This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231332e302f32342d3234203d3e20323136323332.roa
File:                     352e38332e3231332e302f32342d3234203d3e20323136323332.roa (raw, json)
Hash identifier:          FSTvypxIqj9YHf42lOkgvmesYNLdcF/Pvx9t7zo4j1A=
Subject key identifier:   46:80:FD:0C:6E:FC:3F:33:6C:7F:34:86:5C:60:92:E7:56:05:85:27
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2BD30F2E625A95859D4C56EA2F1B098D982C89A4
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231332e302f32342d3234203d3e20323136323332.roa
Signing time:             Mon 05 Jan 2026 12:49:58 +0000
ROA not before:           Mon 05 Jan 2026 12:44:58 +0000
ROA not after:            Mon 04 Jan 2027 12:49:58 +0000
asID:                     216232
IP address blocks:        5.83.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d3:0f:2e:62:5a:95:85:9d:4c:56:ea:2f:1b:09:8d:98:2c:89:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan  5 12:44:58 2026 GMT
            Not After : Jan  4 12:49:58 2027 GMT
        Subject: CN=4680FD0C6EFC3F336C7F34865C6092E756058527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:31:0e:fd:90:8b:32:a8:93:ba:41:a6:48:
                    ea:58:5d:27:21:7b:45:8d:30:e2:28:c3:a8:99:60:
                    36:3f:47:f8:a5:00:9b:0c:12:b8:f5:a7:95:5f:41:
                    bd:d7:88:2a:16:06:b8:6a:69:19:a8:01:60:d8:4e:
                    d2:ce:79:81:1d:c7:b1:94:e8:e8:4e:f0:23:b7:53:
                    98:34:7d:71:fa:5c:85:e5:d8:54:cb:3b:37:28:4c:
                    32:d8:3b:a4:04:ef:4e:a8:90:62:89:76:f4:16:67:
                    81:fd:47:3e:35:88:85:21:cd:9a:60:ec:7e:be:37:
                    1b:b5:5b:97:bc:46:4f:80:4b:66:4c:d4:51:8b:d3:
                    65:14:b0:b5:4c:88:b3:2c:28:bd:8e:dd:d4:a4:91:
                    3f:ca:4c:76:0c:1c:b1:41:56:e5:73:cb:73:10:4f:
                    d9:f9:a8:51:79:3e:53:60:64:6b:17:92:df:e2:50:
                    a4:4e:59:5f:9d:63:d6:ed:c7:ed:f1:8e:b2:38:8d:
                    f9:89:f5:3f:fc:dd:62:d1:5e:2e:a1:cb:0b:8c:be:
                    28:9b:e5:4b:cb:69:08:b0:d6:89:f0:3d:d9:1f:bf:
                    03:3e:ed:0d:51:23:25:b0:5c:65:ee:8f:6f:29:25:
                    21:bd:cc:87:2d:36:2b:b5:f0:82:ab:da:e2:0d:b8:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:FD:0C:6E:FC:3F:33:6C:7F:34:86:5C:60:92:E7:56:05:85:27
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231332e302f32342d3234203d3e20323136323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:75:96:7f:b1:9f:e2:7b:08:25:db:94:25:7b:73:60:40:
         c9:19:0e:6e:99:47:8a:31:d6:89:e8:65:0a:b9:5f:80:df:ef:
         3d:09:2f:03:e1:ec:ca:62:f1:4d:09:3e:92:10:57:6b:d5:7c:
         dc:45:20:1c:47:31:cc:77:ad:dd:b7:ee:fb:e2:15:40:d0:6a:
         7d:28:1c:3c:e3:e2:34:a7:84:1e:77:f8:3d:e9:bd:50:9a:d9:
         a3:41:ca:0d:e4:f8:f4:aa:c0:94:e9:57:5b:dc:69:2f:16:08:
         b0:04:cc:80:b5:58:24:5d:47:12:19:0b:d6:e3:9d:39:49:a5:
         bf:27:3c:75:e7:42:0f:8f:67:24:a4:ee:cd:44:35:3b:38:ae:
         dc:e4:ff:62:80:df:21:3f:95:d9:44:15:27:dd:62:1f:0e:f1:
         bf:c4:db:b1:ee:a6:fd:ec:4b:00:b4:61:09:bb:0a:62:03:4b:
         a2:45:c3:30:06:b7:cd:8f:0e:0a:f3:43:fd:65:d2:ee:f8:f0:
         91:75:1a:10:55:00:c7:98:c4:49:b1:16:e3:da:45:f5:85:d7:
         dd:34:0c:62:0e:4a:84:a9:66:31:94:a9:4d:2a:86:25:e6:a7:
         c4:cd:c3:02:2a:c5:18:62:89:64:e6:90:ed:08:2d:33:52:6a:
         18:fe:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:11:43 2026 by rpki-client