This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
File:                     AS23161.roa (raw, json)
Hash identifier:          7m++T+RrRHArFUnpIvOZvkRt63KroVYLoHGStox6aRI=
Subject key identifier:   8A:D7:F2:EA:C2:BC:C3:97:32:FD:F5:BF:67:9E:64:FE:03:A4:25:E0
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       20934126B17519A6B961B646864565D61150B446
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa
Signing time:             Fri 14 Nov 2025 17:55:11 +0000
ROA not before:           Fri 14 Nov 2025 17:50:11 +0000
ROA not after:            Fri 13 Nov 2026 17:55:11 +0000
asID:                     23161
IP address blocks:        89.117.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:93:41:26:b1:75:19:a6:b9:61:b6:46:86:45:65:d6:11:50:b4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 14 17:50:11 2025 GMT
            Not After : Nov 13 17:55:11 2026 GMT
        Subject: CN=8AD7F2EAC2BCC39732FDF5BF679E64FE03A425E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:19:88:00:ef:71:91:4a:c9:f0:71:77:6a:
                    1a:bc:a8:b1:a5:6a:29:02:1a:e7:af:86:66:8a:a6:
                    d8:32:6d:01:78:e3:4f:af:45:10:a3:74:39:31:38:
                    8f:5e:d9:d9:49:67:58:e5:f0:44:f3:d5:cb:62:07:
                    af:88:9a:42:a1:f2:6e:f2:d8:2f:7b:26:42:b0:b2:
                    44:f4:23:70:b9:55:5d:e7:f6:26:0b:34:38:43:8c:
                    e1:56:a7:7a:9b:dc:e7:22:b0:03:b3:bd:9c:55:96:
                    e5:17:f6:0f:e8:39:02:71:bd:99:c7:d1:34:9c:4a:
                    32:ca:20:bd:2f:d5:ee:49:67:e1:0c:1e:5f:2c:6d:
                    ed:e5:ae:43:c3:96:a0:ca:e5:a8:62:3e:9e:84:73:
                    74:58:19:70:81:72:8f:22:24:f0:0a:55:ae:00:96:
                    b6:cd:26:2d:5d:75:51:eb:28:95:67:05:d3:c4:5c:
                    fe:67:56:6e:90:15:91:30:a1:35:43:8e:4d:40:18:
                    69:ae:9f:f1:8f:ff:4b:22:a4:c8:ba:17:83:8d:4d:
                    68:f5:c7:bb:5b:02:bc:80:73:66:aa:12:82:ad:f7:
                    3d:51:3d:c9:ca:83:89:54:32:ba:3a:a2:71:85:19:
                    90:56:54:ba:2e:82:23:72:78:29:1b:b0:9b:fc:03:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:F2:EA:C2:BC:C3:97:32:FD:F5:BF:67:9E:64:FE:03:A4:25:E0
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:da:c1:70:83:49:79:f1:0c:a4:3b:61:20:c0:13:11:05:0a:
         61:58:94:a0:68:b1:c5:d1:0d:3b:8c:7b:bd:18:d6:5b:f7:28:
         70:de:64:58:d8:30:27:2b:07:ed:a7:b3:a3:33:09:bf:4b:58:
         76:0b:09:84:9b:f2:28:2f:db:97:9e:fa:68:ed:a6:43:53:22:
         9c:fb:6a:58:67:38:56:5e:63:67:74:6c:dd:f7:c5:3a:ff:73:
         3d:f0:e6:ec:f9:00:64:2c:3d:7f:42:1e:9b:f1:79:5a:bf:2b:
         8f:de:34:5c:ff:55:b8:4e:8c:fb:52:18:80:28:35:99:d7:b5:
         65:e0:c8:d1:66:0e:d1:96:c1:0f:f1:23:fc:1c:c2:28:62:2b:
         1e:60:cf:92:a2:23:72:fd:e3:ca:58:61:f2:13:88:ae:fa:3b:
         09:dd:0f:78:8f:c7:49:11:88:b8:c8:3f:14:b2:59:04:34:a7:
         04:87:05:ee:90:26:a3:0d:a4:69:da:94:76:05:55:d4:a3:91:
         17:f1:69:ee:14:a2:45:28:a3:d7:ba:3f:dc:8f:bc:11:ea:76:
         76:27:de:89:a0:2f:dc:01:92:66:7f:4a:d6:dd:9c:44:85:57:
         9d:2f:e7:f9:93:e0:57:76:03:9a:dd:8e:9b:77:9e:10:2b:4a:
         85:e7:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:39:07 2025 by rpki-client