This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2039333034.roa
File:                     33372e3233302e36332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          QUdOUNtRvdNOi0WIXfq4fyY875fHoRSROC3RhjF/OMA=
Subject key identifier:   91:DB:B9:48:9D:AE:07:5A:B1:7F:1A:C2:62:D9:05:8E:3F:38:D4:66
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       4042369A9C4060092A7182AC66BC853EF6581F29
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2039333034.roa
Signing time:             Wed 19 Nov 2025 09:28:16 +0000
ROA not before:           Wed 19 Nov 2025 09:23:16 +0000
ROA not after:            Wed 18 Nov 2026 09:28:16 +0000
asID:                     9304
IP address blocks:        37.230.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 11:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:42:36:9a:9c:40:60:09:2a:71:82:ac:66:bc:85:3e:f6:58:1f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 19 09:23:16 2025 GMT
            Not After : Nov 18 09:28:16 2026 GMT
        Subject: CN=91DBB9489DAE075AB17F1AC262D9058E3F38D466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:60:c4:72:a4:ba:76:53:74:86:51:52:88:
                    82:eb:98:42:90:45:3e:57:4f:b2:70:1e:10:c9:57:
                    bb:8d:f2:7a:e4:c8:51:bf:b8:13:4a:ab:01:2e:47:
                    2f:a2:64:cd:28:38:1b:8b:69:d8:24:13:35:0a:49:
                    7b:1a:0b:2f:70:53:e7:20:fd:ff:48:bd:99:88:c4:
                    1a:6c:d9:5e:3c:1f:e6:83:e7:cb:d9:04:a3:ca:94:
                    7e:79:04:a1:26:5f:f9:28:9a:ba:72:b7:66:6a:a5:
                    de:94:63:3a:23:4c:93:d1:98:6f:14:9f:9a:1d:c5:
                    77:6d:36:af:6f:36:22:68:03:5d:36:53:52:8d:3a:
                    82:68:aa:1e:cb:ac:09:95:05:a3:42:42:1b:80:ae:
                    1a:c6:b4:cd:47:aa:54:28:f4:2f:21:c8:42:15:0d:
                    ee:71:fb:dc:52:fe:61:55:24:1c:b5:4d:73:96:9a:
                    b0:7f:7f:e8:31:d5:92:bc:34:93:39:97:7f:07:d9:
                    74:57:ac:40:43:7e:02:49:41:e1:43:55:b1:79:1c:
                    2e:20:62:61:86:8b:a3:05:76:6b:7d:ea:1c:cd:8a:
                    29:fa:f3:17:e9:02:02:20:00:63:47:1a:d8:18:86:
                    c5:90:5d:ee:76:cb:71:88:98:40:50:37:59:a6:a1:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:B9:48:9D:AE:07:5A:B1:7F:1A:C2:62:D9:05:8E:3F:38:D4:66
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:8a:43:a2:ee:3a:b5:76:2e:ed:2f:71:1a:e1:cb:ed:a1:
         33:5a:96:12:e5:40:44:71:f8:57:1f:40:e6:05:59:f9:38:a8:
         a0:d0:93:47:30:c4:4c:80:f3:68:05:5e:18:f4:60:9e:19:1d:
         4a:75:a1:ab:16:a4:8d:5d:d8:c1:32:ab:88:a5:4d:9e:05:fc:
         8c:66:ab:ae:8e:59:cf:de:f8:20:34:54:d1:0c:62:32:e0:2e:
         b9:0a:c5:62:d6:c5:32:b7:2b:2e:08:75:06:ba:c5:9a:82:2b:
         3f:d7:d3:69:78:d1:48:93:8f:f5:7f:ce:45:cb:02:2b:eb:0b:
         8d:d7:9a:48:6f:1a:36:b8:c5:94:9e:04:39:e5:e6:73:08:52:
         96:68:0f:47:ef:38:c9:f1:28:6e:bd:90:b3:33:54:3d:13:5a:
         34:b8:02:90:76:89:b5:74:7b:47:e0:43:14:b5:7c:66:e6:50:
         af:2d:b7:ec:57:fe:21:b4:88:a5:83:18:0d:7b:a7:7b:9f:da:
         ab:b1:f9:50:dc:98:29:87:3d:1c:bf:a5:92:4d:8a:a6:55:54:
         e6:b9:c3:32:20:76:c4:98:71:4c:8d:d7:2b:4e:95:5e:60:04:
         f8:82:a2:74:34:e4:de:47:10:d2:12:5e:7a:09:c9:1a:d2:5f:
         0b:13:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:21:28 2025 by rpki-client