This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa
File:                     AS984.roa (raw, json)
Hash identifier:          wF8ck221XUvH980aanvn0tUzcTb4x+mogQAagJCqmLI=
Subject key identifier:   66:C2:B1:E5:FA:B9:02:00:80:96:94:E9:38:69:4C:4A:92:C7:4B:91
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       54A5F9A3289B56BAD6CA3CD105199375DD5D7B2B
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa
Signing time:             Thu 27 Nov 2025 07:20:25 +0000
ROA not before:           Thu 27 Nov 2025 07:15:25 +0000
ROA not after:            Thu 26 Nov 2026 07:20:25 +0000
asID:                     984
IP address blocks:        89.116.203.0/24 maxlen: 24
                          89.117.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a5:f9:a3:28:9b:56:ba:d6:ca:3c:d1:05:19:93:75:dd:5d:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 27 07:15:25 2025 GMT
            Not After : Nov 26 07:20:25 2026 GMT
        Subject: CN=66C2B1E5FAB90200809694E938694C4A92C74B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:c9:08:a4:64:bf:7e:eb:14:4d:63:9c:90:
                    c1:54:a1:66:e7:3d:33:5a:8e:16:13:96:2c:69:41:
                    79:37:b8:f9:07:c1:8b:77:a0:1a:71:9e:02:9a:d1:
                    57:c2:35:73:80:3e:50:f3:f6:13:ce:fc:d7:4d:d7:
                    c4:93:2e:98:8b:81:a7:d7:95:37:54:d3:d1:ea:40:
                    9e:ad:14:29:1e:70:5a:ed:5c:47:0c:44:1f:79:df:
                    0b:b8:08:bc:68:73:1a:a0:dc:2f:70:d8:24:71:60:
                    b5:bc:06:4c:8e:e7:89:8b:57:ad:fb:38:08:5f:9d:
                    45:19:b4:4f:41:e4:e6:0d:19:66:64:c1:6d:ad:d9:
                    ae:56:22:17:d5:6a:68:6e:91:a5:9f:08:b4:b1:ae:
                    5c:be:c0:9e:82:5d:56:96:eb:e1:de:fa:e5:95:3a:
                    28:62:18:19:9b:0e:c6:fd:79:e5:31:3f:e0:83:dd:
                    ef:31:2f:e2:1a:3f:f2:13:45:92:d7:50:2a:ac:fe:
                    ab:fd:85:71:71:6a:cc:a8:d5:1a:e0:f0:15:72:8b:
                    e1:eb:ca:64:0f:85:aa:4d:1a:e4:86:ce:94:2c:4f:
                    45:eb:40:5a:97:75:5c:ea:df:77:ff:cd:6d:46:88:
                    98:75:31:48:0c:3a:72:91:49:ba:ed:01:29:09:5a:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C2:B1:E5:FA:B9:02:00:80:96:94:E9:38:69:4C:4A:92:C7:4B:91
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.203.0/24
                  89.117.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:bd:81:4d:75:09:20:1f:30:70:86:a7:b7:22:69:44:e6:
         63:cb:eb:37:87:0f:f6:f0:63:7a:b2:d4:83:93:9e:12:00:32:
         67:3e:79:99:aa:21:a6:77:eb:30:48:68:a7:4e:5e:19:26:10:
         b4:c3:03:aa:af:67:b1:df:7a:d2:21:9a:7e:34:a5:a9:a1:af:
         c8:d9:48:71:ca:a6:2a:26:5b:fc:06:53:5b:9c:b8:50:24:f3:
         70:e7:18:6a:be:cb:03:c5:50:62:ad:ab:1e:8d:57:fe:bc:02:
         23:bb:54:5e:2c:e7:e5:9a:8a:75:9a:de:74:04:db:0c:11:8f:
         d5:13:fe:09:e0:3a:d7:57:58:64:3e:2d:d9:c5:bd:d4:58:3b:
         44:eb:56:84:2b:97:66:af:da:cc:4d:76:70:6e:df:0a:a6:5b:
         be:3f:25:00:59:a7:c1:6f:b6:21:fd:bc:04:5e:ef:38:6a:dd:
         88:c4:95:f8:eb:5b:28:a4:e3:3a:1f:39:fc:c1:63:7c:83:ef:
         4b:d6:8e:f0:b4:35:16:e3:03:a6:81:c1:92:20:f0:b4:c3:49:
         44:2b:8f:88:2f:33:7a:7f:b2:1b:3b:0b:26:af:74:11:de:52:
         58:c0:f3:df:b4:cf:12:8f:77:90:e1:74:53:80:19:28:ec:de:
         13:36:a4:46
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVKX5oyibVrrWyjzRBRmTdd1deyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTExMjcwNzE1MjVaFw0yNjExMjYwNzIwMjVaMDMxMTAvBgNV
BAMTKDY2QzJCMUU1RkFCOTAyMDA4MDk2OTRFOTM4Njk0QzRBOTJDNzRCOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNskIpGS/fusUTWOckMFUoWbn
PTNajhYTlixpQXk3uPkHwYt3oBpxngKa0VfCNXOAPlDz9hPO/NdN18STLpiLgafX
lTdU09HqQJ6tFCkecFrtXEcMRB953wu4CLxocxqg3C9w2CRxYLW8BkyO54mLV637
OAhfnUUZtE9B5OYNGWZkwW2t2a5WIhfVamhukaWfCLSxrly+wJ6CXVaW6+He+uWV
OihiGBmbDsb9eeUxP+CD3e8xL+IaP/ITRZLXUCqs/qv9hXFxasyo1Rrg8BVyi+Hr
ymQPhapNGuSGzpQsT0XrQFqXdVzq33f/zW1GiJh1MUgMOnKRSbrtASkJWjBZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZsKx5fq5AgCAlpTpOGlMSpLHS5EwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzk4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0ywMEAFl1QTANBgkqhkiG
9w0BAQsFAAOCAQEAgfa9gU11CSAfMHCGp7ciaUTmY8vrN4cP9vBjerLUg5OeEgAy
Zz55maohpnfrMEhop05eGSYQtMMDqq9nsd960iGafjSlqaGvyNlIccqmKiZb/AZT
W5y4UCTzcOcYar7LA8VQYq2rHo1X/rwCI7tUXizn5ZqKdZredATbDBGP1RP+CeA6
11dYZD4t2cW91Fg7ROtWhCuXZq/azE12cG7fCqZbvj8lAFmnwW+2If28BF7vOGrd
iMSV+OtbKKTjOh85/MFjfIPvS9aO8LQ1FuMDpoHBkiDwtMNJRCuPiC8zen+yGzsL
Jq90Ed5SWMDz37TPEo93kOF0U4AZKOzeEzakRg==
-----END CERTIFICATE-----
Generated at Fri Dec 5 20:07:29 2025 by rpki-client