This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          Jyr8Ao57y86KwImS1PYtQz94vRawEqglXvd3t2rl4eg=
Subject key identifier:   2F:EB:F1:2F:2C:7A:85:36:8D:5A:B6:CB:E1:43:F7:94:65:6F:7E:93
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       55807901E7C9C8FE2ECEA08F335A08C55FA34FBC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209737.roa
Signing time:             Fri 14 Nov 2025 13:55:11 +0000
ROA not before:           Fri 14 Nov 2025 13:50:11 +0000
ROA not after:            Fri 13 Nov 2026 13:55:11 +0000
asID:                     209737
IP address blocks:        89.116.48.0/22 maxlen: 24
                          89.116.126.0/23 maxlen: 24
                          89.117.104.0/22 maxlen: 24
                          89.117.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:80:79:01:e7:c9:c8:fe:2e:ce:a0:8f:33:5a:08:c5:5f:a3:4f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 14 13:50:11 2025 GMT
            Not After : Nov 13 13:55:11 2026 GMT
        Subject: CN=2FEBF12F2C7A85368D5AB6CBE143F794656F7E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:cd:e5:65:dc:f2:b8:d3:c4:50:38:9e:27:
                    a6:1c:27:03:10:00:d0:76:eb:fd:26:44:0c:01:66:
                    99:92:3f:10:8d:06:67:ef:47:c7:08:29:0e:2f:06:
                    79:7d:df:a6:18:f9:fa:d2:98:e3:6f:ad:a4:1e:a4:
                    a7:20:c1:bd:6c:25:33:08:99:d2:e8:11:d5:15:7d:
                    20:c1:90:f4:14:cb:80:42:3b:1c:b7:33:e4:b1:4d:
                    ca:de:6b:9d:8e:9f:c9:d0:10:e2:5f:98:67:3f:af:
                    07:65:a4:78:af:e8:66:02:e1:52:78:6e:44:6e:e7:
                    ee:7e:e1:d0:94:e6:0f:fe:20:aa:34:d9:ae:59:29:
                    a1:ce:ff:1f:d1:27:bf:e6:f6:a3:84:0e:98:ec:f6:
                    95:01:58:41:88:40:88:b5:dc:e6:c6:6f:1f:64:1c:
                    24:39:db:b4:7b:e5:91:6f:b4:3d:fe:30:d5:cb:0e:
                    ad:0b:fd:ab:8b:b1:30:19:03:37:91:0b:59:f3:7f:
                    bf:2f:63:f8:79:3e:23:3b:68:67:7f:72:d0:ce:b7:
                    65:6b:31:74:92:a9:3e:d5:c2:88:4e:85:9b:71:2f:
                    d3:46:b9:2e:1d:9d:a6:7c:95:6d:05:fd:e5:b6:ef:
                    5b:fa:d6:de:21:34:8a:9d:c0:71:69:bb:2b:d5:4e:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:F1:2F:2C:7A:85:36:8D:5A:B6:CB:E1:43:F7:94:65:6F:7E:93
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22
                  89.116.126.0/23
                  89.117.104.0/22
                  89.117.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:95:f2:a2:d1:e4:96:32:2b:c7:ba:7f:5f:c8:b4:63:3b:3b:
         49:ac:6a:be:d8:72:68:34:e3:f6:62:87:0a:5c:5c:5f:4c:0d:
         72:26:34:7a:93:9c:c7:67:ad:a0:aa:02:09:dc:6c:2b:58:fe:
         c1:2e:6a:34:54:81:66:a3:dc:64:21:18:8f:9c:1f:d6:96:df:
         a5:00:3a:5c:a9:72:66:74:f1:e9:e5:54:cc:c5:bf:9e:61:d1:
         df:b6:0d:ef:b8:3b:3f:2f:1d:9b:b3:1f:8b:d8:4f:46:a6:e7:
         3d:4d:a0:47:a8:40:e3:0e:6b:e7:b6:e4:10:67:e5:de:1f:9e:
         59:77:a9:e4:27:ce:b8:4f:1c:cc:dd:2b:a7:7e:b7:3a:53:68:
         80:a8:ab:b9:27:02:18:4f:8e:20:94:3e:4c:c2:12:73:5e:2c:
         89:7b:85:06:3b:c8:e1:c3:94:9c:a0:59:ba:ea:8d:aa:8c:50:
         a7:51:64:ac:37:a6:56:46:76:83:2c:91:f9:12:7e:77:a6:c3:
         34:45:95:52:53:e7:fe:d3:3b:dc:31:c4:c8:52:b0:6f:f4:d9:
         16:78:60:48:6f:8c:8a:f9:80:ec:1f:1e:e7:b8:c0:d3:07:45:
         fa:48:b3:63:7e:be:fd:6b:6f:d7:43:bc:9d:c0:ed:99:9d:01:
         ab:43:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:44 2025 by rpki-client