This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa
File:                     33372e3233302e35352e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          gGzT1CjRPVCCypClrT8fbr0hhNEGFm8CcSFNTIXLYnI=
Subject key identifier:   5C:28:C6:41:AF:13:E7:54:5E:64:6E:8A:6F:43:2C:25:B3:9E:F3:27
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       6BA3D5ECEAFD6B49B91F586BF3F39DC2679809EC
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa
Signing time:             Wed 17 Dec 2025 06:30:51 +0000
ROA not before:           Wed 17 Dec 2025 06:25:51 +0000
ROA not after:            Wed 16 Dec 2026 06:30:51 +0000
asID:                     25198
IP address blocks:        37.230.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 04:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a3:d5:ec:ea:fd:6b:49:b9:1f:58:6b:f3:f3:9d:c2:67:98:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec 17 06:25:51 2025 GMT
            Not After : Dec 16 06:30:51 2026 GMT
        Subject: CN=5C28C641AF13E7545E646E8A6F432C25B39EF327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:9c:1c:81:13:17:95:7d:56:4f:bb:0c:f8:
                    8b:c3:ee:0d:4c:a7:50:74:a2:96:ff:ff:d3:fe:da:
                    38:67:be:fd:09:63:4d:fc:70:c8:1e:dd:1a:45:8e:
                    0c:08:64:91:d1:ba:7b:d5:40:45:b4:1f:c3:3b:53:
                    d2:f7:41:9a:ee:63:fa:42:76:05:65:2a:fd:a3:5c:
                    d1:1f:06:2b:5a:2c:7c:9c:1b:4b:29:9c:b1:b6:56:
                    39:42:3b:c8:99:bd:69:5e:8e:4a:3f:90:da:3b:0e:
                    5f:c8:3f:7a:a7:9a:a1:ca:7f:df:74:12:e0:74:73:
                    8b:9c:0d:7b:f5:5b:01:bb:9a:a7:06:13:3a:ff:15:
                    e7:c8:76:43:40:c3:45:fd:6b:05:73:34:56:5c:86:
                    3f:fb:56:80:1e:dc:4b:68:c8:b7:f4:8d:4c:ea:2a:
                    de:47:66:06:e7:6e:f8:a2:23:4a:74:45:1e:8b:18:
                    f9:9b:58:a7:f9:54:44:c6:bf:29:e3:46:92:3f:8d:
                    b1:ad:88:33:3d:7d:e4:c5:4c:37:ae:5f:b6:47:63:
                    a7:44:21:ca:28:60:1d:7a:f4:27:63:aa:56:98:3c:
                    65:45:99:68:ae:16:a3:64:05:04:fd:08:6f:ba:fd:
                    ec:05:fa:cb:34:09:1f:24:1e:b6:04:7e:3f:12:ff:
                    a1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:28:C6:41:AF:13:E7:54:5E:64:6E:8A:6F:43:2C:25:B3:9E:F3:27
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:e8:85:73:93:66:8b:61:6e:9d:35:ee:fe:9d:55:47:cd:
         19:4f:2c:d3:fe:38:80:82:fb:25:98:24:09:3a:10:cb:61:56:
         27:41:fc:e4:87:52:fb:f1:b8:e8:6f:c1:75:4a:24:d0:6a:b7:
         2d:de:87:48:9c:15:1e:91:78:6c:e6:ee:45:f8:ac:94:53:36:
         65:9b:7d:27:ec:22:91:35:6f:90:ed:05:01:9b:b8:33:5e:9d:
         fb:24:64:fc:d7:54:0c:5f:bb:7d:ba:62:2d:c8:2b:da:10:56:
         87:4e:bb:d1:d1:b2:b7:67:a3:9b:d3:2d:9c:68:c7:69:52:dc:
         ef:05:65:69:30:6e:17:8d:e4:81:0a:fb:df:fa:55:be:38:db:
         35:4d:9e:cd:ac:52:3f:f9:5e:3c:8e:11:df:ed:30:15:00:64:
         19:b3:3f:4c:95:ef:64:db:7c:5f:a2:d1:86:8e:4f:d1:10:22:
         11:34:f4:c6:30:72:11:8a:f4:9e:c9:61:f8:68:70:20:ae:97:
         38:68:b0:93:cc:fd:96:48:64:ac:52:a4:d5:55:e2:0f:d0:b3:
         f9:d5:bc:40:24:2e:a5:10:3e:d7:f7:43:5e:b4:01:c3:36:80:
         4c:1b:89:2d:eb:4a:b8:0a:d7:08:59:83:83:1f:7b:f2:54:55:
         4e:4c:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:22:16 2025 by rpki-client