This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa
File:                     352e38332e3231372e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          GlB979WptbPVjGZPiFd3GfEnhxA4iZnSHJmmq8RZKcA=
Subject key identifier:   20:80:B6:A3:F4:54:EC:F4:1D:B4:B5:F6:DF:D8:BB:C2:C7:CB:CE:BB
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       475EFF7734AB5E7B7044B5F8B4DA52E73854ABF5
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa
Signing time:             Fri 16 Jan 2026 08:10:26 +0000
ROA not before:           Fri 16 Jan 2026 08:05:26 +0000
ROA not after:            Fri 15 Jan 2027 08:10:26 +0000
asID:                     25198
IP address blocks:        5.83.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:ff:77:34:ab:5e:7b:70:44:b5:f8:b4:da:52:e7:38:54:ab:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 16 08:05:26 2026 GMT
            Not After : Jan 15 08:10:26 2027 GMT
        Subject: CN=2080B6A3F454ECF41DB4B5F6DFD8BBC2C7CBCEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:82:bd:b3:a9:94:04:2b:cd:72:7c:4b:69:
                    f6:bc:65:a7:ce:e8:1e:51:ba:9b:82:c7:65:f6:15:
                    42:40:8e:98:0a:8d:86:4e:c1:92:6d:2e:da:16:a2:
                    ff:d5:00:29:19:7a:31:99:db:ca:21:be:7f:64:48:
                    0c:67:a2:35:db:5d:55:0f:9e:3a:6c:04:f4:4b:a2:
                    f0:1e:75:fc:ef:83:28:e0:13:93:20:3c:24:55:f7:
                    51:ca:74:cb:22:d6:13:6c:f1:78:41:e9:29:d3:b8:
                    4d:c1:67:d6:76:c6:e0:11:44:80:0d:10:90:6e:81:
                    52:24:29:a5:d1:78:af:27:b8:7a:63:38:07:b8:ee:
                    80:2c:e8:f6:da:ef:6a:a4:f7:78:48:a5:42:60:1c:
                    09:e6:30:1c:66:ce:7f:1b:9f:39:bc:27:a9:55:71:
                    8f:3c:97:be:e5:33:48:32:75:f8:ff:79:4b:32:03:
                    1a:64:a0:4f:63:b3:76:bf:f3:ee:05:00:4d:0e:13:
                    bf:e1:c8:ba:59:7a:c6:c5:f9:6c:c2:e9:8e:26:43:
                    ec:a3:bb:f3:4b:45:fa:45:ca:89:a8:e2:93:df:5e:
                    08:f9:4a:78:07:8f:26:2c:40:0e:94:92:cf:1e:41:
                    63:bf:f6:47:bd:47:87:d6:57:96:83:5c:c7:6d:63:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:B6:A3:F4:54:EC:F4:1D:B4:B5:F6:DF:D8:BB:C2:C7:CB:CE:BB
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:cd:02:16:10:18:cc:05:19:0d:e4:e1:38:2b:db:b6:fe:
         f8:82:5c:19:6c:05:03:f1:ee:26:8f:3e:e2:1e:64:5c:63:49:
         5f:66:2c:cb:1f:aa:44:d6:ba:9c:ea:07:cb:c4:18:6d:6d:61:
         83:83:ce:fa:e4:72:83:35:8c:6b:97:fc:94:59:3d:5a:fb:ff:
         b1:85:bf:25:20:e4:ff:ae:ec:25:5d:dc:ea:e9:6f:8e:66:09:
         07:ca:9e:96:f3:58:15:d3:3b:0d:89:28:da:1f:07:aa:0c:16:
         72:80:dc:57:53:d2:0f:c4:60:8b:d5:5d:37:50:ef:dc:7d:b9:
         44:a4:ce:78:64:0e:27:14:51:04:18:be:e3:fb:7f:c6:4a:5a:
         3a:c4:9a:88:8f:a9:02:b6:d3:80:6e:db:cd:b8:d5:a1:81:e0:
         45:9a:96:46:1f:e5:2a:da:66:a7:df:78:2b:fa:73:1e:0b:8f:
         47:22:95:5c:f0:34:30:02:67:a7:b1:61:de:8d:ab:03:79:bb:
         92:97:10:0c:a3:88:3c:e8:61:5c:f9:c0:5b:bd:01:c8:22:d3:
         d0:d2:a7:12:a1:fe:ec:3b:8a:57:20:28:7e:5c:72:c6:88:9f:
         05:d0:d6:e5:29:24:2f:f5:62:7d:94:dd:42:91:59:39:82:eb:
         e5:56:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:11:28 2026 by rpki-client