This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
File:                     AS48412.roa (raw, json)
Hash identifier:          ePiF93CIZMDr0Lhh7nUyK1fRe6sfQbYq97T0rFYHDNU=
Subject key identifier:   DA:3F:41:FE:09:0F:6C:EB:9C:52:55:CB:D3:4B:35:2A:95:12:BD:2F
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       365D3453BEEF6C37D97434D95437B2CC57ED3FDD
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa
Signing time:             Fri 23 Jan 2026 13:55:35 +0000
ROA not before:           Fri 23 Jan 2026 13:50:35 +0000
ROA not after:            Fri 22 Jan 2027 13:55:35 +0000
asID:                     48412
IP address blocks:        84.46.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5d:34:53:be:ef:6c:37:d9:74:34:d9:54:37:b2:cc:57:ed:3f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Jan 23 13:50:35 2026 GMT
            Not After : Jan 22 13:55:35 2027 GMT
        Subject: CN=DA3F41FE090F6CEB9C5255CBD34B352A9512BD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:3e:f7:80:1d:8a:8a:41:04:2f:4d:da:be:
                    d6:81:d9:d3:42:e3:de:db:22:ef:a3:d1:42:af:4e:
                    11:5f:75:cd:aa:ea:98:4c:4d:4c:ff:3f:db:b5:a1:
                    b7:49:b1:c7:c8:79:2d:3d:50:db:90:8c:53:a7:ad:
                    01:5f:a9:be:23:f0:03:cc:8c:d1:94:34:ba:9a:92:
                    e1:9b:ec:a0:70:75:85:25:b0:3f:d6:77:6d:25:85:
                    13:63:fd:86:dc:51:5d:11:ff:6f:9e:13:52:6e:ff:
                    14:94:06:96:cd:74:a3:5b:c1:b3:70:91:5e:e2:90:
                    0b:13:68:0f:46:b0:f4:1c:0a:e6:9f:68:5a:d6:f7:
                    9f:72:bf:4c:fc:36:fd:a1:3b:fc:db:58:76:e9:07:
                    22:97:8b:da:c1:25:ae:b7:8d:23:96:63:c3:1f:4d:
                    37:c0:4d:59:3d:27:14:7f:dc:53:ce:86:7c:db:6f:
                    5f:b3:7e:31:65:a4:f5:54:bd:ea:32:8d:33:63:c5:
                    0d:ed:46:28:96:d2:9b:00:14:76:d1:b4:82:c8:86:
                    b3:ed:82:4b:49:81:b2:e8:93:25:24:74:02:72:a3:
                    cc:b6:db:df:af:fa:42:9e:8c:75:af:e4:99:1c:ce:
                    52:a2:b6:88:ef:d7:f4:11:ff:e0:25:39:38:86:b3:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3F:41:FE:09:0F:6C:EB:9C:52:55:CB:D3:4B:35:2A:95:12:BD:2F
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS48412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:4d:ba:6b:57:5d:ef:28:18:e8:82:25:e1:f4:8b:96:52:2d:
         69:a6:aa:db:80:19:07:e5:43:12:eb:42:60:2f:8c:1e:69:e0:
         5c:28:cf:63:75:1f:ad:b9:98:98:5f:68:1d:31:81:18:de:34:
         9f:75:f4:2c:5a:92:52:9f:71:b4:1d:1e:7d:a1:f7:b3:53:50:
         2e:c1:80:77:85:22:29:fe:9f:ee:1f:45:90:9a:5d:5a:34:19:
         25:e5:6a:7c:49:fd:40:d4:f8:62:bb:8a:f6:89:8b:12:9f:8c:
         bb:71:ae:bd:ce:80:41:b3:8c:d7:ba:33:1d:67:f0:fa:8c:e2:
         4f:73:55:75:3c:67:66:cc:57:af:0f:91:fd:da:34:a7:6c:6f:
         81:9f:a9:ee:09:28:a0:c6:4b:38:1b:c6:e2:f2:4f:fa:27:10:
         76:57:9d:b0:21:a8:62:75:e2:6c:5c:d7:80:56:c1:b8:05:5a:
         6d:cc:be:9b:d1:ee:5f:06:40:38:d3:47:c7:33:2f:5e:49:82:
         d8:dc:22:ba:07:0a:3e:a0:b2:8f:46:ce:98:18:80:a8:0d:67:
         e5:b6:7e:70:43:dd:2d:ee:5e:5f:21:cc:98:61:6b:9d:8a:c6:
         60:66:3e:8b:31:45:43:42:f0:78:16:12:36:57:ca:2d:22:fc:
         e3:55:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:07:57 2026 by rpki-client