This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          0Y7T0N/vKBSC4Awf8Kveoc/w1waPfCWSGqtqL+mX6xU=
Subject key identifier:   45:6B:D2:13:3E:C1:A7:9F:A1:89:E9:7C:C5:BF:B6:0E:EA:CB:C5:EB
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       7C8B1634E5A00461759A2E1B9143C0F996F632C4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa
Signing time:             Tue 02 Dec 2025 12:55:12 +0000
ROA not before:           Tue 02 Dec 2025 12:50:12 +0000
ROA not after:            Tue 01 Dec 2026 12:55:12 +0000
asID:                     398465
IP address blocks:        86.38.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8b:16:34:e5:a0:04:61:75:9a:2e:1b:91:43:c0:f9:96:f6:32:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec  2 12:50:12 2025 GMT
            Not After : Dec  1 12:55:12 2026 GMT
        Subject: CN=456BD2133EC1A79FA189E97CC5BFB60EEACBC5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:80:2d:c6:5c:a3:ae:4a:41:e7:41:77:0a:2b:
                    89:d5:f4:e2:81:09:f2:c3:aa:fb:e3:c4:1f:a0:4e:
                    ad:12:6b:74:8c:65:4c:c8:e6:90:97:d6:5d:99:e0:
                    09:ae:c9:12:e6:39:e3:33:62:28:d5:a7:68:71:95:
                    9f:cc:a3:9f:73:1d:3a:5d:fa:49:62:1e:0b:af:7c:
                    c5:41:67:bc:1d:eb:d4:a5:71:db:f5:8a:19:41:68:
                    cb:02:5c:5c:61:66:b8:c3:a6:54:b0:ae:68:67:cd:
                    7c:ff:a7:91:98:8f:d1:a0:42:71:6c:47:bf:ea:f0:
                    86:39:40:da:08:9d:90:82:fc:24:4f:9e:7c:df:30:
                    83:eb:e5:d9:e0:dd:d4:ac:bd:f4:26:e3:cf:c1:2a:
                    49:dd:10:ff:a0:b4:78:19:85:54:0c:dd:39:35:87:
                    46:43:9d:7d:68:80:12:b3:ce:3b:4b:df:73:37:d0:
                    fe:25:14:a0:13:9c:b9:77:27:b6:91:ab:61:53:da:
                    d6:95:75:1c:47:6d:59:3c:58:7c:36:22:be:9a:f5:
                    1f:8c:dd:5f:ea:de:42:0e:f9:94:3a:3b:0f:99:98:
                    14:26:e4:ef:9d:aa:a7:c2:5b:51:f0:6f:17:1a:a1:
                    78:29:70:01:a1:5f:52:4c:eb:7a:e3:20:15:b2:c6:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:D2:13:3E:C1:A7:9F:A1:89:E9:7C:C5:BF:B6:0E:EA:CB:C5:EB
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:02:ee:82:66:8c:71:59:78:39:12:f7:75:88:ef:49:2d:65:
         e8:19:16:69:d1:32:d4:9e:b0:af:25:2a:db:b2:20:23:bd:66:
         0e:88:75:57:24:89:48:93:8c:b0:4d:93:df:6d:5b:68:0d:07:
         6c:4b:d1:e4:1a:cf:6e:54:90:09:89:85:df:ea:8f:d7:14:13:
         c1:3a:41:f8:19:b9:61:f4:0e:bc:98:4d:7a:f8:4d:61:93:45:
         e1:ad:13:a8:44:33:f0:4c:04:aa:33:fd:99:52:1f:1e:d7:a9:
         c6:81:b3:b8:e2:ff:86:59:68:0d:b6:f1:6d:04:7f:f7:b9:45:
         c5:f2:f1:da:d4:79:92:f7:c3:db:e1:1b:da:c3:f7:bd:c9:8d:
         8c:4f:b2:19:f7:57:56:51:4e:ff:5f:13:25:e2:0d:16:7b:7b:
         16:22:94:7c:95:c8:dc:14:e0:b8:0c:44:e0:3d:0a:6f:42:f9:
         b9:83:fa:8c:7a:75:c0:5f:4f:51:d8:23:16:bc:fd:49:cd:a0:
         96:83:b1:67:95:89:01:b7:e9:73:05:73:c6:f2:7a:08:1a:0a:
         9f:3b:19:c8:25:5a:f9:fb:fe:bc:c3:a3:df:0c:b1:ad:fb:4c:
         7d:d3:59:73:72:06:17:e8:20:76:96:74:20:65:f7:80:58:d4:
         8b:81:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:26:59 2025 by rpki-client