This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          8CzVxcMAIgjjcUR5CPyW0P7GW4k5FbeohEdOk+VebM8=
Subject key identifier:   03:90:9E:C6:DF:CA:9A:F7:8E:6B:A8:69:FB:C8:85:31:45:B2:A1:FD
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       09C5917319EE39C39E00E852E1C293A3EF85DB6D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa
Signing time:             Tue 27 Jan 2026 00:03:23 +0000
ROA not before:           Mon 26 Jan 2026 23:58:23 +0000
ROA not after:            Tue 26 Jan 2027 00:03:23 +0000
asID:                     834
IP address blocks:        37.230.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 06:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c5:91:73:19:ee:39:c3:9e:00:e8:52:e1:c2:93:a3:ef:85:db:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 26 23:58:23 2026 GMT
            Not After : Jan 26 00:03:23 2027 GMT
        Subject: CN=03909EC6DFCA9AF78E6BA869FBC8853145B2A1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:d3:51:da:9d:1c:33:cb:df:8a:67:d3:14:
                    49:72:1c:9c:cb:c9:bf:6f:0a:a1:38:0b:e9:40:a3:
                    db:13:67:66:06:33:1d:59:d2:88:09:70:7c:31:8d:
                    e5:6c:af:89:15:6f:dc:df:25:ea:73:8d:fa:e9:80:
                    1a:ae:cf:02:ae:cf:7f:df:7b:3c:e6:d5:27:1b:1c:
                    5d:37:a5:18:5f:ed:ec:54:68:3f:e9:81:83:f3:b1:
                    b0:71:97:dc:72:ec:e5:65:f8:6b:a7:44:67:18:1c:
                    d3:2d:bd:c9:b4:36:d3:d5:3a:bb:6d:4c:5a:ed:1c:
                    c2:9b:71:a6:58:9b:c7:9c:00:66:1a:c7:b6:33:63:
                    e8:01:c1:d0:fa:f2:6e:1e:13:a2:b6:a9:06:43:48:
                    41:01:31:ba:22:5d:03:fe:98:11:ae:52:d4:ac:62:
                    83:0c:b5:3e:0e:5f:f1:b0:30:c9:64:55:29:cd:1c:
                    65:65:fc:65:04:a9:a4:81:e8:76:cf:93:2d:60:6b:
                    b6:23:77:93:36:68:78:03:07:d1:b0:71:0c:ef:35:
                    67:8b:92:99:33:56:07:52:8e:d0:14:09:00:d1:20:
                    36:9b:a2:bf:75:40:d8:2d:69:2e:d5:41:a8:0c:7d:
                    42:e4:c3:fe:a0:ec:2c:f5:02:d4:b2:12:3b:4b:0a:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:90:9E:C6:DF:CA:9A:F7:8E:6B:A8:69:FB:C8:85:31:45:B2:A1:FD
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:39:6a:35:df:83:77:76:1d:c2:6e:02:9e:ee:4b:93:bf:96:
         ef:c2:a4:6e:34:50:f8:72:69:30:e3:be:cd:b2:a2:57:8b:02:
         b6:e8:f2:d1:ce:40:75:36:d8:f9:2a:43:da:2c:22:54:8c:9f:
         77:f9:07:42:25:f5:9d:94:a6:1c:dc:9e:e1:62:0b:5d:39:66:
         99:b4:7b:61:da:08:e1:08:1c:9f:90:0a:d8:18:36:de:51:40:
         48:fc:e8:15:ba:c8:d5:2c:d4:ab:97:1e:ff:83:04:e2:39:bc:
         64:ba:c0:0e:1f:99:ca:08:37:77:33:29:ae:93:a2:c3:68:89:
         24:fb:33:58:cd:82:08:d2:3c:c6:66:df:ad:73:87:7d:42:94:
         95:31:c7:34:ff:8a:50:9f:92:c8:66:a5:7a:8e:e1:11:d4:b9:
         c0:e2:6c:cc:cb:bb:1a:c4:e8:41:fe:9d:9e:90:b3:4f:83:4c:
         c6:73:0f:17:23:96:b9:2d:6c:3b:c7:1f:6d:92:e5:f5:c5:79:
         77:c7:d5:77:6a:17:37:ba:05:b6:51:ad:36:96:bf:2e:8f:8b:
         e9:f3:a3:d7:ce:68:f9:99:f3:15:e7:f6:72:35:5c:93:62:7f:
         df:6b:af:79:33:59:b1:4e:09:6e:12:cf:a7:66:61:e3:74:6b:
         e3:42:79:c8
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCcWRcxnuOcOeAOhS4cKTo++F220wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjAxMjYyMzU4MjNaFw0yNzAxMjYwMDAzMjNaMDMxMTAvBgNV
BAMTKDAzOTA5RUM2REZDQTlBRjc4RTZCQTg2OUZCQzg4NTMxNDVCMkExRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPNNR2p0cM8vfimfTFElyHJzL
yb9vCqE4C+lAo9sTZ2YGMx1Z0ogJcHwxjeVsr4kVb9zfJepzjfrpgBquzwKuz3/f
ezzm1ScbHF03pRhf7exUaD/pgYPzsbBxl9xy7OVl+GunRGcYHNMtvcm0NtPVOrtt
TFrtHMKbcaZYm8ecAGYax7YzY+gBwdD68m4eE6K2qQZDSEEBMboiXQP+mBGuUtSs
YoMMtT4OX/GwMMlkVSnNHGVl/GUEqaSB6HbPky1ga7Yjd5M2aHgDB9GwcQzvNWeL
kpkzVgdSjtAUCQDRIDabor91QNgtaS7VQagMfULkw/6g7Cz1AtSyEjtLCuvDAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUA5Cext/KmveOa6hp+8iFMUWyof0wHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey
LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNDM4MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeYwMA0GCSqGSIb3DQEBCwUA
A4IBAQCfOWo134N3dh3CbgKe7kuTv5bvwqRuNFD4cmkw477NsqJXiwK26PLRzkB1
Ntj5KkPaLCJUjJ93+QdCJfWdlKYc3J7hYgtdOWaZtHth2gjhCByfkArYGDbeUUBI
/OgVusjVLNSrlx7/gwTiObxkusAOH5nKCDd3Mymuk6LDaIkk+zNYzYII0jzGZt+t
c4d9QpSVMcc0/4pQn5LIZqV6juER1LnA4mzMy7saxOhB/p2ekLNPg0zGcw8XI5a5
LWw7xx9tkuX1xXl3x9V3ahc3ugW2Ua02lr8uj4vp86PXzmj5mfMV5/ZyNVyTYn/f
a695M1mxTgluEs+nZmHjdGvjQnnI
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:26:40 2026 by rpki-client