This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          rcp3pv0NDCqz8shCMw4uieltADjv0cEK/8FpZ/c/HwI=
Subject key identifier:   BD:AD:6F:64:5C:D8:36:E0:20:6E:9A:0C:A7:3B:93:28:B0:A1:02:62
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       2982C6329642DB547ECDDE99F5BCC444D14FE050
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa
Signing time:             Thu 15 Jan 2026 20:21:50 +0000
ROA not before:           Thu 15 Jan 2026 20:16:50 +0000
ROA not after:            Thu 14 Jan 2027 20:21:50 +0000
asID:                     13335
IP address blocks:        86.38.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 23:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:c6:32:96:42:db:54:7e:cd:de:99:f5:bc:c4:44:d1:4f:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 15 20:16:50 2026 GMT
            Not After : Jan 14 20:21:50 2027 GMT
        Subject: CN=BDAD6F645CD836E0206E9A0CA73B9328B0A10262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:fd:b2:e3:8e:8c:b1:7b:e8:91:ce:5b:e4:
                    f8:d4:1d:a6:9f:28:23:8c:02:98:c2:f9:28:38:c6:
                    76:28:10:bd:e9:f6:8b:bb:4d:59:08:13:ad:53:a3:
                    52:b7:a8:a7:9b:00:c4:cc:f1:4a:a2:98:6f:2d:f5:
                    6f:df:db:f4:6e:29:58:4f:8d:29:12:cc:8e:cd:87:
                    f7:f4:3c:2f:f8:ab:9b:6c:37:1a:59:b2:2d:99:34:
                    10:65:f3:e9:8f:b0:eb:04:81:27:0c:fc:4e:09:18:
                    6b:27:59:ad:54:d0:f7:ec:72:c3:4e:35:ae:85:72:
                    6e:04:17:29:a3:0e:ea:fe:56:a5:11:34:df:fb:1b:
                    48:52:ef:9d:01:17:b0:5c:9b:70:67:d1:b2:37:f7:
                    00:70:9b:be:41:76:77:3a:2b:bb:c3:30:63:a3:cd:
                    12:96:a4:f3:26:3e:89:a8:fa:7d:cf:ee:41:48:c9:
                    38:0b:78:5c:ad:b0:56:48:04:96:67:9f:40:64:a8:
                    06:23:6b:c8:d0:48:aa:e9:ce:d7:9a:32:ca:5d:fe:
                    f8:d6:45:b6:73:1c:d8:9f:d4:49:00:26:7e:75:e3:
                    bf:6e:cd:7c:d6:3b:e9:07:ba:7a:bb:06:8c:5b:5a:
                    bc:3f:a8:bd:32:00:55:10:9f:5f:6b:0f:84:a5:62:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:6F:64:5C:D8:36:E0:20:6E:9A:0C:A7:3B:93:28:B0:A1:02:62
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:b2:5f:cd:5c:66:19:97:d8:35:bc:d6:ba:07:96:13:6c:
         b4:89:e2:57:a8:da:1d:96:84:8d:04:d3:bf:13:b1:a9:9b:aa:
         4d:ea:9a:9c:b7:c9:b6:32:b0:e1:d7:2e:54:ca:72:91:80:5b:
         bb:79:9f:73:86:97:f6:55:0c:57:45:e1:89:01:9d:2c:82:f9:
         9f:a6:3a:0d:bd:da:d5:04:9b:2a:b4:3f:98:93:d5:99:3d:56:
         ee:e3:57:97:7a:34:b6:d4:32:55:e8:aa:15:12:dd:1b:00:ff:
         fa:a6:44:c1:88:9b:51:e5:36:c4:97:0b:e4:92:fb:32:a0:8a:
         b0:52:de:38:62:ac:93:d1:bd:dd:fe:38:6d:16:0d:57:eb:7c:
         06:34:69:e1:83:24:3e:9f:4c:e9:d5:41:de:13:b9:eb:71:93:
         5f:98:cf:3b:13:20:79:0f:02:05:03:ba:62:9d:13:a1:74:6d:
         8b:96:97:95:5c:57:b1:bd:4d:25:65:89:94:5e:45:67:3f:c8:
         59:73:ef:0e:ee:91:0a:be:90:bb:27:de:6b:d0:9c:43:f9:0c:
         dc:34:4d:8f:da:80:40:0d:b0:7b:d3:35:ea:ff:b1:28:d0:95:
         fc:a2:da:87:9f:72:52:ec:6d:2f:66:8f:6d:da:4a:6a:bd:7c:
         40:dd:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:37 2026 by rpki-client