This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS47583.roa
File:                     AS47583.roa (raw, json)
Hash identifier:          Wjvg5l6kS07ARfhBcsb6k1sFF9hFDke47C61VEOiBIk=
Subject key identifier:   1B:6C:AB:1C:3C:CD:28:C1:4E:53:BB:8D:2C:69:F6:2B:CA:D8:A6:5F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       720DFE06A44456BE4B911A34847B2BFF7701F471
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS47583.roa
Signing time:             Mon 15 Dec 2025 14:55:32 +0000
ROA not before:           Mon 15 Dec 2025 14:50:32 +0000
ROA not after:            Mon 14 Dec 2026 14:55:32 +0000
asID:                     47583
IP address blocks:        86.38.190.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 24
                          86.38.204.0/24 maxlen: 24
                          86.38.205.0/24 maxlen: 24
                          86.38.217.0/24 maxlen: 24
                          86.38.218.0/24 maxlen: 24
                          86.38.221.0/24 maxlen: 24
                          86.38.242.0/24 maxlen: 24
                          86.38.243.0/24 maxlen: 24
                          89.116.20.0/24 maxlen: 24
                          89.116.21.0/24 maxlen: 24
                          89.116.22.0/23 maxlen: 24
                          89.116.32.0/24 maxlen: 24
                          89.116.33.0/24 maxlen: 24
                          89.116.34.0/24 maxlen: 24
                          89.116.35.0/24 maxlen: 24
                          89.116.36.0/24 maxlen: 24
                          89.116.37.0/24 maxlen: 24
                          89.116.38.0/24 maxlen: 24
                          89.116.39.0/24 maxlen: 24
                          89.116.49.0/24 maxlen: 24
                          89.116.50.0/24 maxlen: 24
                          89.116.51.0/24 maxlen: 24
                          89.116.52.0/23 maxlen: 24
                          89.116.58.0/23 maxlen: 24
                          89.116.73.0/24 maxlen: 24
                          89.116.74.0/24 maxlen: 24
                          89.116.115.0/24 maxlen: 24
                          89.116.130.0/24 maxlen: 24
                          89.116.146.0/23 maxlen: 24
                          89.116.153.0/24 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.186.0/24 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.212.0/24 maxlen: 24
                          89.116.213.0/24 maxlen: 24
                          89.116.214.0/24 maxlen: 24
                          89.116.224.0/21 maxlen: 24
                          89.116.236.0/24 maxlen: 24
                          89.116.239.0/24 maxlen: 24
                          89.117.6.0/23 maxlen: 24
                          89.117.8.0/23 maxlen: 24
                          89.117.27.0/24 maxlen: 24
                          89.117.32.0/23 maxlen: 24
                          89.117.36.0/23 maxlen: 24
                          89.117.102.0/23 maxlen: 24
                          89.117.116.0/23 maxlen: 24
                          89.117.139.0/24 maxlen: 24
                          89.117.157.0/24 maxlen: 24
                          89.117.168.0/23 maxlen: 24
                          89.117.188.0/24 maxlen: 24
                          89.117.228.0/24 maxlen: 24
                          89.117.229.0/24 maxlen: 24
                          89.117.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:fe:06:a4:44:56:be:4b:91:1a:34:84:7b:2b:ff:77:01:f4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 15 14:50:32 2025 GMT
            Not After : Dec 14 14:55:32 2026 GMT
