This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa
File:                     AS211936.roa (raw, json)
Hash identifier:          r8K0ZIC4OQASuFEl/ACsrJ1vnPVFmvwjLhVtyL8Bw8U=
Subject key identifier:   EF:8C:91:7F:3E:49:ED:F6:B9:B1:63:85:C3:59:C5:2B:1F:E0:F4:AE
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       6A02F564A56523E427CE7AE3CC7CB1C061A830DD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa
Signing time:             Tue 02 Dec 2025 12:55:12 +0000
ROA not before:           Tue 02 Dec 2025 12:50:12 +0000
ROA not after:            Tue 01 Dec 2026 12:55:12 +0000
asID:                     211936
IP address blocks:        86.38.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:02:f5:64:a5:65:23:e4:27:ce:7a:e3:cc:7c:b1:c0:61:a8:30:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec  2 12:50:12 2025 GMT
            Not After : Dec  1 12:55:12 2026 GMT
        Subject: CN=EF8C917F3E49EDF6B9B16385C359C52B1FE0F4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8a:c8:ab:bb:7b:82:97:e2:7c:24:e9:f9:88:
                    4f:6a:98:5e:55:5f:7b:fb:7e:1c:7e:ad:db:cb:ae:
                    e6:69:e8:54:08:e8:0b:39:a3:3f:15:30:ad:0d:a8:
                    25:4e:b8:fa:49:ee:c0:15:0a:eb:58:24:0a:71:c8:
                    8a:29:d2:47:57:1d:0d:21:e1:ef:97:5e:b2:e3:58:
                    e0:99:e9:73:0e:62:d0:83:a7:82:53:02:03:55:61:
                    fb:d4:ac:f6:2f:3f:25:55:1c:64:1b:b2:ad:ac:cf:
                    11:1f:65:34:bf:2f:26:da:9a:4f:c6:a3:29:d1:98:
                    ba:00:77:4c:c1:23:31:b9:5c:35:23:ec:67:bb:dd:
                    87:0f:f7:8b:d7:fa:a2:ec:b0:e3:db:05:ed:ec:72:
                    b5:f9:a1:61:58:fd:c9:41:10:be:19:36:8b:15:06:
                    33:dc:60:5b:0d:f1:f5:2c:82:ae:07:53:c1:8e:be:
                    6f:17:19:33:e6:4f:d2:05:99:27:2a:1a:9f:9b:5f:
                    99:5f:b0:27:69:e7:03:1b:2d:16:ba:cc:69:47:bb:
                    27:39:23:a6:c5:10:9b:15:fd:67:87:35:e4:f5:48:
                    30:79:57:ad:ab:ca:81:3d:3c:b0:2a:d0:63:25:5f:
                    c1:09:c6:58:e7:8c:5b:80:ad:32:4d:9f:28:4c:34:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:91:7F:3E:49:ED:F6:B9:B1:63:85:C3:59:C5:2B:1F:E0:F4:AE
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:3b:af:6e:48:ce:2f:52:64:4e:2a:6d:62:a7:86:7f:11:
         a4:f1:f1:0e:fc:ce:a9:70:d8:73:ee:8b:4d:50:b4:cc:66:1c:
         c4:75:36:74:b0:68:ea:8f:c7:5b:0c:b8:3e:04:38:a6:ae:f8:
         3a:5b:56:65:68:7e:7a:09:c8:9d:0a:a5:ec:9f:41:61:3a:c6:
         64:92:eb:9e:0c:f6:74:f2:e0:f1:61:0b:bf:fe:55:8d:5a:9a:
         ad:b0:9f:c4:43:77:69:28:8c:9c:4a:8b:96:0a:5f:72:7e:98:
         fe:89:65:4c:f8:c4:81:97:2a:7b:05:c4:8c:ad:e9:09:4a:ed:
         c9:b3:d9:29:58:fe:26:a4:46:38:a5:d1:81:57:ab:6f:ff:50:
         30:d2:53:be:b5:e7:f7:eb:59:b7:60:f2:dd:a8:fb:66:89:cf:
         00:dc:1e:de:df:44:e5:a7:a3:f5:2d:d4:4d:1f:1e:9d:80:64:
         c2:ed:ae:4c:ed:fd:c0:4e:a0:c9:2a:6a:28:20:cd:4e:df:52:
         66:11:29:0e:91:ac:f8:5b:c6:b9:12:c7:8b:41:6c:a5:82:0f:
         ff:9f:36:e5:da:5c:b1:2d:7b:0b:fc:84:bf:ef:83:56:ac:5c:
         e7:91:8b:02:17:8f:20:b5:94:88:a9:c0:1e:a2:1b:91:d9:3a:
         b3:9f:e7:c2
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUagL1ZKVlI+QnznrjzHyxwGGoMN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNTEyMDIxMjUwMTJaFw0yNjEyMDExMjU1MTJaMDMxMTAvBgNV
BAMTKEVGOEM5MTdGM0U0OUVERjZCOUIxNjM4NUMzNTlDNTJCMUZFMEY0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiisiru3uCl+J8JOn5iE9qmF5V
X3v7fhx+rdvLruZp6FQI6As5oz8VMK0NqCVOuPpJ7sAVCutYJApxyIop0kdXHQ0h
4e+XXrLjWOCZ6XMOYtCDp4JTAgNVYfvUrPYvPyVVHGQbsq2szxEfZTS/Lybamk/G
oynRmLoAd0zBIzG5XDUj7Ge73YcP94vX+qLssOPbBe3scrX5oWFY/clBEL4ZNosV
BjPcYFsN8fUsgq4HU8GOvm8XGTPmT9IFmScqGp+bX5lfsCdp5wMbLRa6zGlHuyc5
I6bFEJsV/WeHNeT1SDB5V62ryoE9PLAq0GMlX8EJxljnjFuArTJNnyhMNOZFAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU74yRfz5J7fa5sWOFw1nFKx/g9K4wHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMTkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1Ym+DANBgkqhkiG9w0B
AQsFAAOCAQEAdfI7r25Izi9SZE4qbWKnhn8RpPHxDvzOqXDYc+6LTVC0zGYcxHU2
dLBo6o/HWwy4PgQ4pq74OltWZWh+egnInQql7J9BYTrGZJLrngz2dPLg8WELv/5V
jVqarbCfxEN3aSiMnEqLlgpfcn6Y/ollTPjEgZcqewXEjK3pCUrtybPZKVj+JqRG
OKXRgVerb/9QMNJTvrXn9+tZt2Dy3aj7ZonPANwe3t9E5aej9S3UTR8enYBkwu2u
TO39wE6gySpqKCDNTt9SZhEpDpGs+FvGuRLHi0FspYIP/5825dpcsS17C/yEv++D
Vqxc55GLAhePILWUiKnAHqIbkdk6s5/nwg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:20:47 2025 by rpki-client