This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          VYIxAFgexzv/sLK6UiRx7QOa++SlVtczGKvuOSK/tE4=
Subject key identifier:   8E:19:32:29:AA:62:2F:2A:F1:90:FC:9D:77:1D:42:AF:79:CA:17:C0
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       481925063ABB0232E7F81CD7175E96569D9040B3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     56655
IP address blocks:        169.40.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:19:25:06:3a:bb:02:32:e7:f8:1c:d7:17:5e:96:56:9d:90:40:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=8E193229AA622F2AF190FC9D771D42AF79CA17C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:16:2f:c6:24:15:80:de:ab:0d:6d:e9:df:
                    9f:db:a4:04:e6:1e:6d:87:ba:21:55:91:8d:6a:94:
                    8c:c8:ce:88:4f:eb:a0:f3:dc:59:15:a8:44:62:94:
                    75:2d:7b:70:a4:c4:b7:8b:01:48:f8:7b:98:d5:5a:
                    d6:83:35:94:c9:9f:88:8e:24:4c:b1:67:a1:71:06:
                    b5:74:2f:74:01:2f:d3:2e:66:6c:57:ed:9f:c2:76:
                    94:d4:a6:97:c4:86:6f:78:7d:4b:0c:8b:09:22:06:
                    4d:84:ac:38:5d:e0:77:47:17:bd:81:5f:6a:58:f8:
                    7a:6c:1a:04:cf:aa:1d:f5:03:12:fb:36:68:d5:f5:
                    4d:4c:01:c9:74:42:1b:f3:73:0c:d8:3b:3e:59:f2:
                    36:02:18:5e:d2:a7:e8:1b:3b:30:20:75:27:7c:59:
                    15:9c:82:7d:25:f8:e5:c9:1b:b7:c3:e5:bc:89:ed:
                    5e:ef:65:77:72:eb:05:22:e2:36:5c:4e:eb:18:f3:
                    9b:ef:89:a3:f3:ff:7e:c2:89:ac:10:5b:2b:dd:90:
                    77:b0:dd:c3:6e:d1:08:d4:2e:95:03:36:e4:80:54:
                    6a:67:9c:65:ff:f3:c2:33:f1:e9:cf:32:8b:3c:67:
                    1e:b6:4a:69:a8:00:4c:64:31:82:f1:1d:97:7d:d8:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:32:29:AA:62:2F:2A:F1:90:FC:9D:77:1D:42:AF:79:CA:17:C0
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:59:30:e6:67:3e:e2:2b:f1:1c:b4:22:fa:48:4d:4c:7b:6b:
         41:94:6e:ad:36:2a:e4:e8:a6:9d:bd:e1:b0:2c:9c:7a:ec:84:
         0f:f0:f5:36:3c:a8:81:22:ee:78:0d:99:61:f9:82:05:5f:28:
         b6:3e:65:36:36:a0:83:34:95:f5:0d:f1:3f:59:3e:4d:f1:c2:
         f5:79:a2:60:14:e7:3c:73:d9:f0:e8:79:e7:d4:d1:37:a1:34:
         6f:36:9d:9c:17:00:31:77:14:bc:c8:3d:81:90:7c:41:bf:a3:
         23:1e:63:35:51:74:75:ca:e1:9c:0b:9e:c0:b0:06:21:3d:7d:
         f2:b5:53:55:ef:1d:b6:8d:01:21:89:5a:55:79:a3:76:8b:1d:
         b6:2b:ec:2d:46:6c:7a:02:30:4b:9e:51:6f:6a:1b:55:c2:6c:
         ca:0b:6a:7d:69:66:f7:84:47:94:07:44:ab:48:06:4a:3d:f2:
         8a:73:63:7b:3d:fc:0a:fb:f9:3e:93:b7:c8:4e:b2:3c:64:e2:
         22:1d:8e:3e:a0:49:eb:d7:39:6f:31:36:e2:72:51:4e:72:c1:
         71:b7:c2:3a:19:30:33:e3:75:2e:4d:3d:fa:46:8e:bc:ef:bc:
         0a:f4:f8:68:78:58:90:65:c5:eb:32:5d:18:98:36:2f:82:fd:
         74:72:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:41:08 2026 by rpki-client