This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
File:                     33372e3233302e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ocx+aB5QuoB+YqA1BAQpmKlHhxOzMLph1X4RPkd3PG4=
Subject key identifier:   67:32:F8:5F:C4:12:A8:5D:EF:9A:31:25:44:A1:D1:2E:90:ED:E8:57
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       0B133DFF87BA2C5DDC5A5F775786CF2B48A1D068
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 16 Nov 2025 19:27:05 +0000
ROA not before:           Sun 16 Nov 2025 19:22:05 +0000
ROA not after:            Sun 15 Nov 2026 19:27:05 +0000
asID:                     834
IP address blocks:        37.230.63.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Nov 2025 09:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:13:3d:ff:87:ba:2c:5d:dc:5a:5f:77:57:86:cf:2b:48:a1:d0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 16 19:22:05 2025 GMT
            Not After : Nov 15 19:27:05 2026 GMT
        Subject: CN=6732F85FC412A85DEF9A312544A1D12E90EDE857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:64:c6:20:7a:2e:11:61:c2:54:e8:98:5b:
                    0b:c0:ea:ea:e9:bc:8a:2f:ce:09:12:e2:0c:1b:25:
                    de:92:a6:a1:aa:3f:80:32:70:73:39:31:67:04:20:
                    fc:03:22:c4:7f:54:59:c9:7d:41:fa:ba:b9:f4:53:
                    5b:c0:50:a3:a4:3f:f7:d1:e3:6c:b9:8b:38:3a:ee:
                    98:ac:56:f7:6d:6c:5d:2b:67:12:4a:cf:34:14:76:
                    c5:46:b1:ea:8e:52:88:3b:b1:e5:15:eb:29:c6:1a:
                    c0:3f:88:5f:6e:2e:c8:f9:29:b6:54:6d:b6:a2:58:
                    a6:71:56:d8:c9:54:de:1c:39:07:20:1d:f2:eb:45:
                    b5:a5:53:36:8b:59:4d:86:cf:76:b8:fa:ec:a1:be:
                    41:f4:e0:0d:44:fe:0b:cd:1c:90:d3:16:7c:f1:a9:
                    32:d8:04:3d:c8:b1:2c:d0:b1:3f:17:fa:9c:ee:56:
                    74:a7:33:fc:3b:3b:42:c9:da:19:62:0a:01:a9:20:
                    de:85:a8:5f:23:a2:67:93:f0:73:e1:59:3c:d2:52:
                    bd:61:67:64:53:62:6a:64:7f:a3:ca:ec:5a:76:31:
                    98:b3:74:f9:cd:df:6b:ef:a1:cd:cc:f5:a5:89:d1:
                    0a:04:c0:92:79:41:c8:9c:79:53:3a:61:ba:42:84:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:32:F8:5F:C4:12:A8:5D:EF:9A:31:25:44:A1:D1:2E:90:ED:E8:57
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:df:ae:07:53:e9:fb:cd:f1:40:28:a4:1d:51:17:b0:6e:88:
         4e:11:7a:11:98:d6:f5:a9:18:5a:9b:49:10:98:cd:cc:2d:a6:
         73:3c:c1:a8:9f:b0:1c:65:01:c0:b5:cd:67:43:4b:6a:d4:ec:
         d9:09:48:bb:ef:53:7c:a1:08:0d:ef:66:1d:d4:83:41:c0:d2:
         bc:36:46:87:6c:e7:99:61:69:83:e7:44:5e:a1:d8:90:b4:58:
         06:2a:83:27:f2:99:01:e6:18:68:fe:22:61:65:d5:66:15:d5:
         e2:cc:81:c7:95:a8:4d:bd:db:d8:a1:ac:d8:3a:99:91:d8:fd:
         f1:07:87:ed:28:52:b9:23:e5:7e:06:51:8d:38:ce:12:0b:b6:
         86:8c:28:19:37:16:05:fa:bb:3c:d1:dc:ef:c0:d4:70:d6:38:
         82:05:14:0e:a5:86:75:71:b1:2d:79:82:0d:0c:a9:9f:15:3a:
         62:b3:2d:ff:d7:2f:22:1e:14:c5:e0:a9:30:ac:da:71:32:dc:
         60:73:8e:25:16:26:89:4f:6d:59:c2:dd:f3:4e:35:0a:d9:e3:
         0e:a6:ea:be:07:1e:b3:fd:d7:20:8c:14:b1:f5:9a:0f:48:ff:
         c9:d9:05:7d:26:1f:5f:db:10:ea:27:e8:35:79:0f:c9:5b:68:
         49:5f:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:13:57 2025 by rpki-client