This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa
File:                     AS214159.roa (raw, json)
Hash identifier:          UnT6VlwuGnCMo0p7KOUpSOGj1NONLGhQM2yTMivKXiY=
Subject key identifier:   E2:3B:3C:F0:17:D5:10:35:8C:7C:AC:6A:76:CD:5E:FD:70:FA:B3:ED
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       51266044B27FDD1CBA7FF163ADAF1B302A2BD49C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa
Signing time:             Thu 25 Dec 2025 17:55:32 +0000
ROA not before:           Thu 25 Dec 2025 17:50:32 +0000
ROA not after:            Thu 24 Dec 2026 17:55:32 +0000
asID:                     214159
IP address blocks:        86.38.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:26:60:44:b2:7f:dd:1c:ba:7f:f1:63:ad:af:1b:30:2a:2b:d4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec 25 17:50:32 2025 GMT
            Not After : Dec 24 17:55:32 2026 GMT
        Subject: CN=E23B3CF017D510358C7CAC6A76CD5EFD70FAB3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:7d:58:06:f3:48:71:ab:70:1d:c9:5c:dd:
                    e8:36:8a:c0:a5:32:29:e6:32:8a:d1:c3:13:47:68:
                    8a:dc:9e:5c:9f:3d:64:68:99:43:c7:fd:0d:ba:8c:
                    bc:b7:26:ac:b1:f3:f8:76:61:bc:c5:f6:38:65:da:
                    a5:77:39:bf:fb:68:83:22:8b:c5:2b:a6:a0:7f:be:
                    a5:76:d4:95:69:df:94:c3:35:27:e4:2d:53:35:96:
                    09:e3:f7:d2:04:75:3f:7c:2a:4d:81:eb:99:4a:fa:
                    b5:e3:5f:5d:64:09:28:2e:5b:7d:f8:95:17:49:7d:
                    25:58:ea:07:cd:1f:31:01:e3:fe:07:01:e6:91:27:
                    73:a1:e2:c7:99:8e:63:b8:34:6d:28:32:e8:d3:84:
                    27:7c:0e:81:ee:00:70:52:2d:8d:1b:78:9d:94:e3:
                    69:cb:1f:03:10:16:5c:12:fd:38:fe:85:46:02:f5:
                    a4:c3:e8:03:8d:52:c9:dc:8f:95:28:b5:9b:5a:48:
                    92:e0:c4:ee:65:54:e9:7b:79:26:4b:1d:ef:f8:e6:
                    7f:0e:6d:e5:05:d7:38:d5:8a:27:75:a6:5b:20:e5:
                    1b:21:71:42:2c:b7:32:14:c6:59:af:91:35:43:b1:
                    fa:52:b1:89:78:37:c9:60:03:10:80:fc:87:fe:06:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3B:3C:F0:17:D5:10:35:8C:7C:AC:6A:76:CD:5E:FD:70:FA:B3:ED
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214159.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:32:a3:81:6b:be:56:f6:5d:67:ed:d5:25:7a:88:2c:ba:
         41:3b:aa:6c:c9:58:b8:78:35:e5:e5:9d:a6:7e:35:8d:7d:ac:
         13:57:04:30:cf:71:20:71:8c:01:20:23:00:bb:cb:e2:00:15:
         78:68:5d:f3:e2:14:66:c6:76:e0:8c:c3:09:70:63:55:1c:b4:
         5d:7c:c3:dd:03:12:3b:5c:bb:26:b6:4b:02:2f:90:1f:ff:27:
         80:3d:cb:e6:0e:0a:a0:d8:29:f2:be:d0:af:d9:60:fd:38:25:
         48:5b:85:eb:71:ac:6e:83:51:7b:dd:46:80:f3:f5:5c:96:6d:
         3f:7f:45:ce:cd:40:11:ae:77:20:87:22:7b:fb:67:ac:71:df:
         7d:04:12:50:39:3c:98:09:a1:e2:b0:1c:fe:dd:e3:b0:49:23:
         7c:ae:18:ed:f7:ee:c2:24:0d:14:9b:16:60:12:f0:df:8f:8e:
         f1:99:ee:9a:5a:1d:91:d7:62:67:35:05:3a:fa:35:ed:25:43:
         b4:ce:d7:74:90:74:78:0d:2e:96:a2:28:53:c2:2c:40:d4:7f:
         11:40:38:f9:28:41:64:55:25:c7:f1:17:29:03:58:b7:7c:24:
         7f:cb:43:76:9a:cf:8b:08:9e:01:ea:2e:1a:37:04:f2:c1:ad:
         32:dd:e8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:35 2026 by rpki-client