This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214208.roa
File:                     AS214208.roa (raw, json)
Hash identifier:          15SKUKdCjhpTsGhvpsE7/5rlM81UTtbQgvdmQnD9msY=
Subject key identifier:   7F:A0:85:1B:CE:22:1D:BD:7F:61:83:04:9A:C3:22:50:EE:A7:D1:E7
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       65004FD8391E636C185B9D75E987168DFBF222A0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214208.roa
Signing time:             Mon 05 Jan 2026 08:38:22 +0000
ROA not before:           Mon 05 Jan 2026 08:33:22 +0000
ROA not after:            Mon 04 Jan 2027 08:38:22 +0000
asID:                     214208
IP address blocks:        86.38.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 11:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:00:4f:d8:39:1e:63:6c:18:5b:9d:75:e9:87:16:8d:fb:f2:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan  5 08:33:22 2026 GMT
            Not After : Jan  4 08:38:22 2027 GMT
        Subject: CN=7FA0851BCE221DBD7F6183049AC32250EEA7D1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:f3:c7:27:f8:b6:22:16:07:70:c5:40:f0:
                    09:14:ff:54:4a:98:69:8c:8e:05:6f:a2:1d:36:10:
                    11:d0:47:4f:5c:01:69:03:3e:28:40:69:f0:54:8f:
                    ef:97:fd:81:be:7e:c0:4a:c9:2e:8c:3b:96:37:2a:
                    c2:da:be:82:04:7d:d8:0d:0a:13:52:8f:99:26:da:
                    b8:c4:70:2d:fd:be:22:00:a9:5a:c7:65:cd:b9:4f:
                    dc:2f:a9:9c:d4:c9:1d:c6:1a:a9:a0:de:a8:08:a2:
                    6c:b0:7b:58:ec:15:93:0e:70:5e:ad:b1:03:22:fa:
                    4d:ef:4b:2a:1e:b0:56:65:22:42:92:cc:22:e7:ba:
                    0f:e7:a6:37:a2:d6:8e:37:ee:6f:5f:9c:a5:3d:52:
                    69:65:6d:c1:94:20:fc:e5:bb:99:dc:29:e1:75:5c:
                    72:b6:95:c6:aa:be:ef:b4:90:54:df:2d:f4:a8:c7:
                    7b:e9:24:29:28:02:09:60:2b:95:89:fb:40:45:33:
                    b8:9f:66:27:cf:73:27:d4:b2:10:a0:cc:96:4a:77:
                    e5:16:ed:1f:d7:76:f2:9f:c1:5d:0c:4d:55:34:c3:
                    c6:fb:0f:ad:50:ee:64:a8:41:11:44:9b:a0:a6:85:
                    d7:2b:ff:62:94:07:b8:f9:3c:8a:ea:2e:3d:96:92:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A0:85:1B:CE:22:1D:BD:7F:61:83:04:9A:C3:22:50:EE:A7:D1:E7
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:77:50:d1:4b:d6:64:0a:bd:ac:70:86:76:6a:bd:96:ef:
         e0:e4:90:88:2e:ab:d8:35:3b:2e:7d:1e:b2:2c:ce:ff:e8:e4:
         03:6a:cf:6e:9e:e1:61:9b:1e:b8:3b:1a:5b:eb:dc:b1:22:19:
         0e:28:5d:6f:1c:a0:ef:3e:83:5a:d3:9e:e2:44:af:cf:00:08:
         42:05:47:c9:df:59:f5:af:bd:35:30:2e:83:eb:d7:22:23:21:
         ba:2c:dc:77:08:5d:c3:d5:49:45:90:be:d7:fe:83:72:28:74:
         1b:20:c4:c1:1e:d3:20:13:72:3f:3a:de:8a:04:50:7e:5f:42:
         16:85:fd:5d:f7:fe:3d:9b:9c:bf:b9:75:d9:33:76:34:ab:a4:
         20:0b:85:88:76:bb:ba:7c:0f:e6:97:5b:a9:6c:80:23:0b:a7:
         8a:fd:95:43:e1:d7:8c:4c:a8:cb:70:bf:8d:76:ff:28:b8:82:
         00:6c:9f:ea:04:87:7f:0a:a1:ee:55:41:5d:4e:48:ee:58:9a:
         3e:73:3a:3a:28:45:67:7e:93:6c:b4:a7:1b:09:72:41:d8:92:
         bb:1d:5f:df:55:a0:cc:9f:b5:74:c7:3e:f7:2c:97:f4:e7:2d:
         9e:4d:27:0c:58:24:47:68:18:46:26:ae:67:e9:cb:a7:7c:0d:
         ea:82:69:c4
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUZQBP2DkeY2wYW5116YcWjfvyIqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjAxMDUwODMzMjJaFw0yNzAxMDQwODM4MjJaMDMxMTAvBgNV
BAMTKDdGQTA4NTFCQ0UyMjFEQkQ3RjYxODMwNDlBQzMyMjUwRUVBN0QxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC37/PHJ/i2IhYHcMVA8AkU/1RK
mGmMjgVvoh02EBHQR09cAWkDPihAafBUj++X/YG+fsBKyS6MO5Y3KsLavoIEfdgN
ChNSj5km2rjEcC39viIAqVrHZc25T9wvqZzUyR3GGqmg3qgIomywe1jsFZMOcF6t
sQMi+k3vSyoesFZlIkKSzCLnug/npjei1o437m9fnKU9UmllbcGUIPzlu5ncKeF1
XHK2lcaqvu+0kFTfLfSox3vpJCkoAglgK5WJ+0BFM7ifZifPcyfUshCgzJZKd+UW
7R/XdvKfwV0MTVU0w8b7D61Q7mSoQRFEm6Cmhdcr/2KUB7j5PIrqLj2WkjLxAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUf6CFG84iHb1/YYMEmsMiUO6n0ecwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxNDIwOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYmGDANBgkqhkiG9w0B
AQsFAAOCAQEAOKN3UNFL1mQKvaxwhnZqvZbv4OSQiC6r2DU7Ln0esizO/+jkA2rP
bp7hYZseuDsaW+vcsSIZDihdbxyg7z6DWtOe4kSvzwAIQgVHyd9Z9a+9NTAug+vX
IiMhuizcdwhdw9VJRZC+1/6Dcih0GyDEwR7TIBNyPzreigRQfl9CFoX9Xff+PZuc
v7l12TN2NKukIAuFiHa7unwP5pdbqWyAIwuniv2VQ+HXjEyoy3C/jXb/KLiCAGyf
6gSHfwqh7lVBXU5I7liaPnM6OihFZ36TbLSnGwlyQdiSux1f31WgzJ+1dMc+9yyX
9Octnk0nDFgkR2gYRiauZ+nLp3wN6oJpxA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:02 2026 by rpki-client