This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323134303235.roa
File:                     352e38332e3231372e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          FIvcZ+sREtMdZlrbEI0rhNEIIrQZBFdZfnAeoW3qR0E=
Subject key identifier:   84:72:C0:81:8A:5A:2B:51:55:9D:6B:C2:C5:FD:18:9B:6F:51:CD:01
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       7CCFE9F8EE6927639204A9BDB5D7DE11844A2388
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323134303235.roa
Signing time:             Thu 01 Jan 2026 12:15:33 +0000
ROA not before:           Thu 01 Jan 2026 12:10:33 +0000
ROA not after:            Thu 31 Dec 2026 12:15:33 +0000
asID:                     214025
IP address blocks:        5.83.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 17:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:cf:e9:f8:ee:69:27:63:92:04:a9:bd:b5:d7:de:11:84:4a:23:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan  1 12:10:33 2026 GMT
            Not After : Dec 31 12:15:33 2026 GMT
        Subject: CN=8472C0818A5A2B51559D6BC2C5FD189B6F51CD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:2a:9c:47:d9:52:6a:3b:d4:0c:e7:b4:37:
                    fc:06:5d:01:45:d3:6a:81:3f:5a:45:72:65:22:02:
                    f0:9a:ca:ba:b3:c7:c6:f1:af:a9:1e:2c:b3:a8:a6:
                    73:81:a2:50:1a:13:08:da:df:a0:7e:bd:ee:ab:f8:
                    5b:40:77:e5:58:fc:00:4b:62:96:9f:24:75:c9:37:
                    c7:c6:91:d5:e8:49:41:4b:03:f8:49:ff:d0:76:8d:
                    e9:fd:3b:31:58:d7:83:5f:f2:e6:fd:db:4c:cf:d4:
                    9e:ce:c4:33:17:8d:bf:06:94:04:e9:d9:cf:1d:03:
                    90:31:e3:11:8c:b4:3f:9b:a6:85:3c:eb:b8:ef:97:
                    be:fb:d9:e9:e9:ff:4f:c2:0a:1a:cf:6c:13:bf:2b:
                    9b:ab:55:ae:b9:c3:6c:c8:df:ac:82:15:3a:9c:40:
                    c7:76:0a:42:8a:47:be:a0:ea:bb:b7:eb:83:81:3b:
                    9a:28:e5:e7:1c:e3:18:fa:eb:f1:90:a5:90:f6:19:
                    c6:bf:62:b9:2c:ae:2f:65:1f:ff:0c:55:c5:cb:7a:
                    98:dd:c1:ea:09:f7:fc:10:b2:fd:66:c2:fd:a0:db:
                    3f:52:01:f8:d5:0a:e7:8d:6b:ff:79:6e:72:5c:14:
                    13:76:4f:0b:11:be:7c:b0:bc:1e:b2:fa:33:18:58:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:C0:81:8A:5A:2B:51:55:9D:6B:C2:C5:FD:18:9B:6F:51:CD:01
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:88:67:30:f3:28:74:5b:e7:28:2f:9a:d7:21:ab:dd:aa:99:
         ca:46:eb:58:ac:bd:a5:f0:46:49:7e:64:61:bb:ed:4f:0d:5d:
         d9:81:9c:d5:4b:c3:75:f3:d9:a1:c6:94:61:40:c9:9c:7f:30:
         57:0b:06:0f:88:d0:0c:c5:91:f6:b5:cb:17:fa:c9:ca:fa:de:
         65:b1:b7:48:a6:18:9c:2e:85:b1:3c:d0:63:82:88:ef:bd:0e:
         1e:fe:7a:e3:57:c1:b0:50:b4:40:b5:a3:f3:fe:3e:87:f8:38:
         ad:13:b4:a8:46:5f:b9:a7:e5:08:da:5e:6d:1f:ef:b0:2f:d5:
         eb:ab:a5:60:34:f1:4c:dc:1b:89:c5:77:a4:f3:e8:68:c9:2d:
         da:d7:aa:43:1a:c1:03:98:bf:d4:24:2e:70:bd:ed:be:fc:a6:
         eb:7e:a8:d0:c6:40:b9:9b:45:6c:10:6b:f9:4e:e2:4e:09:c5:
         be:2a:60:aa:ac:e8:0d:5d:ea:e6:d4:e0:08:c7:85:b4:6d:8f:
         1f:a9:91:6f:a2:56:7f:a3:26:9f:d4:93:4f:bf:26:90:90:52:
         8e:6b:bf:2c:66:f5:1c:d9:df:63:ae:d7:85:e3:42:9c:e2:93:
         3f:d8:d5:9c:0f:4c:06:e5:1b:ef:cd:ad:73:4d:df:1f:db:9d:
         2c:8c:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 05:21:29 2026 by rpki-client