This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa
File:                     3136392e34302e3135322e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier:          go797Zg7oRZHj7x1sG+9DwgA7aQsN1hKVfeU/McIxm8=
Subject key identifier:   CB:C8:3C:C4:FE:EB:BC:06:E4:4B:71:06:FA:8F:1A:7F:4F:61:8B:32
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7C2E94339C29B1969ED602B151BAD1CB0E45C979
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa
Signing time:             Tue 09 Dec 2025 11:41:44 +0000
ROA not before:           Tue 09 Dec 2025 11:36:44 +0000
ROA not after:            Tue 08 Dec 2026 11:41:44 +0000
asID:                     31715
IP address blocks:        169.40.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 17:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2e:94:33:9c:29:b1:96:9e:d6:02:b1:51:ba:d1:cb:0e:45:c9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  9 11:36:44 2025 GMT
            Not After : Dec  8 11:41:44 2026 GMT
        Subject: CN=CBC83CC4FEEBBC06E44B7106FA8F1A7F4F618B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:cb:3b:38:40:55:66:77:93:92:68:c3:67:
                    9f:83:a6:80:d2:0c:5e:cd:6b:65:fd:9b:87:9e:28:
                    b2:57:c3:6c:a6:fc:46:40:e0:be:df:d8:c3:3f:79:
                    fe:7d:79:42:40:a3:4c:d3:73:d3:4f:ea:5c:30:e7:
                    7d:41:96:5e:e7:f8:0d:12:8e:c0:22:4d:ad:85:1b:
                    a5:28:a6:b5:ca:d4:38:81:a2:34:36:e3:74:26:ac:
                    70:f8:af:a1:d9:70:11:20:72:f8:a2:01:15:43:16:
                    40:f0:61:b9:d6:77:c2:55:a0:ee:ef:9d:98:3c:2d:
                    70:5a:9e:70:db:a6:c6:9d:69:dc:90:7b:43:3d:79:
                    9c:fe:e4:17:0c:fa:6f:a5:95:91:0d:e8:ec:19:04:
                    f7:0b:18:0b:ba:7f:96:6e:a1:75:88:27:71:2e:28:
                    13:29:13:9f:34:4d:9b:4d:46:d4:0c:b2:96:3a:26:
                    d4:72:5f:0f:46:8f:00:36:97:7b:db:61:0a:c9:be:
                    bb:1e:0f:c6:85:33:89:8b:41:de:47:62:da:3f:e8:
                    69:d6:58:23:66:6c:f3:49:bf:b2:dd:e1:1f:76:9a:
                    2b:ed:9c:c8:7b:43:fa:40:88:2a:bb:fb:be:8d:d3:
                    c0:61:47:1e:91:83:a4:ed:c9:24:74:9a:18:69:3a:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:3C:C4:FE:EB:BC:06:E4:4B:71:06:FA:8F:1A:7F:4F:61:8B:32
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:17:38:a8:07:30:b7:6a:0f:ea:9a:3f:60:5c:cd:6f:6c:a6:
         4b:c2:a9:9c:b6:ad:78:ee:f7:ba:ae:b7:07:3b:0f:a7:8e:9b:
         0e:7a:be:62:f0:00:f3:34:81:81:67:33:93:16:20:93:bf:0e:
         54:ac:5f:d6:d2:f6:b6:fc:30:7e:62:4d:52:88:ca:da:36:5d:
         88:f8:7b:a4:39:6f:d2:1f:99:5f:38:84:d5:d0:81:30:f6:e2:
         93:13:cb:cf:10:37:c3:23:b0:27:8a:49:89:60:de:e8:7f:2c:
         ec:3b:20:9e:96:ec:80:4b:0d:aa:47:21:3b:4e:34:18:dd:eb:
         5f:01:f5:50:b6:80:77:68:29:29:b1:73:bf:c4:bc:28:32:af:
         af:a5:7a:bc:ed:33:71:12:70:6c:07:e6:fa:2e:76:71:a9:78:
         67:7f:2c:33:46:fe:c7:29:44:f6:67:64:90:20:3a:94:74:ed:
         a0:ff:6e:40:d9:df:c6:3e:e4:35:00:a1:3d:33:ac:2a:5f:93:
         3c:2e:f6:92:6e:e7:4f:c0:e2:fb:7d:77:08:68:01:12:df:e1:
         fe:3a:7c:48:87:e8:8c:b2:a2:b8:0f:6b:db:a6:64:c2:22:02:
         e2:9f:ce:a3:1f:39:0e:76:a7:6f:20:19:fc:ce:46:dd:9b:6d:
         fa:e9:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:34:48 2025 by rpki-client