This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          +hqa2095Je1eSO97+tuT7hk/V5VkSiMIkAP/A4jTGHU=
Subject key identifier:   77:9E:89:A7:A1:AB:3D:D6:71:7A:21:36:DD:1A:13:BE:80:08:1C:6E
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       4E7169ED46CBB3A08679893F8084AF5706B9D3EE
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63199.roa
Signing time:             Thu 08 Jan 2026 09:21:45 +0000
ROA not before:           Thu 08 Jan 2026 09:16:45 +0000
ROA not after:            Thu 07 Jan 2027 09:21:45 +0000
asID:                     63199
IP address blocks:        89.116.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:71:69:ed:46:cb:b3:a0:86:79:89:3f:80:84:af:57:06:b9:d3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan  8 09:16:45 2026 GMT
            Not After : Jan  7 09:21:45 2027 GMT
        Subject: CN=779E89A7A1AB3DD6717A2136DD1A13BE80081C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:35:4b:88:4e:b5:b5:27:f0:78:db:d4:71:
                    66:07:b1:b9:f2:b7:eb:4e:8f:05:17:99:46:2c:5c:
                    7a:46:75:b3:6c:7e:eb:e0:e7:1b:06:b3:d2:1d:dc:
                    38:fe:c5:23:a5:72:f5:04:d7:47:f4:e8:4f:ec:a9:
                    aa:bc:c9:94:f7:5a:a1:6a:58:5b:ac:c7:28:c2:87:
                    c2:fd:68:f4:ca:24:e4:0f:bf:3b:a6:e4:ab:ef:5f:
                    42:21:15:c6:03:57:6d:db:d6:2a:8e:fd:ea:fa:39:
                    af:db:72:6a:17:15:12:c8:5e:3b:ab:9f:1e:80:d4:
                    7c:bb:52:2e:0a:7d:fe:65:4e:a2:5c:f6:a1:b4:b7:
                    0f:41:12:c0:f8:a0:e7:87:75:c7:80:a1:a9:20:e2:
                    4b:fb:90:42:f9:df:0b:6b:c3:4d:8e:d8:29:65:23:
                    cd:37:f2:10:b7:c0:8f:d8:86:7a:d4:4f:c7:cb:7c:
                    9c:52:0f:4f:d2:26:86:87:10:a7:b6:62:e7:f8:64:
                    2e:04:0f:29:33:08:11:2a:18:95:06:88:11:dd:5e:
                    a6:65:15:46:28:2c:75:3f:99:95:9d:39:e6:06:e0:
                    30:5b:a2:ca:1b:07:19:61:67:51:89:84:b1:a1:3c:
                    c9:f4:86:a3:3f:6a:f1:e4:2b:2d:84:f2:2e:19:84:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9E:89:A7:A1:AB:3D:D6:71:7A:21:36:DD:1A:13:BE:80:08:1C:6E
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:53:c2:ce:64:9d:f6:00:f4:69:03:0d:96:a7:9f:6e:2e:e7:
         72:e6:3b:35:24:52:98:d1:7a:a7:c7:13:83:9b:cf:72:8b:14:
         f7:15:0c:12:ac:f5:82:69:b2:04:39:a7:e7:c1:23:12:82:29:
         98:48:52:e8:ed:4d:e4:f9:52:a8:b7:42:13:b7:b2:96:8a:43:
         b7:da:2f:76:39:35:72:b3:6e:4c:a8:5a:3b:15:9a:ba:51:26:
         35:23:25:ca:5c:ec:6b:47:b9:33:9f:5a:c8:12:eb:46:4a:10:
         11:e6:9f:b7:91:a6:9c:c0:6b:cf:e2:02:db:68:cb:78:85:04:
         75:f7:63:84:f2:79:b0:b9:f3:99:27:d9:b7:fa:4e:14:d6:25:
         41:98:be:c8:76:1e:5e:77:11:9c:5b:05:43:95:29:fa:65:f6:
         91:93:3e:b2:72:7d:f2:24:19:6f:27:c0:90:79:70:cd:52:7c:
         3a:58:7d:09:32:90:fc:cd:e0:2c:08:ce:ea:68:12:a9:20:51:
         77:a6:1d:fb:5b:4f:70:09:54:78:8e:cd:1d:24:eb:7f:ac:bd:
         a9:1c:b2:c5:88:b4:fd:89:05:a9:e9:0b:62:9c:3e:38:a0:8e:
         f9:e2:20:67:4b:ac:c0:6d:4f:53:91:eb:ec:f8:30:39:f9:29:
         40:d4:9d:0d
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUTnFp7UbLs6CGeYk/gISvVwa50+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjAxMDgwOTE2NDVaFw0yNzAxMDcwOTIxNDVaMDMxMTAvBgNV
BAMTKDc3OUU4OUE3QTFBQjNERDY3MTdBMjEzNkREMUExM0JFODAwODFDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhDVLiE61tSfweNvUcWYHsbny
t+tOjwUXmUYsXHpGdbNsfuvg5xsGs9Id3Dj+xSOlcvUE10f06E/sqaq8yZT3WqFq
WFusxyjCh8L9aPTKJOQPvzum5KvvX0IhFcYDV23b1iqO/er6Oa/bcmoXFRLIXjur
nx6A1Hy7Ui4Kff5lTqJc9qG0tw9BEsD4oOeHdceAoakg4kv7kEL53wtrw02O2Cll
I8038hC3wI/YhnrUT8fLfJxSD0/SJoaHEKe2Yuf4ZC4EDykzCBEqGJUGiBHdXqZl
FUYoLHU/mZWdOeYG4DBbosobBxlhZ1GJhLGhPMn0hqM/avHkKy2E8i4ZhG8tAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUd56Jp6GrPdZxeiE23RoTvoAIHG4wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzYzMTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXQKMA0GCSqGSIb3DQEB
CwUAA4IBAQARU8LOZJ32APRpAw2Wp59uLudy5js1JFKY0XqnxxODm89yixT3FQwS
rPWCabIEOafnwSMSgimYSFLo7U3k+VKot0ITt7KWikO32i92OTVys25MqFo7FZq6
USY1IyXKXOxrR7kzn1rIEutGShAR5p+3kaacwGvP4gLbaMt4hQR192OE8nmwufOZ
J9m3+k4U1iVBmL7Idh5edxGcWwVDlSn6ZfaRkz6ycn3yJBlvJ8CQeXDNUnw6WH0J
MpD8zeAsCM7qaBKpIFF3ph37W09wCVR4js0dJOt/rL2pHLLFiLT9iQWp6QtinD44
oI754iBnS6zAbU9Tkevs+DA5+SlA1J0N
-----END CERTIFICATE-----
Generated at Mon Jan 19 17:13:36 2026 by rpki-client