This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323033303537.roa
File:                     352e38332e3232302e302f32342d3234203d3e20323033303537.roa (raw, json)
Hash identifier:          BVaXo1l6Pl2Dfw+CXwSjyuHehh3MljImYoQK/0GHyuI=
Subject key identifier:   F7:3A:2C:F3:9F:14:80:94:B0:9C:FC:76:30:7A:17:33:E8:BE:F4:55
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       43283496451B917E0B7DC54ECACDBF65FFDDD9D0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323033303537.roa
Signing time:             Fri 16 Jan 2026 10:13:30 +0000
ROA not before:           Fri 16 Jan 2026 10:08:30 +0000
ROA not after:            Fri 15 Jan 2027 10:13:30 +0000
asID:                     203057
IP address blocks:        5.83.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:28:34:96:45:1b:91:7e:0b:7d:c5:4e:ca:cd:bf:65:ff:dd:d9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 16 10:08:30 2026 GMT
            Not After : Jan 15 10:13:30 2027 GMT
        Subject: CN=F73A2CF39F148094B09CFC76307A1733E8BEF455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a0:8d:3d:10:2b:5b:bb:4e:91:6b:7d:c3:8a:
                    a1:a4:fd:28:69:e0:6a:c7:9c:a8:e3:df:4a:04:42:
                    c4:12:c7:71:31:72:ad:be:c6:cf:65:7d:21:05:d6:
                    d0:20:ca:2f:77:6f:0c:ea:3e:2b:00:7b:e6:72:be:
                    fc:98:ba:5e:a1:10:31:de:1d:9f:93:59:d4:ee:9a:
                    5c:d1:9c:ba:2b:c0:05:be:7d:15:27:f4:0c:85:32:
                    38:ed:34:16:c0:a0:6f:6d:10:92:4f:f7:45:19:1b:
                    8f:77:2b:9d:59:5e:a1:24:05:e2:b3:11:4d:ed:bf:
                    c3:2e:2a:f0:62:58:fe:f9:fd:9d:0a:b4:7c:7c:88:
                    c9:90:3f:a7:a9:ba:11:37:cb:f4:2f:b7:83:57:4b:
                    24:75:eb:29:c1:df:6f:30:10:99:4e:6d:00:26:bb:
                    e7:6b:cf:96:dd:fd:8a:c4:93:3b:d1:e0:c7:ff:99:
                    bb:52:b7:42:12:66:21:cf:34:9d:f1:7d:75:22:13:
                    79:0b:81:48:84:79:48:c1:04:ee:6c:65:e4:d9:78:
                    55:2c:6f:f6:c3:d9:d5:67:f2:29:fa:ec:8a:65:43:
                    3b:dd:ed:a9:c7:6c:e4:ae:e3:dd:82:76:57:f6:96:
                    3f:d5:2c:14:0b:8d:1c:54:af:49:a8:fa:00:b5:b4:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:2C:F3:9F:14:80:94:B0:9C:FC:76:30:7A:17:33:E8:BE:F4:55
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323033303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:eb:44:b4:0f:1d:31:00:03:75:46:41:2b:4e:d7:b2:67:
         e1:b3:e9:e3:25:ac:13:f5:c2:46:b2:80:b7:ed:2b:c7:08:54:
         b1:b8:8f:e6:90:a6:85:f1:c2:58:b1:e7:4c:16:0c:f6:21:ee:
         ce:44:66:d2:dc:44:c0:b4:99:bd:70:2b:62:ef:7c:44:65:cd:
         0b:03:da:3d:b4:9b:2e:9d:8e:1e:41:36:bd:3a:d9:87:73:40:
         a2:88:8c:6d:c0:25:24:27:85:d7:e8:3a:50:2c:32:32:9c:5e:
         fc:d3:2f:a4:ab:52:76:eb:49:5c:66:ae:8f:09:47:3a:97:22:
         33:49:21:b1:ea:1f:41:af:71:f6:5b:1d:65:ce:7e:3d:71:b2:
         fe:74:8e:24:bd:bc:7b:31:20:ce:64:35:a2:2b:12:fa:7f:45:
         8a:5f:05:9c:2b:c5:d1:dd:69:2c:bd:74:33:94:5d:28:52:68:
         df:34:f7:eb:d9:9c:ab:d1:9f:88:a0:7a:bd:78:02:15:3d:de:
         48:ec:f9:a3:82:24:07:a4:f4:f4:ec:fc:b7:19:a7:d9:3c:9b:
         a8:55:b3:b7:de:df:8a:b5:4f:87:bf:bd:3f:2e:04:14:46:50:
         88:06:42:df:2f:dc:ea:4a:18:51:d4:78:d9:dc:ef:cf:e1:df:
         6d:21:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 15:11:31 2026 by rpki-client