This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401819.roa
File:                     AS401819.roa (raw, json)
Hash identifier:          Lr7TKcOHvy+h4msB7g+sMtO2OJzMGTBtcis3sBdKot4=
Subject key identifier:   A2:1B:EA:5B:00:DD:91:B6:96:80:18:0B:8A:1B:A7:FF:86:B0:3A:A6
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       07490003AAAC31CC47219E8106A4F307C4C59FFD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401819.roa
Signing time:             Thu 08 Jan 2026 09:23:27 +0000
ROA not before:           Thu 08 Jan 2026 09:18:27 +0000
ROA not after:            Thu 07 Jan 2027 09:23:27 +0000
asID:                     401819
IP address blocks:        89.117.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:00:03:aa:ac:31:cc:47:21:9e:81:06:a4:f3:07:c4:c5:9f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan  8 09:18:27 2026 GMT
            Not After : Jan  7 09:23:27 2027 GMT
        Subject: CN=A21BEA5B00DD91B69680180B8A1BA7FF86B03AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:dc:21:53:73:83:b8:f4:7d:ec:07:22:c4:
                    53:62:f1:84:b9:53:a0:44:fe:c0:36:ad:a9:8c:29:
                    a7:93:94:aa:c5:c1:ce:5e:a3:00:cc:5c:49:03:34:
                    e9:20:9b:31:98:1b:52:eb:1b:7d:1f:e9:35:d2:bf:
                    d7:e4:6d:81:0a:4c:cb:d6:e9:8b:5a:7b:95:39:97:
                    10:68:31:7f:52:bb:a1:27:41:b4:33:17:3f:4d:55:
                    53:5f:7d:88:8f:16:68:2a:af:9f:7c:24:e1:01:ef:
                    b2:1f:6a:01:57:15:63:7a:b9:d4:f5:43:bc:8e:0b:
                    b4:82:6a:75:3c:91:85:6d:49:f0:f4:bf:1d:03:f1:
                    b0:2f:2c:56:f7:52:9e:e6:ab:27:e4:24:ab:41:ed:
                    cf:70:3a:e9:ea:4f:1f:ae:b6:c2:dc:37:94:2b:e1:
                    66:d8:bb:5d:8c:ab:54:46:8a:b0:4a:d4:ea:a9:82:
                    92:7f:7a:66:ea:65:c2:d6:f6:fe:a9:bf:66:86:b4:
                    e0:65:51:f3:26:03:45:2f:2e:52:e6:5f:48:85:b4:
                    aa:f8:6a:b0:54:91:67:9f:f2:d0:d7:03:83:20:ca:
                    9a:f4:e4:39:b0:36:92:55:56:bc:0f:4f:6e:85:ac:
                    f6:e1:f9:ec:fb:07:cb:0b:97:30:87:f5:0c:b9:c2:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1B:EA:5B:00:DD:91:B6:96:80:18:0B:8A:1B:A7:FF:86:B0:3A:A6
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS401819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:22:36:80:1f:7b:e0:89:82:d2:1c:7f:6d:0a:87:e2:7e:03:
         1d:6b:c5:de:af:c2:2b:a6:3c:8d:35:06:22:2f:80:05:c7:b0:
         9b:55:ad:74:b1:4b:5b:c6:b0:85:ed:f7:d0:2b:71:f7:79:93:
         e3:2d:5d:99:d8:95:68:da:07:fa:21:f3:34:f9:34:97:ac:33:
         b5:6a:25:d1:9a:f6:3d:7f:04:76:7d:20:26:f5:b3:e5:ce:df:
         7c:3b:51:6a:0e:08:b3:fe:9e:1f:59:d2:59:ef:79:8e:50:9a:
         3e:26:ea:98:68:dc:87:af:9f:f8:23:1b:64:a6:dc:56:a2:37:
         5c:23:04:eb:03:fa:54:57:8c:15:9c:2e:93:7c:90:d4:26:6e:
         11:35:9e:e7:70:01:aa:74:1e:6e:1e:bc:ad:fe:c0:62:32:be:
         c5:57:e7:37:ad:48:99:74:79:0d:5e:23:dc:45:fa:1d:a7:09:
         89:84:5f:fa:84:0c:61:2d:8f:7b:7f:b2:26:27:4c:60:9d:b5:
         b8:39:a2:0c:e2:bb:4c:1b:73:c3:e5:c8:e2:f1:c9:11:f3:0c:
         4f:79:d9:0f:7d:59:b0:74:ee:7c:a1:58:0a:d7:c0:29:91:14:
         80:2c:76:ae:cc:eb:df:d4:0d:41:fb:9b:08:a5:7c:80:26:eb:
         32:a1:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:34:40 2026 by rpki-client