This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          OZzJ4gjGju/Yxg5GZlePo1xClSpQEJ+FU6WBA6vsZTw=
Subject key identifier:   DB:8E:E9:35:55:B0:41:B7:A3:6D:C4:38:71:FF:B9:78:50:21:B2:BF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6804904210A06D2DFBDA32D64FE065D71DABFAAD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
Signing time:             Fri 16 Jan 2026 00:20:32 +0000
ROA not before:           Fri 16 Jan 2026 00:15:32 +0000
ROA not after:            Fri 15 Jan 2027 00:20:32 +0000
asID:                     9009
IP address blocks:        169.40.130.0/23 maxlen: 24
                          169.40.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:04:90:42:10:a0:6d:2d:fb:da:32:d6:4f:e0:65:d7:1d:ab:fa:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:32 2026 GMT
            Not After : Jan 15 00:20:32 2027 GMT
        Subject: CN=DB8EE93555B041B7A36DC43871FFB9785021B2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:3f:b4:ee:e2:7a:b2:73:26:f5:e7:2a:5f:
                    9f:7b:36:a4:05:ae:1e:54:df:c6:bc:83:39:05:31:
                    95:7e:fa:62:7d:54:8c:35:db:c7:9a:4b:8b:ac:4a:
                    a9:d5:8f:37:54:2a:a5:f2:8c:6b:45:d2:b5:97:e6:
                    f1:70:dc:3b:f7:14:32:cc:c7:8d:12:71:cd:21:15:
                    35:db:c4:19:de:79:66:b4:fb:99:ec:c6:48:40:ba:
                    6e:4f:38:96:20:a6:56:5c:ce:b1:6d:8c:0e:3a:78:
                    35:97:97:7f:29:d5:5b:15:b2:65:0d:46:c5:5a:06:
                    bc:f5:96:b5:2c:34:d2:85:46:c9:66:52:3c:08:2e:
                    76:20:2b:bd:00:54:99:0b:ff:b0:cb:b1:85:e4:b0:
                    df:a9:f5:c9:1a:e4:c5:56:b5:b5:74:fe:d9:83:19:
                    11:39:38:2e:62:0f:78:bf:83:8e:4f:c4:25:1f:2b:
                    40:0b:4d:f2:d5:50:21:e7:7f:c3:62:4d:3f:e5:02:
                    fa:42:dc:27:58:5a:b9:b1:5b:3f:53:b4:86:04:b8:
                    d5:00:5a:70:4f:3f:b4:6c:0f:78:a7:71:75:62:47:
                    42:5c:9e:42:c1:af:bb:70:2a:d8:8f:91:cb:f9:2e:
                    f9:e8:90:10:ce:ad:e1:2d:76:76:18:0c:2a:78:01:
                    ab:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8E:E9:35:55:B0:41:B7:A3:6D:C4:38:71:FF:B9:78:50:21:B2:BF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.130.0/23
                  169.40.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:71:f9:9a:fa:e0:31:da:f5:03:5a:ea:ac:7f:be:04:a9:
         2f:dd:4e:cf:4a:62:1b:7d:87:c9:8f:40:3b:d9:dd:e3:99:60:
         a7:2d:ce:4e:2e:3b:50:e9:f8:dd:3b:20:21:7e:36:d8:3e:d8:
         9c:cd:64:a3:54:36:47:1f:aa:7b:a5:c1:43:e8:24:5f:6a:3b:
         da:dd:71:34:13:0f:22:04:7d:48:81:02:76:dc:8c:a4:99:62:
         24:3b:aa:10:f1:af:7c:93:63:24:c4:fa:5a:67:7e:4c:73:a1:
         60:d8:c0:0d:7a:02:41:77:b0:b2:41:48:6b:da:d7:22:af:fb:
         80:2a:bf:23:68:e8:3a:52:7d:6e:b1:f6:1d:0b:cb:b8:f5:9c:
         68:7b:d1:83:69:53:74:e9:96:b9:85:78:e7:9a:22:27:df:a1:
         57:93:c3:dd:40:d2:bf:8a:69:7b:c5:6a:04:1b:21:2b:a4:ee:
         0b:a9:79:cc:c3:3d:61:9d:7a:8b:54:5d:0c:b6:dd:58:f8:df:
         b6:cb:0a:4e:18:59:e1:fa:f4:bf:31:be:6c:09:b3:41:e0:c0:
         5c:7b:f0:0c:8f:7f:78:e3:c3:96:df:32:33:b3:50:47:c1:24:
         fd:42:c4:f0:04:3d:0d:d7:9a:cd:19:bd:23:8b:7a:12:99:67:
         fa:cf:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:31 2026 by rpki-client