        Subject: CN=1B6CAB1C3CCD28C14E53BB8D2C69F62BCAD8A65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:5b:bc:e8:1a:16:64:92:e0:f3:b6:08:c5:
                    57:8a:10:95:99:7b:df:d7:29:9e:6c:55:ec:3a:a0:
                    f9:d1:fd:84:6f:60:db:e4:89:79:dc:32:0e:3d:18:
                    86:31:fc:ba:d4:f7:21:d5:2f:00:61:2c:bf:c4:96:
                    ae:db:d2:88:0e:cc:56:02:af:dd:93:ab:04:fb:2d:
                    8d:93:3a:f3:2e:3c:56:0a:df:7f:e4:65:86:11:ee:
                    ea:d7:6d:68:36:06:41:12:9a:e8:28:d8:84:82:87:
                    c0:6e:af:01:a4:7b:ef:ed:d2:d0:16:dc:79:24:29:
                    11:72:27:88:7b:b5:7d:39:ee:96:78:15:12:a2:66:
                    d9:07:27:29:21:03:a1:7e:ed:9a:15:70:ea:2e:bf:
                    c5:27:2f:41:01:70:1c:70:71:e9:b8:49:33:2a:ce:
                    9a:9a:92:2f:2b:9c:6d:64:4e:9e:9a:f1:a8:8d:41:
                    00:9a:3e:1e:33:40:40:2b:1a:be:a9:ab:f5:0f:e4:
                    32:be:5f:6b:1a:01:0e:a1:f6:ca:06:6a:35:19:ca:
                    eb:dd:3e:e7:17:31:bd:93:a0:7c:f4:ab:91:a1:5a:
                    e8:13:13:c9:7e:d9:fe:8d:36:65:0c:c5:6c:7d:17:
                    10:08:a4:ae:b9:8a:94:65:c1:89:56:e0:3e:44:32:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6C:AB:1C:3C:CD:28:C1:4E:53:BB:8D:2C:69:F6:2B:CA:D8:A6:5F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS47583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.190.0/24
                  86.38.202.0-86.38.205.255
                  86.38.217.0-86.38.218.255
                  86.38.221.0/24
                  86.38.242.0/23
                  89.116.20.0/22
                  89.116.32.0/21
                  89.116.49.0-89.116.53.255
                  89.116.58.0/23
                  89.116.73.0-89.116.74.255
                  89.116.115.0/24
                  89.116.130.0/24
                  89.116.146.0/23
                  89.116.153.0/24
                  89.116.179.0/24
                  89.116.186.0/24
                  89.116.190.0/24
                  89.116.212.0-89.116.214.255
                  89.116.224.0/21
                  89.116.236.0/24
                  89.116.239.0/24
                  89.117.6.0-89.117.9.255
                  89.117.27.0/24
                  89.117.32.0/23
                  89.117.36.0/23
                  89.117.102.0/23
                  89.117.116.0/23
                  89.117.139.0/24
                  89.117.157.0/24
                  89.117.168.0/23
                  89.117.188.0/24
                  89.117.228.0/23
                  89.117.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:db:af:ca:39:d7:a1:12:5a:99:e1:01:a0:fc:77:d6:ec:08:
         87:10:32:4b:7f:66:5d:1c:25:50:b0:28:0b:f2:b7:e9:21:06:
         ea:66:f5:fc:bc:d8:5b:78:c2:fc:90:25:1b:cb:9f:28:f4:62:
         20:3d:22:f2:e2:76:49:5a:15:8c:13:31:3b:d8:95:86:2a:f8:
         03:56:bf:ee:de:c9:80:d1:61:e6:f2:84:fd:1b:04:57:6b:ff:
         8c:29:d3:51:d1:17:82:dd:9a:ad:e0:9d:46:ed:28:33:ae:73:
         5f:b5:96:bb:57:d5:c5:df:88:72:ed:45:6f:ce:2c:d6:a4:76:
         71:0a:7d:cd:e6:fb:87:ae:5b:f5:a3:20:bd:ed:9f:da:20:66:
         19:b4:11:23:a0:11:81:e7:8c:e6:6b:5a:18:df:5a:d0:b1:98:
         8c:ce:4d:59:4a:6c:e6:51:ab:73:b1:50:99:cd:8a:58:e6:b8:
         2f:22:7b:b3:3a:11:99:eb:0f:d5:7e:be:ff:93:b9:f2:a9:8d:
         66:16:1d:66:d5:6f:3f:b3:71:d2:14:b1:d5:9b:96:0b:02:e4:
         58:3a:3e:e6:6d:c4:9f:9e:27:6a:ef:09:40:2f:f6:e5:5a:e4:
         0b:3a:72:96:d0:91:81:20:d1:8d:3f:bc:56:4c:80:5b:04:43:
         0c:f3:4f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:05:44 2025 by rpki-client