This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          mw5uuUf/imDmCm0P2grVvDRWxx+U39w7HGzVbIaSKDs=
Subject key identifier:   FB:44:A8:35:91:E6:95:19:C1:E2:E8:63:7B:FA:0A:95:1F:FD:D5:03
Certificate issuer:       /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial:       10F5D107D45646C06E9806DC30EFEA303FEF0C8F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa
Signing time:             Tue 02 Dec 2025 12:55:12 +0000
ROA not before:           Tue 02 Dec 2025 12:50:12 +0000
ROA not after:            Tue 01 Dec 2026 12:55:12 +0000
asID:                     8100
IP address blocks:        86.38.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
                          rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:d1:07:d4:56:46:c0:6e:98:06:dc:30:ef:ea:30:3f:ef:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
        Validity
            Not Before: Dec  2 12:50:12 2025 GMT
            Not After : Dec  1 12:55:12 2026 GMT
        Subject: CN=FB44A83591E69519C1E2E8637BFA0A951FFDD503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:06:87:ea:ae:c1:ab:d6:95:f8:4d:99:a8:
                    86:a4:f8:b9:14:4f:9d:bf:21:28:ff:c5:f9:4d:df:
                    de:eb:c4:0d:14:35:8b:15:c9:12:a0:fb:df:db:0d:
                    76:df:28:18:c6:03:56:15:06:17:62:c2:be:64:eb:
                    8b:29:e5:5e:95:e3:68:4a:e4:63:0d:f1:43:cc:f2:
                    48:62:77:34:ce:6e:e8:4a:b6:f3:71:17:31:64:08:
                    ce:5e:fc:9b:d3:7d:b0:07:2d:a9:88:b4:17:80:aa:
                    0a:52:ec:56:c5:aa:19:6a:5f:43:60:7f:a9:de:53:
                    1a:b5:f1:ef:50:a7:1e:c2:f8:a1:15:33:06:41:4f:
                    d4:e1:f7:b4:2e:5f:03:47:5a:06:75:b9:99:f8:2f:
                    7a:e9:16:4c:ac:f2:68:f4:3a:d8:93:20:98:ea:b7:
                    08:54:a4:f3:36:cc:af:84:8f:ed:40:13:c7:ab:75:
                    0d:8a:c2:97:96:f9:48:ee:1a:27:d0:1a:ad:75:0e:
                    d8:c2:d3:1b:49:b1:fa:bc:ac:aa:f1:6d:59:b6:c4:
                    0f:36:51:59:ad:6d:ab:c5:20:71:12:43:7a:99:01:
                    d8:7f:38:bd:31:5c:60:c4:df:43:e3:e2:e1:1e:cf:
                    59:ef:41:53:58:c7:d4:b6:9d:ce:41:04:dd:c2:85:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:A8:35:91:E6:95:19:C1:E2:E8:63:7B:FA:0A:95:1F:FD:D5:03
            X509v3 Authority Key Identifier:
                keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:a4:1c:d8:28:42:59:a5:6b:52:f7:d3:58:85:b4:b1:20:
         1b:b4:49:93:b9:71:19:a9:aa:54:7a:11:54:4d:b5:c6:01:3f:
         b3:0a:79:68:c8:b3:be:7b:4b:aa:ec:9a:26:85:68:20:04:56:
         88:62:d7:b5:f3:ed:8f:b2:c5:58:d2:ed:db:e8:9b:5d:04:3d:
         60:cb:9b:b6:06:e9:71:6c:cb:8a:02:0c:23:0b:e1:26:aa:65:
         62:c0:53:bd:d4:01:ed:ea:be:0d:a8:ac:5d:41:2e:17:4b:d2:
         26:08:61:58:6f:b4:f3:af:0d:dd:4d:c3:f2:6d:97:0f:ab:38:
         cb:aa:ea:f4:64:d3:66:e5:ee:f1:41:21:39:9a:d6:64:b2:6e:
         b9:dd:dd:12:83:1a:4a:78:ac:84:6f:d3:f0:d0:11:fc:51:9b:
         fe:83:c1:60:93:20:e2:90:8f:7e:e5:29:6d:08:6d:a7:07:c5:
         32:02:5b:74:fa:18:c4:39:b0:b0:5d:c4:83:f8:f5:db:2d:1a:
         15:55:c4:33:b3:5a:9c:1b:57:26:23:09:3e:f7:57:4b:96:5e:
         da:03:da:b0:e2:7d:b9:4d:80:c4:fc:18:b9:21:8a:5e:10:74:
         5c:e5:01:21:2a:3b:fc:9d:fb:cf:e2:88:ae:77:3a:55:ea:79:
         ad:ff:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:31:42 2025 by rpki-client