This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9457.roa
File:                     AS9457.roa (raw, json)
Hash identifier:          zyWgPI/ZEzgt2k2aiohHzo6zy3pQxA7d8PRq65b3Mvw=
Subject key identifier:   7A:17:AF:DF:82:30:13:E3:5C:8C:F6:DA:52:FE:C5:21:9C:9D:48:6A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       352866614036DD0D6C764AFFC8BDB16E48497552
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9457.roa
Signing time:             Fri 16 Jan 2026 00:20:33 +0000
ROA not before:           Fri 16 Jan 2026 00:15:33 +0000
ROA not after:            Fri 15 Jan 2027 00:20:33 +0000
asID:                     9457
IP address blocks:        169.40.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:28:66:61:40:36:dd:0d:6c:76:4a:ff:c8:bd:b1:6e:48:49:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jan 16 00:15:33 2026 GMT
            Not After : Jan 15 00:20:33 2027 GMT
        Subject: CN=7A17AFDF823013E35C8CF6DA52FEC5219C9D486A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:47:a7:07:2d:81:f4:93:f2:48:4f:21:b9:
                    71:e8:12:fb:18:ba:c0:10:c3:df:c5:41:12:82:5c:
                    52:50:9e:fd:d1:f0:89:cc:b5:e4:12:60:b9:c0:67:
                    69:92:f4:57:28:f1:c4:0c:50:b3:c1:f7:8e:63:cd:
                    a6:fd:f4:c5:97:14:62:6f:c4:66:16:0d:3d:c9:a4:
                    b8:40:8e:e9:e0:18:f4:1a:fd:c6:41:f7:b0:d3:38:
                    64:e6:80:7c:d8:c9:a1:bd:ec:8f:1e:cd:4a:22:2b:
                    34:ee:0f:4b:c7:19:a0:71:13:d4:ec:3f:14:88:10:
                    96:71:45:e7:89:7a:c1:c4:c8:fa:e8:20:cc:cc:b5:
                    3a:32:25:72:7a:94:3d:c3:ed:8a:c0:72:6b:73:fd:
                    3b:68:bb:5f:e8:b5:e9:9a:94:03:8a:88:47:de:d1:
                    62:42:3f:76:62:36:52:6f:66:56:4c:49:cc:8b:94:
                    63:74:3a:66:3f:c1:19:43:3d:37:cd:a3:70:2f:f7:
                    be:4a:81:25:72:ef:e8:9b:78:c5:29:da:3f:95:41:
                    d6:06:a3:b2:ec:21:87:5b:19:13:dc:00:e2:22:11:
                    0a:12:f6:25:a4:65:4e:3a:c0:96:69:58:9f:ad:e0:
                    11:bb:a2:e2:d7:76:ef:1d:e7:99:1a:e3:7f:04:44:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:17:AF:DF:82:30:13:E3:5C:8C:F6:DA:52:FE:C5:21:9C:9D:48:6A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:28:b4:7b:d8:73:79:17:c7:3e:3f:ed:6d:9d:c3:56:94:
         2e:4b:a1:1e:1d:36:9c:79:55:72:f5:31:fe:bf:75:09:03:f1:
         92:2e:d8:5c:90:6f:aa:4d:ef:c1:35:27:c7:3f:07:4c:a4:d7:
         cb:8c:2e:1e:8a:9f:b2:2b:a1:28:a0:a7:b2:8c:8b:7f:ec:e5:
         9f:0c:f2:96:df:ad:e7:f2:fa:ec:15:1b:c7:6d:41:c8:af:85:
         81:d7:14:e4:77:f3:4e:b8:fe:24:d0:06:96:13:73:13:a6:22:
         03:27:3f:52:05:ad:a2:7e:c6:34:d1:f8:dc:08:6b:b7:79:e6:
         31:71:d1:fb:7c:1a:e6:45:99:8c:d0:ba:87:c7:99:19:01:32:
         57:41:72:6c:44:53:05:41:22:6c:94:35:04:46:a4:9c:ef:24:
         3a:ad:21:e3:44:36:1e:e7:e6:02:0f:3e:43:7e:24:eb:d0:ca:
         78:6a:e5:11:0b:8d:c2:3a:a0:5a:5e:5a:33:b5:73:e7:65:1c:
         29:79:48:b2:9a:a0:e6:44:03:de:d2:e4:7b:b9:17:f8:77:7d:
         3a:fd:f7:56:1c:b9:7c:94:1d:8f:53:36:8a:27:ef:c9:86:94:
         9e:38:03:25:15:90:86:ad:a1:69:52:da:53:75:1b:b0:41:48:
         e3:82:c6:d5
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUNShmYUA23Q1sdkr/yL2xbkhJdVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAxMTYwMDE1MzNaFw0yNzAxMTUwMDIwMzNaMDMxMTAvBgNV
BAMTKDdBMTdBRkRGODIzMDEzRTM1QzhDRjZEQTUyRkVDNTIxOUM5RDQ4NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBkenBy2B9JPySE8huXHoEvsY
usAQw9/FQRKCXFJQnv3R8InMteQSYLnAZ2mS9Fco8cQMULPB945jzab99MWXFGJv
xGYWDT3JpLhAjungGPQa/cZB97DTOGTmgHzYyaG97I8ezUoiKzTuD0vHGaBxE9Ts
PxSIEJZxReeJesHEyProIMzMtToyJXJ6lD3D7YrAcmtz/Ttou1/otemalAOKiEfe
0WJCP3ZiNlJvZlZMScyLlGN0OmY/wRlDPTfNo3Av975KgSVy7+ibeMUp2j+VQdYG
o7LsIYdbGRPcAOIiEQoS9iWkZU46wJZpWJ+t4BG7ouLXdu8d55ka438ERJ0RAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUehev34IwE+NcjPbaUv7FIZydSGowHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzk0NTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKpKGAwDQYJKoZIhvcNAQEL
BQADggEBAINfKLR72HN5F8c+P+1tncNWlC5LoR4dNpx5VXL1Mf6/dQkD8ZIu2FyQ
b6pN78E1J8c/B0yk18uMLh6Kn7IroSigp7KMi3/s5Z8M8pbfrefy+uwVG8dtQciv
hYHXFOR38064/iTQBpYTcxOmIgMnP1IFraJ+xjTR+NwIa7d55jFx0ft8GuZFmYzQ
uofHmRkBMldBcmxEUwVBImyUNQRGpJzvJDqtIeNENh7n5gIPPkN+JOvQynhq5REL
jcI6oFpeWjO1c+dlHCl5SLKaoOZEA97S5Hu5F/h3fTr991YcuXyUHY9TNoon78mG
lJ44AyUVkIatoWlS2lN1G7BBSOOCxtU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:27 2026 by rpki-client