This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa
File:                     3136392e34302e3134322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0ltXXhhwma32mZqB8r+/lFrhGUaoDOSRGuPsoChn9Vw=
Subject key identifier:   FF:A3:B0:80:06:6C:66:1D:79:BD:EE:67:3B:B2:9E:15:01:F2:54:BA
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       57DE6AB3DDD055092E427474B4E1AEC220F0A4B2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 08 Dec 2025 16:05:17 +0000
ROA not before:           Mon 08 Dec 2025 16:00:17 +0000
ROA not after:            Mon 07 Dec 2026 16:05:17 +0000
asID:                     61317
IP address blocks:        169.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 08:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:de:6a:b3:dd:d0:55:09:2e:42:74:74:b4:e1:ae:c2:20:f0:a4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  8 16:00:17 2025 GMT
            Not After : Dec  7 16:05:17 2026 GMT
        Subject: CN=FFA3B080066C661D79BDEE673BB29E1501F254BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:fb:0d:8a:88:11:22:d7:c0:75:d5:20:6c:
                    f1:68:ad:1c:8e:da:49:d1:62:6f:45:90:05:fd:98:
                    2e:77:2e:f4:77:d8:50:cd:c2:21:3f:e6:11:85:fc:
                    f5:18:07:49:0c:e0:c2:70:11:c0:d4:7d:6d:30:9f:
                    95:3a:25:da:ac:02:75:b5:e3:72:3b:9e:7a:b2:7c:
                    4e:d9:6e:07:e0:20:43:18:a4:5c:fb:6c:54:4b:e1:
                    1c:55:27:1f:c4:4f:1c:ac:b5:45:da:c4:51:44:97:
                    5e:de:a5:28:d7:6a:b7:17:b2:d3:df:20:e0:e7:4a:
                    76:1b:39:82:61:aa:a3:b2:20:5a:70:e8:d6:16:a1:
                    d7:2e:7e:c8:d6:b1:81:3c:de:6f:65:47:83:c9:eb:
                    30:e6:3f:4d:ea:e3:84:98:30:37:4e:50:30:cf:58:
                    b6:f1:df:6b:52:ee:ea:64:a6:cc:30:b4:41:0a:b3:
                    6b:25:bf:2e:46:eb:24:3e:56:05:48:db:32:37:1a:
                    72:72:dc:d7:96:3e:93:c4:2d:57:a6:83:71:26:03:
                    fa:bb:46:51:ac:fc:74:18:14:06:00:90:72:1a:41:
                    5c:87:23:5f:7f:50:5e:f0:40:e6:3b:6f:39:55:9a:
                    fc:b2:fa:ba:1f:d7:c6:c6:cd:c4:3d:cd:b7:33:1f:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:B0:80:06:6C:66:1D:79:BD:EE:67:3B:B2:9E:15:01:F2:54:BA
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:10:ef:f7:30:30:dc:00:91:d5:c9:55:50:26:2a:b3:45:
         ac:3e:0a:e9:1a:73:3c:01:bc:a2:c5:17:5f:da:6e:16:23:5d:
         20:8e:0d:3d:32:f5:08:25:c6:9e:7b:d3:7a:fa:c0:e9:a5:19:
         b1:ed:fe:0a:5d:58:73:b0:fb:4a:f9:2e:b0:07:f9:a8:0c:92:
         4d:3c:58:e6:a9:45:9a:5d:25:7b:f8:8b:8f:40:03:bc:17:4f:
         ed:b8:eb:ea:59:5d:8a:4d:8a:33:90:b5:d8:47:83:44:c6:47:
         16:03:1c:5f:71:50:a5:ce:e3:81:1f:77:60:0c:a0:dd:41:41:
         80:95:6d:7b:e9:55:38:93:10:09:28:b8:07:be:7a:71:ac:86:
         78:03:24:78:cc:09:9a:e8:0b:dd:81:10:5f:97:06:62:4e:8e:
         b2:d7:52:b9:10:65:98:40:c3:25:c5:1f:d9:c5:d4:7c:5e:1d:
         c3:cb:10:0f:0c:7a:da:7b:2c:a1:3f:bc:e0:40:1d:46:2d:8b:
         40:f0:43:0b:2f:82:07:ab:08:f7:b2:6a:58:f7:1d:b3:05:65:
         1c:a6:b7:db:c8:31:06:19:8f:41:d3:1f:16:88:a0:3e:ff:61:
         56:a4:fe:25:f2:b8:0d:9d:c8:e4:c5:2e:53:a9:b6:37:a7:7a:
         9e:85:7e:e7
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUV95qs93QVQkuQnR0tOGuwiDwpLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNTEyMDgxNjAwMTdaFw0yNjEyMDcxNjA1MTdaMDMxMTAvBgNV
BAMTKEZGQTNCMDgwMDY2QzY2MUQ3OUJERUU2NzNCQjI5RTE1MDFGMjU0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOO/sNiogRItfAddUgbPForRyO
2knRYm9FkAX9mC53LvR32FDNwiE/5hGF/PUYB0kM4MJwEcDUfW0wn5U6JdqsAnW1
43I7nnqyfE7ZbgfgIEMYpFz7bFRL4RxVJx/ETxystUXaxFFEl17epSjXarcXstPf
IODnSnYbOYJhqqOyIFpw6NYWodcufsjWsYE83m9lR4PJ6zDmP03q44SYMDdOUDDP
WLbx32tS7upkpswwtEEKs2slvy5G6yQ+VgVI2zI3GnJy3NeWPpPELVemg3EmA/q7
RlGs/HQYFAYAkHIaQVyHI19/UF7wQOY7bzlVmvyy+rof18bGzcQ9zbczHzG1AgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU/6OwgAZsZh15ve5nO7KeFQHyVLowHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkojjANBgkqhkiG
9w0BAQsFAAOCAQEAI7AQ7/cwMNwAkdXJVVAmKrNFrD4K6RpzPAG8osUXX9puFiNd
II4NPTL1CCXGnnvTevrA6aUZse3+Cl1Yc7D7SvkusAf5qAySTTxY5qlFml0le/iL
j0ADvBdP7bjr6lldik2KM5C12EeDRMZHFgMcX3FQpc7jgR93YAyg3UFBgJVte+lV
OJMQCSi4B756cayGeAMkeMwJmugL3YEQX5cGYk6OstdSuRBlmEDDJcUf2cXUfF4d
w8sQDwx62nssoT+84EAdRi2LQPBDCy+CB6sI97JqWPcdswVlHKa328gxBhmPQdMf
FoigPv9hVqT+JfK4DZ3I5MUuU6m2N6d6noV+5w==
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:22:41 2025 by rpki-client