This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49608.roa
File:                     AS49608.roa (raw, json)
Hash identifier:          IO/WtJc5Peca05rGDZ7nEV2FaLk7pVIf9/U7rIJsWw4=
Subject key identifier:   4B:6B:99:72:29:AA:B7:26:F2:A7:4D:AA:D0:3E:C8:C0:51:DA:E1:A8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       54B061CE7B2E1E2BD1AFA38E2FDEA4B438677042
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49608.roa
Signing time:             Sat 17 Jan 2026 10:29:52 +0000
ROA not before:           Sat 17 Jan 2026 10:24:52 +0000
ROA not after:            Sat 16 Jan 2027 10:29:52 +0000
asID:                     49608
IP address blocks:        169.40.107.0/24 maxlen: 24
                          169.40.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b0:61:ce:7b:2e:1e:2b:d1:af:a3:8e:2f:de:a4:b4:38:67:70:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 17 10:24:52 2026 GMT
            Not After : Jan 16 10:29:52 2027 GMT
        Subject: CN=4B6B997229AAB726F2A74DAAD03EC8C051DAE1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:60:79:ee:0b:ba:9d:36:8f:07:65:9f:f0:
                    ce:f8:c1:fc:0f:7c:7c:8c:28:ac:cc:2c:e4:91:f4:
                    04:5b:de:d1:03:1e:f3:f8:68:25:d8:f7:0a:19:43:
                    77:49:cb:08:76:08:d0:e1:e4:e0:61:86:93:b0:f1:
                    8c:c9:2f:bc:90:61:eb:bb:2d:6d:75:da:60:9a:cf:
                    2f:bb:a6:55:a3:df:9b:58:9b:e6:7d:a7:a4:7e:93:
                    d1:1d:f9:e6:d9:15:6d:a2:0a:ea:10:c2:e4:ca:47:
                    a3:7b:db:b5:67:41:a6:06:24:22:34:1d:16:21:5f:
                    40:47:78:13:f9:86:80:30:de:54:ea:d4:a4:a8:27:
                    1c:7e:be:0e:dd:cd:66:a6:25:67:b5:87:13:ef:68:
                    c5:8b:aa:38:8c:bd:4e:36:c4:9f:65:53:d0:18:3b:
                    32:d5:00:57:69:00:7d:58:0d:0c:b9:9d:34:8a:fe:
                    ee:2e:0b:7a:f6:70:85:36:7c:fd:cf:67:dc:39:ea:
                    28:4f:4e:cc:78:4a:3f:4e:d0:f3:1d:d4:27:f2:2a:
                    c8:7f:31:de:67:48:7c:7e:89:8b:50:a4:86:f1:49:
                    d6:1a:18:0f:fe:16:79:8a:b8:56:4c:69:11:40:d0:
                    0d:31:53:8f:fe:6b:d9:2e:07:33:f1:d3:70:4e:37:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6B:99:72:29:AA:B7:26:F2:A7:4D:AA:D0:3E:C8:C0:51:DA:E1:A8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49608.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.107.0/24
                  169.40.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:16:c0:75:84:62:8f:a5:cf:e1:ed:3f:2a:aa:32:15:b8:
         2a:e1:c6:3c:51:59:cd:76:13:4f:21:78:7d:a2:38:d1:0b:4a:
         0c:ef:f1:1e:1a:cc:26:48:df:d8:2f:3a:e5:94:9b:06:40:68:
         07:46:5a:37:fc:64:c2:16:44:ec:43:cc:9f:53:ca:e8:8f:de:
         6a:9f:3a:2f:b5:f2:d3:e9:68:13:7e:d9:83:c0:67:04:0d:b0:
         01:4b:b4:d3:47:b3:db:c5:fa:d7:c2:43:27:15:8d:db:7a:4e:
         7c:d4:f5:de:46:80:9f:b6:fd:71:44:89:7e:ce:82:f5:20:0d:
         41:a2:cc:00:20:a9:e6:f1:78:80:ee:86:ea:0f:af:16:c7:f7:
         28:7c:37:07:90:95:69:03:cd:4b:8a:32:68:0a:a4:7f:0f:bd:
         5f:29:4a:89:74:47:98:c5:de:40:06:b3:90:e7:21:57:0a:7e:
         1b:76:dc:99:fe:21:86:a8:78:79:ac:d2:44:a9:4f:f7:bc:95:
         0e:e0:29:f2:93:17:18:82:c5:cb:00:de:8e:1e:f7:eb:ea:47:
         0c:05:50:ed:7f:61:06:6e:58:8c:9c:2e:36:55:91:50:7e:8d:
         4f:45:65:fb:41:db:1a:1d:1c:c1:0a:50:84:3e:47:90:6c:bb:
         9e:62:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:32 2026 by rpki-client