This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa
File:                     3136392e34302e3135312e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier:          HEznnJdb069Uc8/UM5hKg1QYogc7ieafETfy1Yzk1ks=
Subject key identifier:   8D:B0:AB:87:9F:EE:B9:BD:89:9E:D5:0A:27:E8:41:0E:CD:13:C2:44
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5C9D0130F793912D6836048F7B8E60522B5F7A72
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa
Signing time:             Fri 05 Dec 2025 12:51:19 +0000
ROA not before:           Fri 05 Dec 2025 12:46:19 +0000
ROA not after:            Fri 04 Dec 2026 12:51:19 +0000
asID:                     9318
IP address blocks:        169.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9d:01:30:f7:93:91:2d:68:36:04:8f:7b:8e:60:52:2b:5f:7a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Dec  5 12:46:19 2025 GMT
            Not After : Dec  4 12:51:19 2026 GMT
        Subject: CN=8DB0AB879FEEB9BD899ED50A27E8410ECD13C244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:78:2d:ae:f8:f0:d3:a9:58:64:41:f3:26:
                    4d:14:3e:a9:c3:73:ac:c0:a0:99:fc:a0:6b:20:40:
                    d2:44:f7:34:cf:11:d1:3b:c4:3b:29:96:cb:56:79:
                    22:2a:e5:80:e0:d0:53:44:b5:31:f2:68:2a:59:34:
                    a7:ed:33:54:7c:9e:2c:c1:bb:10:d8:a6:05:1b:f9:
                    58:b8:8d:1c:f2:a4:35:a5:d6:91:f6:d8:fa:8a:83:
                    3d:a9:94:f2:b1:c0:f2:d0:54:97:08:f5:e7:ec:53:
                    24:c3:ad:36:f5:79:1e:9f:cd:41:85:a4:80:c2:e8:
                    62:9a:31:e2:c6:b5:69:03:d8:7c:f6:51:ae:39:3d:
                    23:36:fc:9e:2a:b0:08:6b:55:bf:71:6d:b3:1e:e8:
                    e5:13:88:b9:9e:b0:cb:58:35:b7:19:48:18:5b:d2:
                    e5:39:bc:7a:9a:c2:a9:05:93:48:be:8a:2c:25:c4:
                    29:ee:17:8e:b8:0b:cf:80:cd:a1:af:a6:57:00:97:
                    d9:aa:c0:81:0e:f7:f2:a7:45:82:73:4a:96:2d:be:
                    8b:b5:9f:0b:89:78:00:96:9a:f4:f5:0c:c3:d2:1a:
                    0a:25:14:57:b2:7f:24:25:f3:01:40:61:ab:b6:0c:
                    69:10:2a:16:f9:ce:c8:70:21:12:79:ff:94:75:80:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:AB:87:9F:EE:B9:BD:89:9E:D5:0A:27:E8:41:0E:CD:13:C2:44
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135312e302f32342d3234203d3e2039333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:70:34:b7:68:e8:f3:9e:bc:01:73:ef:8e:92:76:e3:db:
         fc:c4:9b:1b:39:d9:92:ea:5f:4e:87:78:ec:5a:2b:57:e7:6b:
         ef:44:d4:5f:7c:14:88:00:51:28:87:b2:01:cd:05:8f:f6:de:
         87:63:0b:fb:33:08:31:c5:2c:b5:dc:16:b0:9d:41:0b:a0:bb:
         ab:25:17:0a:e3:0f:0a:89:be:ce:d5:3a:d8:94:ce:15:0b:ba:
         c3:e8:2e:76:f4:59:6c:08:2d:71:a9:fa:e4:87:e6:f9:6d:b8:
         2f:50:4c:d8:00:5c:64:b9:3e:59:b6:2b:c9:52:22:a7:35:45:
         66:0a:bf:a9:a1:4b:2e:c2:73:7a:80:94:9a:ba:41:84:6f:0b:
         19:c7:e7:28:26:45:ec:d6:45:64:b5:48:9c:57:26:82:78:a9:
         84:23:03:2d:c5:f1:d4:3d:f9:90:46:cb:20:cb:ef:eb:d3:eb:
         0a:ea:1d:57:45:3c:c0:df:6b:8e:aa:11:1f:95:56:b4:18:cc:
         ad:8c:49:31:36:cb:df:fd:d9:5c:39:d9:a5:80:35:75:11:9e:
         28:8c:c5:77:8a:52:5b:65:ff:9d:f4:a0:7c:9d:5b:a8:5b:d6:
         ef:85:cf:4e:69:ee:5f:0c:1b:65:32:d5:05:29:14:3c:84:a1:
         e9:ab:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:59:18 2025 by rpki-client