This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e203436353539.roa
File:                     3136392e34302e3133382e302f32332d3234203d3e203436353539.roa (raw, json)
Hash identifier:          LrYSCjsRrPyP0u2MRQSj/kJNdeM6nyPCC49uuXs73C8=
Subject key identifier:   FC:5E:1F:C0:28:14:3E:9B:1C:46:D4:69:A8:A0:55:E4:68:8D:E4:65
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       280B7AC225152BC5F3D1624549601379E0CFE093
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e203436353539.roa
Signing time:             Thu 18 Dec 2025 12:04:14 +0000
ROA not before:           Thu 18 Dec 2025 11:59:14 +0000
ROA not after:            Thu 17 Dec 2026 12:04:14 +0000
asID:                     46559
IP address blocks:        169.40.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:7a:c2:25:15:2b:c5:f3:d1:62:45:49:60:13:79:e0:cf:e0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec 18 11:59:14 2025 GMT
            Not After : Dec 17 12:04:14 2026 GMT
        Subject: CN=FC5E1FC028143E9B1C46D469A8A055E4688DE465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:48:c0:5a:9f:f4:82:36:10:25:be:78:b1:
                    69:41:06:e0:66:52:73:4d:8b:85:63:20:ec:37:04:
                    26:1a:2a:7e:dd:b2:62:6a:3e:2f:d1:72:6c:25:d9:
                    4e:ab:d4:2b:7a:76:72:77:a4:f9:80:f3:b8:d4:43:
                    64:9c:c9:76:28:5c:76:1c:83:82:0b:26:62:8b:71:
                    22:c0:3c:44:92:cf:89:4b:53:ff:cf:08:99:91:7f:
                    e2:00:8b:17:b2:26:28:89:8d:38:dc:57:66:49:ca:
                    22:69:07:48:62:8e:b0:ab:a6:39:d4:00:e1:a1:02:
                    ea:e6:34:e3:fd:cd:42:f3:ad:e4:1b:0e:f2:0a:a1:
                    20:9d:80:18:38:85:10:c5:fe:e1:9b:de:37:4a:12:
                    30:18:6e:8a:88:dd:60:5a:42:e7:3b:a2:b7:ca:91:
                    9f:9c:d7:8c:82:be:ef:e3:2f:4a:fc:31:f0:62:b8:
                    c8:f3:2c:85:8e:bf:ae:ab:eb:e8:a8:21:b2:a7:3e:
                    ab:a1:2e:c9:a7:f3:36:b5:d4:ed:76:e7:94:e1:da:
                    d3:b3:02:b5:09:ca:55:2e:9b:20:c4:8a:7b:94:e8:
                    75:9a:a3:6b:fa:52:62:d4:17:66:1b:a0:c4:90:9b:
                    d3:cf:d3:99:cc:10:f1:83:85:06:3e:6c:66:d1:e1:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:1F:C0:28:14:3E:9B:1C:46:D4:69:A8:A0:55:E4:68:8D:E4:65
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133382e302f32332d3234203d3e203436353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:30:7b:ec:e6:78:0c:03:d5:f1:0c:43:a7:6b:55:82:ab:5c:
         4b:48:1d:a7:df:0c:0a:6a:db:29:60:82:c3:c1:2c:b3:2a:b4:
         8b:44:a3:31:3e:62:74:8c:34:55:41:8f:74:d4:ac:1e:e8:e0:
         fe:fa:16:53:87:fc:bb:f1:57:c7:a6:a5:52:9f:c5:e8:70:fc:
         06:75:b5:29:7e:61:65:e7:45:d3:24:fd:1f:74:e3:8c:d1:27:
         63:4b:bb:c7:78:c6:1d:b1:c8:9d:a1:d2:3e:56:4e:69:d2:60:
         fb:5a:e3:c1:93:0c:f4:60:9b:7e:c2:c8:fc:73:4b:6b:4c:04:
         1e:ac:38:d9:41:a1:ab:07:b3:67:4d:d4:0b:b1:e2:ea:81:5c:
         60:f6:bc:09:42:c7:7a:72:84:eb:eb:2b:fd:f6:b3:99:69:4e:
         e1:6f:21:39:4b:f0:95:db:1e:58:ca:8c:17:7f:03:5c:f9:2d:
         0f:ef:49:d2:bb:28:89:9a:3e:92:0c:b4:69:19:34:25:8b:39:
         b4:ee:17:6e:e2:80:33:70:47:d5:72:c3:d1:c8:2d:ee:0c:bd:
         f0:3b:44:aa:b8:10:7d:f3:52:ee:dc:fd:f6:40:6b:06:eb:60:
         28:5e:4a:79:b4:ff:ef:86:4d:44:2d:d5:5c:18:8e:35:4c:1c:
         1e:26:a9:36
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUKAt6wiUVK8Xz0WJFSWATeeDP4JMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNTEyMTgxMTU5MTRaFw0yNjEyMTcxMjA0MTRaMDMxMTAvBgNV
BAMTKEZDNUUxRkMwMjgxNDNFOUIxQzQ2RDQ2OUE4QTA1NUU0Njg4REU0NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2U0jAWp/0gjYQJb54sWlBBuBm
UnNNi4VjIOw3BCYaKn7dsmJqPi/Rcmwl2U6r1Ct6dnJ3pPmA87jUQ2ScyXYoXHYc
g4ILJmKLcSLAPESSz4lLU//PCJmRf+IAixeyJiiJjTjcV2ZJyiJpB0hijrCrpjnU
AOGhAurmNOP9zULzreQbDvIKoSCdgBg4hRDF/uGb3jdKEjAYboqI3WBaQuc7orfK
kZ+c14yCvu/jL0r8MfBiuMjzLIWOv66r6+ioIbKnPquhLsmn8za11O1255Th2tOz
ArUJylUumyDEinuU6HWao2v6UmLUF2YboMSQm9PP05nMEPGDhQY+bGbR4bwzAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU/F4fwCgUPpscRtRpqKBV5GiN5GUwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMzM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNjM1MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAakoijANBgkqhkiG
9w0BAQsFAAOCAQEAmzB77OZ4DAPV8QxDp2tVgqtcS0gdp98MCmrbKWCCw8Essyq0
i0SjMT5idIw0VUGPdNSsHujg/voWU4f8u/FXx6alUp/F6HD8BnW1KX5hZedF0yT9
H3TjjNEnY0u7x3jGHbHInaHSPlZOadJg+1rjwZMM9GCbfsLI/HNLa0wEHqw42UGh
qwezZ03UC7Hi6oFcYPa8CULHenKE6+sr/fazmWlO4W8hOUvwldseWMqMF38DXPkt
D+9J0rsoiZo+kgy0aRk0JYs5tO4XbuKAM3BH1XLD0cgt7gy98DtEqrgQffNS7tz9
9kBrButgKF5KebT/74ZNRC3VXBiONUwcHiapNg==
-----END CERTIFICATE-----
Generated at Sat Dec 20 03:34:50 2025 by rpki-client