This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209274.roa
File:                     AS209274.roa (raw, json)
Hash identifier:          QsRT/boRlxvIuEnJEcaJmjvXi1T3z5BNaE9wVFFkMsU=
Subject key identifier:   A1:77:D6:5C:09:9E:01:E4:35:06:AF:A2:54:E2:B3:71:4E:40:64:50
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6426504F6FFF77B636C3E08A3B37A38292B34577
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209274.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     209274
IP address blocks:        169.40.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:26:50:4f:6f:ff:77:b6:36:c3:e0:8a:3b:37:a3:82:92:b3:45:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=A177D65C099E01E43506AFA254E2B3714E406450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:5f:89:88:cf:e9:39:b1:61:87:db:44:12:
                    d4:4d:f2:4d:aa:4c:d3:97:11:d6:3a:62:5d:25:e1:
                    f3:9e:d4:ad:f8:d5:8d:98:fa:13:67:b2:f7:19:82:
                    3c:66:46:2d:c2:94:73:14:e4:24:2e:53:58:d5:55:
                    f3:d5:0b:c4:42:f8:e7:8f:78:6e:55:68:f4:78:97:
                    2e:e9:60:f5:1d:0b:ee:93:1e:4c:40:fd:76:1e:7f:
                    24:cf:22:c4:e1:fa:0c:8d:84:15:6f:1c:5a:76:8e:
                    de:5c:94:d4:5c:c0:8d:3d:3c:af:09:3b:49:12:43:
                    84:ce:5b:4f:54:c2:58:c4:7f:ef:5d:2f:51:cb:78:
                    df:29:52:c8:aa:40:e0:14:3e:fa:c7:43:63:fa:28:
                    22:9b:3d:68:07:fd:dc:5d:d7:19:2c:37:b7:09:11:
                    df:9a:e9:6b:ba:42:f7:4c:93:48:14:b6:68:5f:61:
                    6f:67:01:37:e9:c2:5b:22:7a:7e:3d:61:e8:4e:98:
                    df:bd:66:1d:4f:ea:23:49:87:eb:3b:0a:d8:96:88:
                    66:bb:b6:3e:88:17:74:7f:3a:f9:28:00:e8:81:2b:
                    a0:4d:b8:0e:97:c9:3d:a2:a2:19:ae:a6:20:78:9e:
                    a7:4d:78:10:b8:3e:54:ba:e3:f7:f4:fb:1e:2f:0c:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:77:D6:5C:09:9E:01:E4:35:06:AF:A2:54:E2:B3:71:4E:40:64:50
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS209274.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:57:38:47:e7:14:c4:a5:7a:48:fb:27:b4:09:17:dd:fa:b6:
         08:4c:f7:0e:d4:25:da:2b:9d:c8:96:4c:c8:f4:58:ac:39:d5:
         5f:17:27:f6:23:df:50:7b:c6:7f:d7:8f:e7:86:c3:b1:6b:04:
         75:27:5d:21:93:c6:44:2f:e1:9f:32:c2:8c:c1:7b:a4:ec:11:
         0a:98:27:2e:68:f4:10:9e:b3:d3:e5:22:ba:44:e5:51:69:91:
         8f:24:99:85:d7:10:a3:e2:9e:24:2d:13:4b:72:0a:f5:4a:9a:
         cb:c7:cb:df:62:0a:f3:c5:eb:16:0d:96:42:9e:32:a9:9e:4d:
         5e:f4:bf:fb:0b:01:6c:8d:ba:38:0e:28:10:08:7b:bb:68:a0:
         68:2d:a5:7d:54:3c:c6:95:0b:1c:c6:6c:3f:7b:39:4c:0d:31:
         2e:52:5a:04:2d:47:4c:8c:c6:94:d1:ce:c6:51:38:8d:4a:32:
         14:ba:bc:7d:80:18:3d:c6:9c:b2:e2:9e:3f:bd:c4:f9:62:f4:
         3a:da:83:0c:30:48:78:49:0d:11:eb:41:d6:dd:5a:f6:f4:21:
         db:00:4f:ae:e4:17:85:06:27:90:62:64:fb:cc:2e:57:e2:a3:
         af:a5:45:79:0e:60:ec:fb:02:e3:bd:3c:4c:83:3b:89:5e:68:
         c5:54:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:32 2026 by rpki-client