:53:c9:44:ab:c1:7a:a0:29:3b:32:e4:87:
         3f:d4:6f:37:71:4a:95:80:b3:b0:ca:d3:bf:f0:95:42:7b:00:
         59:26:a4:79:42:54:77:52:d3:a6:bf:26:8e:9d:0c:c0:cf:60:
         6f:c3:7a:e8:e8:3e:90:91:93:1d:c6:86:e8:02:cf:b0:09:be:
         93:1c:5b:98:48:f5:18:2a:9c:db:86:45:9a:0c:1f:5b:9b:07:
         f6:6a:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:37 2026 by rpki-client