This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa
File:                     AS17497.roa (raw, json)
Hash identifier:          8P+gM9t/A0K289W8SaFleZSY0M3VwfHDtQWJionAulk=
Subject key identifier:   59:B6:A9:83:90:59:94:B2:F7:C8:9F:43:C0:51:32:0E:84:A7:49:11
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       309D7A465224917014F3BEC54382DC5B3C3A982A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa
Signing time:             Sat 24 Jan 2026 07:39:07 +0000
ROA not before:           Sat 24 Jan 2026 07:34:07 +0000
ROA not after:            Sat 23 Jan 2027 07:39:07 +0000
asID:                     17497
IP address blocks:        89.116.184.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.117.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:7a:46:52:24:91:70:14:f3:be:c5:43:82:dc:5b:3c:3a:98:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 24 07:34:07 2026 GMT
            Not After : Jan 23 07:39:07 2027 GMT
        Subject: CN=59B6A983905994B2F7C89F43C051320E84A74911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:3e:c9:a5:d5:1d:cc:44:66:ab:81:14:8b:
                    1f:cd:da:e9:4f:6d:ca:2a:3d:8f:38:b1:5e:fd:3b:
                    bc:40:b8:2f:ca:ce:58:ae:f7:34:94:1f:c9:5b:01:
                    6b:6b:f0:94:9d:c2:12:82:e6:04:c5:4f:67:17:87:
                    be:81:31:68:d2:ce:3d:c9:f5:f3:a8:60:42:b4:60:
                    57:e3:d7:86:d9:4d:98:a8:9c:2f:c9:2c:94:65:d5:
                    01:61:94:43:8f:88:6e:21:6b:66:1b:df:6d:0e:0c:
                    ec:6b:d6:b5:3d:88:21:2c:f5:c5:40:4d:b7:5f:ea:
                    32:21:b8:f1:f4:35:b9:35:0b:d8:f9:68:3f:38:0c:
                    09:6a:78:0c:60:62:fb:30:67:4c:b9:a2:45:c7:e8:
                    a8:52:4d:61:2c:91:58:09:94:a0:10:cd:3d:a2:db:
                    f6:ea:67:5d:35:54:e2:7f:1b:2e:ba:35:b2:28:2e:
                    97:c2:db:5a:05:72:d6:e9:56:cd:e2:32:1a:92:f2:
                    fb:62:8e:77:87:73:1e:07:e3:ce:87:88:46:2e:5e:
                    dc:9f:e7:dc:2c:5b:25:48:d6:b3:ae:d1:6d:0c:9f:
                    88:ec:13:42:3e:98:77:66:24:5c:1b:6d:0c:ee:fd:
                    e8:35:b5:da:2f:34:52:29:a5:f2:40:5c:5e:3a:24:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:A9:83:90:59:94:B2:F7:C8:9F:43:C0:51:32:0E:84:A7:49:11
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS17497.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.184.0/24
                  89.116.252.0/24
                  89.117.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:af:a5:31:cf:4a:4d:98:04:cb:2f:a9:93:e7:45:81:eb:
         a6:c3:16:03:cc:e4:b2:e7:ea:54:b5:a8:e4:94:79:1f:27:02:
         f3:ea:5c:fa:04:62:4d:0a:35:9f:43:1e:fa:c6:12:5e:9f:ba:
         f6:ca:10:fd:f4:cd:6d:b5:63:3b:ad:a9:d5:8a:dd:fe:9c:ba:
         77:35:85:92:b3:e4:09:91:26:4b:25:93:10:1d:a8:64:89:8f:
         93:b0:8b:fe:73:ea:45:81:6e:1a:a0:78:8e:df:10:b4:ba:c0:
         3a:ce:44:5d:b2:c6:7a:e5:6f:5f:d8:15:95:3e:b0:16:63:a3:
         37:97:bf:5d:c0:96:0a:1d:a9:14:68:81:48:6b:f7:c3:d5:75:
         c0:e7:28:f3:00:3c:46:28:db:15:57:e7:b9:47:01:8e:d0:40:
         c6:62:7b:fb:80:b2:00:bb:26:54:41:7c:6f:d6:66:7b:c1:70:
         d3:8a:85:2e:a1:45:72:8f:d9:1e:13:50:d9:2b:fc:a9:4e:e1:
         d8:5a:c9:e7:2a:c9:eb:b9:a0:22:92:b6:a2:a1:86:98:87:2a:
         d6:cc:41:38:cb:a7:0b:c9:6d:8c:48:7c:9c:76:5c:81:5e:5b:
         0e:ae:6c:26:1f:b9:92:21:75:34:bb:f7:f5:ee:e6:25:6e:f8:
         a5:52:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:27 2026 by rpki-client