This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323036343931.roa
File:                     352e38332e3230392e302f32342d3234203d3e20323036343931.roa (raw, json)
Hash identifier:          7L4UqcEK9Gs3qfAhjG7CWy3IuoXjzXPPrXhthiK7bn8=
Subject key identifier:   26:46:8F:66:BA:23:79:30:67:7A:E1:58:12:E7:32:5B:FA:F8:56:37
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       05408A617B74040190ABC52E6ACD03D9AD786D2C
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323036343931.roa
Signing time:             Wed 26 Nov 2025 18:24:24 +0000
ROA not before:           Wed 26 Nov 2025 18:19:24 +0000
ROA not after:            Wed 25 Nov 2026 18:24:24 +0000
asID:                     206491
IP address blocks:        5.83.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 16:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:40:8a:61:7b:74:04:01:90:ab:c5:2e:6a:cd:03:d9:ad:78:6d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Nov 26 18:19:24 2025 GMT
            Not After : Nov 25 18:24:24 2026 GMT
        Subject: CN=26468F66BA237930677AE15812E7325BFAF85637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:e5:26:da:9f:23:cd:1e:32:a3:d7:2c:7d:
                    2d:91:2f:88:d5:68:5c:61:12:b2:46:7e:05:24:88:
                    51:38:12:4a:22:b3:d2:60:ad:aa:dc:76:ad:11:a8:
                    51:0c:a6:43:de:97:ed:7b:be:c5:83:7d:61:20:44:
                    1d:7b:31:3a:cd:87:79:1d:7c:e1:c1:0e:e2:cc:9f:
                    7e:50:97:af:44:bb:b2:a1:7b:3d:92:dd:10:5d:62:
                    45:5b:b5:ea:b1:5b:de:71:6d:a8:03:5e:af:96:35:
                    48:c2:d1:77:23:c0:b9:20:30:df:9a:5e:7c:83:d6:
                    ed:0a:95:78:27:96:8e:53:be:a3:a2:e5:de:12:57:
                    65:4d:59:50:5a:8e:7f:b3:b7:12:82:44:b1:84:20:
                    4a:33:c2:c4:46:bc:31:24:c8:57:3e:1c:aa:54:0a:
                    69:ed:ec:8e:a0:a7:01:82:06:08:8c:09:12:66:a2:
                    ac:6d:a8:2e:4a:86:ba:bd:d1:71:45:f6:10:ee:a5:
                    23:be:da:e9:e4:a4:45:5a:af:ac:1a:cf:25:6b:3b:
                    46:9a:8f:52:97:22:dd:5f:50:3d:ea:03:db:53:23:
                    18:ce:04:e7:06:95:0c:fa:9d:3b:2b:2a:a3:87:f2:
                    f5:e5:1e:21:75:b2:5d:24:f4:36:c5:f7:47:b9:4d:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:46:8F:66:BA:23:79:30:67:7A:E1:58:12:E7:32:5B:FA:F8:56:37
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230392e302f32342d3234203d3e20323036343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:25:f7:35:30:23:de:f2:ea:d8:4a:29:8e:2b:16:f1:48:69:
         09:c0:8b:50:66:53:20:97:f7:ae:4d:a8:d2:45:0c:b1:cf:31:
         6e:ae:f8:8d:3a:94:89:69:36:f1:05:15:db:2e:58:09:99:eb:
         3f:36:8c:dc:bc:f6:52:b6:6c:f7:a9:41:49:58:99:ac:5e:ca:
         42:8a:1d:d7:86:8f:f9:d2:dd:b7:66:0b:c8:7f:16:37:7b:4a:
         ea:fc:aa:dd:ec:19:e4:f9:da:22:8a:2b:01:d6:5c:bb:3d:23:
         62:4f:55:05:34:09:c5:4a:f1:bd:95:b7:e7:73:e4:4a:e3:74:
         e1:dd:2f:a8:e7:da:ef:11:22:c9:79:cd:0e:34:c2:bf:47:50:
         e0:da:39:f1:04:e4:56:79:34:01:5f:c8:b0:87:77:b3:87:d8:
         1f:16:bc:1f:2e:61:24:7b:b0:30:ff:a9:67:d8:ce:1e:d3:d6:
         17:75:30:91:c9:f4:7b:70:00:a6:81:db:71:4d:7e:36:a4:a9:
         3b:d1:87:8b:b3:d5:24:27:dc:98:aa:cb:be:a4:0f:3a:36:14:
         75:41:e1:02:99:9b:a0:1f:e7:4e:a9:ba:f6:84:33:a7:ca:ae:
         34:56:08:2e:f1:59:96:02:0f:c9:37:5f:08:5b:28:58:e0:e0:
         0d:8f:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:15:51 2025 by rpki-client