This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          1m4cBKIBjwRBDjN0ffZp7s/+jrXDjOxmcwgn9giMfOY=
Subject key identifier:   D8:B1:06:33:18:88:B2:C5:43:15:4C:9F:15:8E:D1:CB:9C:E6:D3:03
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5D52E74FB4C4B22A6935F330A78375EA5101614F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     5650
IP address blocks:        169.40.129.0/24 maxlen: 24
                          169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.146.0/23 maxlen: 24
                          169.40.148.0/23 maxlen: 24
                          169.40.156.0/23 maxlen: 24
                          169.40.164.0/22 maxlen: 24
                          169.40.168.0/22 maxlen: 24
                          169.40.172.0/22 maxlen: 24
                          169.40.176.0/22 maxlen: 24
                          169.40.180.0/22 maxlen: 24
                          169.40.184.0/22 maxlen: 22
                          169.40.188.0/22 maxlen: 24
                          169.40.200.0/22 maxlen: 22
                          169.40.204.0/22 maxlen: 22
                          169.40.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:52:e7:4f:b4:c4:b2:2a:69:35:f3:30:a7:83:75:ea:51:01:61:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=D8B106331888B2C543154C9F158ED1CB9CE6D303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:2f:40:af:96:6d:e5:40:b0:57:2f:59:31:
                    1d:f6:d2:74:2a:97:de:06:1f:a3:e1:fc:fe:66:d7:
                    dd:ea:6f:a9:82:cd:f1:97:64:88:5e:46:9b:5d:09:
                    57:96:fd:96:75:df:ea:3c:61:e3:e0:13:bf:14:f6:
                    55:d9:f0:db:e0:8a:6e:57:8c:b1:df:ae:f3:47:94:
                    b7:91:03:69:8d:ea:2a:16:0e:c6:fc:59:b4:9d:37:
                    24:78:2a:7d:1d:d3:7e:cb:7b:a7:e2:c3:0e:0a:5f:
                    ac:ad:6b:6f:3f:58:a8:82:a6:09:e4:60:13:ed:cf:
                    4a:2c:c9:9a:d1:d6:a9:86:5a:6f:1c:ca:61:81:57:
                    8a:07:b9:ce:5c:8b:a9:2a:8d:6d:25:8c:06:2f:87:
                    38:f1:b0:2c:c3:6d:44:97:74:b6:21:54:51:e1:33:
                    c1:b8:c0:08:80:42:df:ab:f0:ed:15:f0:75:d9:3b:
                    ef:03:81:37:4e:07:01:b8:f4:6e:49:99:d0:4b:29:
                    47:3a:8d:c5:02:e0:07:de:3f:b3:7e:77:41:32:b9:
                    4a:2f:8c:61:a4:88:88:41:d0:9e:40:23:7a:94:f0:
                    3b:de:72:5e:bc:da:9f:09:59:51:c3:8a:48:6b:3b:
                    34:18:a5:bc:48:93:52:51:c8:a0:5a:27:77:3e:65:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B1:06:33:18:88:B2:C5:43:15:4C:9F:15:8E:D1:CB:9C:E6:D3:03
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.129.0/24
                  169.40.144.0-169.40.149.255
                  169.40.156.0/23
                  169.40.164.0-169.40.191.255
                  169.40.200.0/21
                  169.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:66:62:32:08:7a:ff:38:20:6e:c1:c1:7e:9c:8c:ca:01:
         5f:b2:7b:6e:3f:ac:7d:c4:b1:84:75:87:0d:40:29:4d:04:c0:
         42:7b:81:ff:ca:f0:e1:97:b2:8b:95:4a:99:35:02:af:7a:c2:
         72:62:55:e0:4e:eb:17:00:23:d6:eb:38:cf:ff:df:e6:e1:85:
         13:31:85:33:f5:31:19:f6:82:d0:b6:f9:c9:53:c2:4f:4b:a4:
         f9:b3:61:ad:00:a2:67:24:36:94:c2:3f:17:c2:88:4c:fa:90:
         85:9d:ee:7e:55:dd:02:52:0c:6b:53:2a:65:aa:ee:1e:07:48:
         77:a2:59:c1:bb:75:33:ea:78:bb:7f:f7:0a:d1:04:c2:2d:20:
         f4:3e:5f:eb:c2:39:34:12:4c:ee:76:21:ca:ca:9b:88:ab:75:
         c8:08:98:14:5e:08:7c:b4:04:e0:b8:67:07:9a:f0:a1:1a:ca:
         74:bd:37:c8:21:55:50:03:22:47:3b:e2:eb:4c:f6:22:13:5d:
         95:f8:4b:1d:0b:61:84:11:f2:46:84:09:4c:df:05:7c:db:3d:
         70:34:40:67:4d:c0:9d:48:20:88:bf:35:c6:c3:80:f5:5f:06:
         25:87:7f:42:b2:76:b4:7b:63:04:c3:f8:5f:d6:ca:81:55:e6:
         22:4c:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:32 2026 by rpki-client