This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203633313939.roa
File:                     352e38332e3231392e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          lQgYCBch/vDe00Veal96Un4Pj0jm0KHmfJudtCO5Kis=
Subject key identifier:   43:C9:36:F1:C8:45:99:F3:8C:AA:4E:01:C8:48:B5:3D:65:07:56:BA
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2409F4554749B6786149BC48D2C2BB039C669BCC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203633313939.roa
Signing time:             Sun 04 Jan 2026 06:05:41 +0000
ROA not before:           Sun 04 Jan 2026 06:00:41 +0000
ROA not after:            Sun 03 Jan 2027 06:05:41 +0000
asID:                     63199
IP address blocks:        5.83.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:f4:55:47:49:b6:78:61:49:bc:48:d2:c2:bb:03:9c:66:9b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan  4 06:00:41 2026 GMT
            Not After : Jan  3 06:05:41 2027 GMT
        Subject: CN=43C936F1C84599F38CAA4E01C848B53D650756BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:f3:f7:22:e4:05:1f:02:12:03:9f:a6:ac:
                    b7:b1:da:65:5b:c0:5c:97:db:27:b0:88:99:2c:6f:
                    e3:17:18:c5:86:bd:90:50:83:f6:a0:3c:47:66:bc:
                    a5:e2:d3:42:be:49:8b:1b:02:6d:03:42:0e:77:4d:
                    fd:ef:0c:f9:bc:1b:1b:77:e5:e0:1d:a0:ab:4d:85:
                    ca:7f:6e:b4:3e:cb:34:4a:6c:69:0b:a5:bd:ea:24:
                    4d:2a:cb:7e:82:9b:98:d3:6f:8d:e8:fd:bd:de:d1:
                    22:6e:63:48:eb:20:0e:0d:9e:14:eb:86:13:48:de:
                    72:57:69:f7:76:3c:a0:b4:bf:d3:e0:94:60:d4:7f:
                    20:7e:10:00:83:2f:1d:a6:9a:af:4a:fa:a0:d0:cd:
                    07:eb:59:98:aa:11:05:62:7b:ee:b5:71:2a:b9:e8:
                    dc:05:df:b1:a5:e0:8e:54:8a:a1:37:6b:78:ee:8c:
                    2a:69:be:44:91:81:7d:cf:e3:6f:1b:4a:b8:8d:ae:
                    1b:3b:8a:f5:f3:60:eb:25:5f:73:2c:30:fe:3f:73:
                    7e:7f:18:1e:d6:1d:05:19:8f:52:b2:a9:70:75:1e:
                    0a:bc:ce:8e:fe:ec:68:5b:17:e9:59:d1:da:9b:20:
                    ea:45:9b:52:7c:9e:9c:3a:a0:6c:d0:3e:24:d4:d9:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C9:36:F1:C8:45:99:F3:8C:AA:4E:01:C8:48:B5:3D:65:07:56:BA
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231392e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:38:81:ac:2c:6a:a1:22:c6:dc:e1:e0:97:56:d4:de:7a:
         bf:5a:22:a6:dd:cd:ab:a6:e2:a9:bf:a4:15:1c:88:50:8c:45:
         8a:cd:64:61:7f:2f:7c:92:4b:fe:d1:d6:60:c3:ce:31:bf:4f:
         2d:68:bb:03:01:52:f1:ef:5c:22:c3:4b:3f:43:a4:bb:32:45:
         c3:d2:1f:c1:b7:2c:e3:ea:03:47:de:4a:c5:68:08:14:83:f7:
         5f:af:af:3a:52:66:e9:75:79:b5:db:f3:00:e8:ff:f2:22:13:
         bc:d3:f4:6f:37:a3:9f:53:7b:00:95:b3:fb:f5:e3:2e:7c:55:
         6b:a8:ca:e2:69:4b:15:c7:4c:78:68:e7:a3:f7:e3:c9:35:39:
         f0:14:c9:60:e7:89:8d:f5:54:98:ef:c1:de:89:bf:1a:46:b5:
         3e:94:97:df:f8:dd:ce:32:45:7b:57:bb:0f:09:c6:44:49:52:
         18:17:67:cd:88:ff:1b:7b:18:45:b7:db:5b:03:cb:4e:1e:21:
         d2:5e:76:23:5a:6e:da:74:7b:85:28:80:83:54:02:31:45:58:
         46:bb:7b:e1:76:7d:b2:41:a4:99:0d:cf:33:59:20:2d:de:15:
         ef:ec:06:ae:e3:f7:15:78:b4:7a:f6:6e:3b:16:54:46:ae:4e:
         7a:ad:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:11:42 2026 by rpki-client