This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          N+pzX+gLR1febN/Sf0wV4OoJn9WicRQvRTBe1XAWS+I=
Subject key identifier:   59:EE:81:1F:F1:17:BF:EC:A4:AC:5B:50:BA:8D:4B:FF:7C:30:47:2A
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       19288951E96AF5AB8423F21822CD626E814549A5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa
Signing time:             Fri 14 Nov 2025 13:55:11 +0000
ROA not before:           Fri 14 Nov 2025 13:50:11 +0000
ROA not after:            Fri 13 Nov 2026 13:55:11 +0000
asID:                     211585
IP address blocks:        89.116.48.0/22 maxlen: 24
                          89.117.104.0/22 maxlen: 24
                          89.117.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:28:89:51:e9:6a:f5:ab:84:23:f2:18:22:cd:62:6e:81:45:49:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 14 13:50:11 2025 GMT
            Not After : Nov 13 13:55:11 2026 GMT
        Subject: CN=59EE811FF117BFECA4AC5B50BA8D4BFF7C30472A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:21:2a:4e:79:97:14:34:7e:39:08:16:43:
                    55:60:03:9f:a3:ef:13:0b:74:1c:0d:70:58:0a:c4:
                    94:cf:83:7d:4d:47:c9:a3:82:f7:5d:e5:0b:6c:c1:
                    9d:7d:87:b1:03:e3:9d:47:3e:79:70:7d:32:e4:2d:
                    f2:8d:6d:ae:a5:71:45:58:1d:45:e7:eb:57:2d:90:
                    d5:21:1c:0a:bf:91:e6:2e:19:47:45:0c:90:c4:e7:
                    00:de:57:fa:c1:53:84:08:f7:7e:95:81:85:f1:2a:
                    5a:79:9d:0f:b2:86:91:53:25:fa:2b:ee:c2:a8:8b:
                    46:11:7d:2d:a4:81:93:fa:8a:9e:a7:7a:19:8c:24:
                    fb:7d:62:cf:28:1b:ca:ad:f0:5f:e8:15:7f:8e:6c:
                    f2:de:ac:74:c2:ec:50:72:de:35:c5:30:17:17:7c:
                    cb:1c:52:60:0f:c2:c4:5b:b0:e7:85:27:13:8e:b0:
                    1c:50:8d:0d:a5:18:b5:f9:4b:e0:da:20:8f:85:d1:
                    a2:51:40:d1:c9:ba:12:17:87:f9:8c:0d:e7:53:56:
                    a2:91:ca:60:14:ef:df:08:b0:1e:b6:35:ef:f3:29:
                    e3:ef:61:9a:72:64:d2:ed:bf:11:a2:f9:51:ae:0e:
                    84:0b:e2:6b:d0:d2:71:0e:5e:59:be:85:a7:a7:e1:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EE:81:1F:F1:17:BF:EC:A4:AC:5B:50:BA:8D:4B:FF:7C:30:47:2A
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.48.0/22
                  89.117.104.0/22
                  89.117.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:fe:f9:82:8b:25:ee:fd:ee:12:a1:46:c7:ff:19:bc:3c:bc:
         50:ad:80:65:db:7a:11:12:63:bb:90:3b:7b:e8:dc:86:6c:05:
         ac:82:12:fc:1a:ac:5d:73:13:98:c8:3b:39:01:7e:79:e8:9d:
         87:96:1d:77:db:75:b9:04:a3:4d:5a:a2:5b:23:96:7e:80:4a:
         55:03:97:ce:74:7e:36:7c:9a:82:5f:93:7b:bc:80:5a:33:94:
         d4:e7:53:06:3e:15:9e:b3:82:8e:b7:55:c4:cb:d6:6c:69:e0:
         92:2f:ea:f2:c8:a9:47:a7:78:02:ee:6f:f2:9c:30:26:be:97:
         3c:8f:11:f1:4f:fb:82:04:2a:fd:5d:69:f5:00:96:03:26:27:
         6b:bc:ee:3b:1a:8b:54:3b:57:08:2f:78:88:b7:cd:fe:65:34:
         a6:a2:67:ed:3c:6b:6b:cf:6e:e8:0e:1c:3d:da:cf:78:ac:19:
         fa:74:3d:bd:36:84:dd:0b:90:54:a7:9c:02:f9:c1:81:1b:ac:
         f9:63:e0:5d:20:89:fa:49:a8:16:f8:6d:ed:d3:99:ac:c3:8b:
         26:25:84:99:83:87:3e:52:03:b1:31:8c:f7:b7:7c:f2:89:4a:
         11:cb:b1:dd:5d:bf:89:dd:c5:f2:5e:3d:e3:c1:9d:3c:5c:a6:
         ad:19:2b:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGSiJUelq9auEI/IYIs1iboFFSaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTExMTQxMzUwMTFaFw0yNjExMTMxMzU1MTFaMDMxMTAvBgNV
BAMTKDU5RUU4MTFGRjExN0JGRUNBNEFDNUI1MEJBOEQ0QkZGN0MzMDQ3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+SEqTnmXFDR+OQgWQ1VgA5+j
7xMLdBwNcFgKxJTPg31NR8mjgvdd5QtswZ19h7ED451HPnlwfTLkLfKNba6lcUVY
HUXn61ctkNUhHAq/keYuGUdFDJDE5wDeV/rBU4QI936VgYXxKlp5nQ+yhpFTJfor
7sKoi0YRfS2kgZP6ip6nehmMJPt9Ys8oG8qt8F/oFX+ObPLerHTC7FBy3jXFMBcX
fMscUmAPwsRbsOeFJxOOsBxQjQ2lGLX5S+DaII+F0aJRQNHJuhIXh/mMDedTVqKR
ymAU798IsB62Ne/zKePvYZpyZNLtvxGi+VGuDoQL4mvQ0nEOXlm+haen4W41AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWe6BH/EXv+ykrFtQuo1L/3wwRyowHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTU4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAll0MAMEAll1aAMEAll1
mDANBgkqhkiG9w0BAQsFAAOCAQEAjf75gosl7v3uEqFGx/8ZvDy8UK2AZdt6ERJj
u5A7e+jchmwFrIIS/BqsXXMTmMg7OQF+eeidh5Ydd9t1uQSjTVqiWyOWfoBKVQOX
znR+Nnyagl+Te7yAWjOU1OdTBj4VnrOCjrdVxMvWbGngki/q8sipR6d4Au5v8pww
Jr6XPI8R8U/7ggQq/V1p9QCWAyYna7zuOxqLVDtXCC94iLfN/mU0pqJn7Txra89u
6A4cPdrPeKwZ+nQ9vTaE3QuQVKecAvnBgRus+WPgXSCJ+kmoFvht7dOZrMOLJiWE
mYOHPlIDsTGM97d88olKEcux3V2/id3F8l4948GdPFymrRkr0w==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:06 2025 by rpki-client