This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa
File:                     AS48300.roa (raw, json)
Hash identifier:          zw7aL92ixoM6IamZYrJoAAefvXTt3wNiauo2qr/ITP8=
Subject key identifier:   95:4F:AA:BE:0D:34:1D:AA:9A:81:97:EE:81:FC:8A:2E:36:A2:E3:5A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       710F3E959553A22C0B10B486B2BC09BF3CAA0417
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     48300
IP address blocks:        169.40.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0f:3e:95:95:53:a2:2c:0b:10:b4:86:b2:bc:09:bf:3c:aa:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=954FAABE0D341DAA9A8197EE81FC8A2E36A2E35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:78:cd:19:ac:ec:c7:75:cb:75:67:c5:84:
                    90:1b:4f:8c:e9:0a:6f:ef:3e:54:34:1c:c7:32:e0:
                    ea:84:bc:b3:17:07:3a:4d:35:79:9e:aa:b5:43:3e:
                    ac:f6:af:28:64:c6:7c:db:6b:65:16:5e:39:f6:24:
                    8c:e5:ba:1b:45:8b:e3:85:9a:b7:a3:43:96:c0:de:
                    bd:b3:a6:c8:06:68:c6:69:cc:47:26:e8:a2:f5:d3:
                    8c:54:08:26:6f:35:bd:fd:d4:5c:c0:0b:39:3b:ee:
                    9e:df:23:56:f6:93:b6:ad:4f:52:a1:8a:9d:7f:c2:
                    22:ef:51:c4:3c:9c:b8:44:f1:80:cb:2c:0b:48:f9:
                    7c:49:9d:03:ed:40:6f:b9:b0:29:82:c9:c7:00:ce:
                    2f:b6:a0:bf:f9:6f:97:20:4f:fb:7f:16:80:66:a7:
                    83:3e:04:3e:3c:52:88:e0:80:04:1b:38:8f:c0:ef:
                    ff:0f:ea:f5:10:66:47:46:8b:dd:ea:66:ff:dd:56:
                    92:1d:b1:0b:8d:6d:6e:77:48:37:7a:01:0b:df:a6:
                    9d:f4:65:5b:1d:50:8f:db:13:9e:d9:36:a8:20:17:
                    52:54:71:cb:6a:5c:bd:1c:36:8a:bc:6a:9c:8a:eb:
                    4f:f6:33:2e:04:5e:e3:c9:d7:1d:ab:3a:fd:0d:b3:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:AA:BE:0D:34:1D:AA:9A:81:97:EE:81:FC:8A:2E:36:A2:E3:5A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS48300.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:f1:9c:e6:3f:0e:dd:00:91:71:fd:55:60:cd:9a:48:7f:
         e7:28:04:7b:4b:83:d2:3c:da:17:3c:da:68:d7:e2:84:67:f3:
         ad:0d:95:6d:59:70:85:a7:c6:a3:24:35:e5:ce:e7:98:95:2b:
         24:76:35:08:c2:24:65:47:e0:c9:e5:fb:5c:76:02:53:f6:85:
         1a:fe:c2:5a:d9:c9:2f:7f:02:a1:43:ee:5e:ca:04:f8:f3:87:
         f8:60:89:fb:55:71:3d:00:81:7d:92:db:e5:6b:3a:05:ee:12:
         69:66:88:36:1f:ea:75:3f:a8:36:16:44:de:70:4f:0f:85:5e:
         b7:12:3a:18:91:df:95:70:e2:74:e3:72:b6:d9:02:eb:02:f7:
         63:a2:45:66:16:e7:1b:6f:11:e8:ea:77:6c:a0:ee:6f:c3:33:
         68:32:a2:01:a1:53:b4:4d:c0:6b:34:32:43:9b:3d:98:08:5e:
         07:87:9a:e5:6b:fc:90:8a:90:0b:82:aa:f6:d3:dc:2c:ed:65:
         90:f5:ef:3c:15:91:d0:ee:a3:56:d4:c2:bc:9b:84:72:01:e8:
         fe:cf:68:0f:cf:f2:a2:a9:2f:a9:28:7f:b1:e4:e8:38:a2:fc:
         a4:a8:0c:a1:fe:9b:a6:9d:cc:3c:13:29:bb:78:50:d1:87:6d:
         ef:31:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:30 2026 by rpki-client