This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          CDolWn1VJplQsQCY6X0R7SErgDafJibskAqBVTzUmoU=
Subject key identifier:   DA:31:07:3F:83:A8:AF:10:8C:C1:77:D9:C6:15:C9:48:96:25:A4:17
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       37E6CB90D7E82E6E730FF9C886DA2FB245E1B29A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     174
IP address blocks:        169.40.108.0/24 maxlen: 24
                          169.40.113.0/24 maxlen: 24
                          169.40.118.0/24 maxlen: 24
                          169.40.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e6:cb:90:d7:e8:2e:6e:73:0f:f9:c8:86:da:2f:b2:45:e1:b2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=DA31073F83A8AF108CC177D9C615C9489625A417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:bf:3f:db:e4:fe:5e:1d:85:28:4c:5c:af:
                    a0:4e:51:28:8d:e0:2f:fe:6e:ba:f8:e4:8d:27:b1:
                    c2:44:5f:76:80:9e:a3:1e:25:09:d4:3c:aa:45:7f:
                    ff:ae:95:bf:38:c6:96:91:77:44:13:6c:05:0e:2c:
                    25:93:73:56:d4:a3:7f:cd:49:0b:b0:d7:84:b8:19:
                    86:f1:71:cd:ad:a8:5b:56:89:c0:a9:e1:4e:21:a8:
                    96:da:99:b2:2a:83:2b:34:1e:2e:ef:4c:1d:06:78:
                    b9:ac:7e:6b:4a:f9:b0:c6:b7:19:11:76:fa:0a:86:
                    0f:bc:d8:ff:8d:75:48:05:13:d1:69:a6:02:7e:fb:
                    c5:da:6e:74:21:a5:c2:3c:59:38:65:4a:42:2c:de:
                    8d:ed:00:3f:10:9e:68:7f:03:b6:dc:3f:d5:65:85:
                    04:fd:4a:09:e3:dc:34:dc:ab:ba:b6:b8:74:7f:1d:
                    bd:9a:f3:34:3f:cd:8b:0a:47:e5:b9:46:90:3f:44:
                    f7:c4:ce:d3:39:36:38:90:65:f5:36:05:1f:fe:ab:
                    db:77:4c:19:40:4f:49:05:98:24:a3:e1:f1:49:de:
                    d3:77:9b:76:aa:be:a3:a0:ef:c2:20:2d:ee:ef:71:
                    c0:e8:5b:07:65:9c:f5:ba:ea:a8:c7:c7:e7:49:40:
                    c7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:07:3F:83:A8:AF:10:8C:C1:77:D9:C6:15:C9:48:96:25:A4:17
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.108.0/24
                  169.40.113.0/24
                  169.40.118.0/24
                  169.40.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:2f:d5:52:a6:56:27:b7:15:82:b5:49:84:e7:b2:4e:2a:
         01:dc:03:bf:a6:73:e3:fb:0d:54:0a:3a:3e:0c:24:4d:22:18:
         f7:2b:08:ca:f7:8b:9b:29:88:b1:e3:b9:87:d1:68:48:88:20:
         e3:dd:24:50:b5:14:f0:af:65:c0:b0:41:11:9b:3e:48:d6:34:
         76:a8:ff:d0:21:12:1a:7c:5d:2a:16:66:9a:ae:58:73:16:a7:
         54:cf:0e:11:80:9d:3e:09:41:7b:02:95:0f:79:83:95:0b:22:
         2b:16:8f:8f:b2:4d:2e:1b:7f:25:8c:6c:bd:ae:f1:80:03:a9:
         65:56:ea:13:b3:c6:8f:27:9d:30:e3:10:c6:46:6a:31:11:f8:
         cc:41:a0:f6:05:4f:2c:e6:83:df:65:28:80:ed:42:a9:24:4c:
         2d:9d:78:bd:15:71:8e:b1:e2:54:c5:7e:48:b5:06:81:0d:02:
         4a:27:20:50:6e:96:9f:f5:58:b6:3c:76:d8:4a:6b:3a:f2:58:
         d9:7f:49:c6:85:a5:24:13:ad:f3:d7:6e:ce:e1:4b:88:a9:6a:
         86:aa:8b:71:a0:b0:00:69:31:fd:b6:21:08:92:46:bd:a1:9d:
         0f:9a:4f:04:c9:dc:de:09:55:ac:9a:6d:84:84:30:0e:2f:23:
         a8:f7:4c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:34 2026 by rpki-client