This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203134363138.roa
File:                     352e38332e3230392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          kmJVNMH72N7Z4tPLYGhb0LtJDufM1wfW6IHbkoJji/g=
Subject key identifier:   17:03:88:A6:A5:2A:5D:D0:8F:B2:3A:D7:DF:B7:B6:C8:A1:B7:65:F2
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       602EE32F1D6E902D0B39670B44451FE07DE71090
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 31 Dec 2025 08:06:07 +0000
ROA not before:           Wed 31 Dec 2025 08:01:07 +0000
ROA not after:            Wed 30 Dec 2026 08:06:07 +0000
asID:                     14618
IP address blocks:        5.83.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 08:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:2e:e3:2f:1d:6e:90:2d:0b:39:67:0b:44:45:1f:e0:7d:e7:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec 31 08:01:07 2025 GMT
            Not After : Dec 30 08:06:07 2026 GMT
        Subject: CN=170388A6A52A5DD08FB23AD7DFB7B6C8A1B765F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:5f:c8:d2:41:6b:94:39:45:bd:67:b1:33:
                    c5:f7:80:4a:ce:9d:ac:7a:12:78:90:3c:68:00:8a:
                    8f:2c:3c:be:21:2d:21:37:f9:4c:ab:08:cc:39:3a:
                    52:8c:c1:d5:29:d4:e1:da:64:5f:b3:7f:bd:37:59:
                    b4:8a:10:9c:7d:b8:2c:f9:bc:2a:0e:f8:a0:05:9f:
                    0c:8b:07:62:eb:44:d8:fd:db:89:51:8b:1e:17:56:
                    f2:df:32:4b:4c:ab:d4:89:54:26:2c:43:db:88:fd:
                    25:97:73:6f:3d:7a:73:a1:08:f9:8d:6a:0a:d1:34:
                    c5:b1:27:dd:1f:f6:a7:69:48:a3:b7:a6:86:4a:52:
                    e6:3e:4f:c6:6b:8d:9a:eb:bd:6c:30:b4:2b:c8:e4:
                    8c:60:62:96:79:85:a7:df:82:6f:47:0d:26:e8:37:
                    b2:c2:76:f5:24:c1:43:90:6e:de:9a:44:29:be:1d:
                    d2:ae:db:20:fe:a6:05:6c:49:d7:0f:a3:5b:25:5e:
                    02:49:c5:0d:3f:7d:aa:22:72:5d:59:47:d3:4a:6f:
                    d5:80:af:ac:9f:4d:c7:fe:73:fc:58:67:76:e4:27:
                    56:5a:2d:ed:ff:f4:7f:6b:62:eb:e6:66:76:c5:6a:
                    c7:73:d3:11:4a:45:65:ba:f8:e6:7a:76:68:51:9f:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:88:A6:A5:2A:5D:D0:8F:B2:3A:D7:DF:B7:B6:C8:A1:B7:65:F2
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:06:bc:66:b0:1c:33:72:d9:3d:fa:76:f2:aa:05:85:19:
         4b:10:f3:44:e4:ab:25:a0:17:5e:3c:91:b8:50:0e:dd:72:53:
         b3:7d:3b:dc:bf:be:b2:e7:69:37:4f:f5:83:a5:07:19:e8:3b:
         e0:cc:68:a8:f4:26:7c:e8:0d:77:c3:d1:3b:10:1a:4b:20:40:
         4f:62:3e:76:88:5a:28:51:30:fe:74:c3:72:60:99:e0:d6:b6:
         5e:d0:ef:a4:f7:9c:e1:c0:77:0c:1d:4a:66:0c:32:2c:c2:8c:
         93:d6:77:db:88:43:a4:4a:91:39:5d:8e:9a:74:41:88:eb:02:
         ed:dc:59:a2:5f:00:73:87:71:ab:20:a6:e3:31:93:da:ce:7e:
         0d:df:59:54:5e:42:f6:f3:6d:f2:1a:f0:0f:46:6d:80:37:be:
         07:b8:44:c4:ff:5f:7d:3d:ac:6e:27:34:37:4e:9b:dd:39:99:
         7b:45:42:7c:66:6d:58:89:7e:c6:55:6b:04:83:e3:11:83:02:
         95:bc:25:d4:82:fe:b0:e9:3f:5c:61:a4:2a:59:87:c7:af:57:
         0e:46:29:b9:7d:c0:7e:ae:72:4f:eb:65:f4:19:cd:4d:26:1c:
         cc:4d:fc:08:df:15:55:3f:bb:52:6b:ea:a7:31:3e:15:83:59:
         12:04:cc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:31 2026 by rpki-client