This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
File:                     AS57167.roa (raw, json)
Hash identifier:          hQ3FSiNDotAS98KpTgLW9fkrtsQvagJMSzzMNdzngdo=
Subject key identifier:   FE:18:16:F2:21:4E:C6:FB:C3:00:67:44:58:1F:3C:24:A7:CE:4D:97
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       502D68B457A50FFC62A5FDB2C783D50A0BF13EDA
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa
Signing time:             Tue 11 Nov 2025 14:55:11 +0000
ROA not before:           Tue 11 Nov 2025 14:50:11 +0000
ROA not after:            Tue 10 Nov 2026 14:55:11 +0000
asID:                     57167
IP address blocks:        89.117.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2d:68:b4:57:a5:0f:fc:62:a5:fd:b2:c7:83:d5:0a:0b:f1:3e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Nov 11 14:50:11 2025 GMT
            Not After : Nov 10 14:55:11 2026 GMT
        Subject: CN=FE1816F2214EC6FBC3006744581F3C24A7CE4D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:13:5e:d9:7c:e3:5f:e8:bd:a8:c0:09:0c:
                    fe:e0:ea:84:5b:30:85:92:2c:a4:69:13:04:9f:b7:
                    97:4f:3d:0f:c7:6e:63:f5:64:6d:8d:f3:87:cc:a1:
                    a3:1e:92:e0:92:59:2e:3d:fd:16:3b:41:d3:48:24:
                    29:be:e6:9d:10:f6:fe:6b:b5:98:2c:6b:e0:df:5b:
                    aa:45:88:cd:82:36:43:c6:42:be:ac:7e:d2:e0:9f:
                    88:b0:82:82:6d:23:b5:b2:df:c1:5a:c4:8b:5f:4f:
                    38:c6:21:3f:82:e8:86:0b:b1:5b:5f:00:b9:86:88:
                    27:b9:52:69:ad:b2:8c:9b:94:ee:a9:f1:2d:28:84:
                    03:ff:fc:13:d8:67:60:bb:99:14:b4:2f:d5:6f:a7:
                    18:e7:90:60:3c:f1:cf:29:ab:73:f7:da:c0:ea:9a:
                    75:eb:c6:30:ec:83:a5:e1:27:e5:5f:fd:70:e6:ce:
                    db:0f:aa:bd:d6:e5:39:52:18:47:c9:1c:dc:21:ee:
                    bf:14:66:e6:ba:69:f0:d4:0a:36:47:25:3f:f1:32:
                    4b:c6:07:12:a7:55:ed:b6:f3:56:20:64:a9:1d:92:
                    f6:89:84:52:c2:43:c0:ac:0e:0b:53:6f:30:a4:ee:
                    d5:81:0f:a3:85:5a:06:7d:7a:25:67:6d:11:d1:9c:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:18:16:F2:21:4E:C6:FB:C3:00:67:44:58:1F:3C:24:A7:CE:4D:97
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS57167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:82:6e:65:ed:bb:41:3d:f3:1b:05:5f:72:db:41:22:37:7f:
         4e:eb:be:80:f1:ba:d9:bc:77:3c:9c:cf:57:5b:d6:19:f6:4b:
         bd:f6:05:07:a5:05:b6:6c:e9:88:5f:b3:84:b7:a7:a7:aa:f8:
         0d:69:12:b4:fa:e7:57:e3:c8:d5:b2:fa:fd:7d:c1:f1:1d:d7:
         cf:a1:e1:c6:93:02:e4:bc:c8:a2:2c:06:b2:64:fc:2f:85:81:
         1e:10:ee:e0:03:25:fc:fd:02:8c:70:72:f7:41:49:92:1a:03:
         df:44:47:13:32:22:bd:09:03:ae:0d:ce:12:30:42:2f:7b:60:
         a9:d2:4e:70:25:88:ca:86:cc:3b:7f:44:6e:8a:44:75:48:c6:
         28:4b:af:87:0d:95:2a:4f:84:85:6c:cc:3a:87:d1:2e:1d:16:
         92:52:31:a5:da:9b:51:1a:a4:2d:2e:44:82:b0:e9:4c:62:fd:
         e2:71:f8:c1:71:6c:49:0f:d9:67:ca:1a:92:d2:bc:f8:e5:7b:
         c2:08:83:2b:42:86:e3:b3:ee:65:ed:d5:33:91:6e:9c:21:95:
         96:ed:42:d2:84:3b:b5:b2:f9:51:d3:0f:66:84:3f:60:fa:84:
         c8:01:6e:0c:4b:e1:23:9e:7c:c4:0d:56:4c:2f:ba:d7:5a:bd:
         a8:3d:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:50 2025 by rpki-client