This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323132333335.roa
File:                     33372e3233302e34392e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier:          e2Bb6u1J+kbHaiZoFjyyf+IQFPNoxharClxmf33VJ+g=
Subject key identifier:   F3:A7:17:12:54:50:E8:21:D5:3D:61:C6:49:3C:49:C2:C1:54:DE:6B
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       43C8E1021CD9BCBE5032F415739B016D82ACB3D2
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323132333335.roa
Signing time:             Thu 22 Jan 2026 07:55:35 +0000
ROA not before:           Thu 22 Jan 2026 07:50:35 +0000
ROA not after:            Thu 21 Jan 2027 07:55:35 +0000
asID:                     212335
IP address blocks:        37.230.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:e1:02:1c:d9:bc:be:50:32:f4:15:73:9b:01:6d:82:ac:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 22 07:50:35 2026 GMT
            Not After : Jan 21 07:55:35 2027 GMT
        Subject: CN=F3A717125450E821D53D61C6493C49C2C154DE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7f:af:51:0d:09:de:a2:5a:6a:b3:59:af:12:
                    3a:cc:86:0d:d1:88:72:a3:cb:51:6b:68:da:b0:76:
                    d5:69:48:5b:0a:9d:34:bc:d3:9f:92:c2:5b:03:9d:
                    ff:9b:93:4b:99:ce:43:b5:28:e9:1d:48:0e:03:e9:
                    cc:16:8c:75:6b:da:b6:06:62:11:e0:df:04:58:c8:
                    b1:d5:1c:c7:da:43:a0:50:7b:74:f0:c9:31:dc:bb:
                    7a:81:ed:1e:67:0c:14:0a:6a:bc:36:6e:4e:cd:11:
                    4c:2a:a8:8f:b3:00:cc:90:58:8d:d8:06:cd:67:4c:
                    99:f8:28:ec:09:9e:fa:19:d1:71:16:b2:15:c9:6b:
                    3c:5d:b2:db:46:3b:fc:a2:70:ca:1c:4a:15:4c:06:
                    43:af:55:59:67:e9:1f:1e:2d:20:47:43:3d:33:60:
                    71:4b:0a:1d:87:53:9e:46:4c:ea:76:d5:5e:0f:7a:
                    7c:fb:9c:66:19:36:8c:a4:b9:fc:62:2c:a5:f3:9d:
                    88:ae:da:64:94:bf:1a:41:e6:c9:38:fe:87:1c:93:
                    b1:ea:50:f4:7c:86:e5:ba:df:a8:36:96:c7:16:18:
                    84:3e:d9:ad:9e:71:54:a1:47:6a:96:f4:b4:89:61:
                    f7:ef:dc:46:e8:83:8e:1a:e9:f7:5d:b3:4e:a5:4d:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A7:17:12:54:50:E8:21:D5:3D:61:C6:49:3C:49:C2:C1:54:DE:6B
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323132333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.230.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:fd:31:73:49:ae:08:80:5a:2d:47:34:7e:bf:95:39:5a:
         ca:2c:19:d5:de:08:91:20:0f:a8:f8:91:b8:3f:5e:51:9a:8a:
         a1:39:e5:84:8b:75:b2:82:f7:e0:6f:94:25:e9:1c:ae:48:8a:
         03:35:ec:73:95:bb:ae:29:63:a4:fc:55:e0:bc:b7:2f:51:7d:
         6b:5a:04:fd:4d:d7:e1:e8:7e:f3:69:fe:80:f5:91:50:28:8f:
         94:7e:e1:61:bb:b7:dc:02:f5:f3:e3:ba:eb:8c:16:9e:68:de:
         d3:4c:1a:8b:d4:9c:00:fe:8a:6a:91:e7:87:a7:03:54:84:2d:
         25:3b:53:14:b6:54:2e:64:44:f3:8c:96:4a:22:b0:e3:71:c9:
         6e:e8:a2:80:63:42:25:e0:d5:98:83:d6:ac:84:72:79:85:cf:
         e9:59:f9:1e:fd:99:28:18:f8:83:24:52:3b:db:da:49:0e:92:
         69:d1:f1:04:3d:14:b9:1d:31:24:5f:0f:46:31:9d:6f:63:66:
         c3:56:36:76:36:a2:5a:cd:dd:ff:4c:2c:20:a8:b4:22:12:03:
         7c:20:20:f2:47:4f:0a:b8:51:86:53:4e:ca:c9:50:9d:c1:02:
         ec:69:b6:e4:75:e5:c7:d1:b7:b9:94:d3:22:5d:ce:af:c6:ec:
         b2:22:17:6b
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUQ8jhAhzZvL5QMvQVc5sBbYKss9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjAxMjIwNzUwMzVaFw0yNzAxMjEwNzU1MzVaMDMxMTAvBgNV
BAMTKEYzQTcxNzEyNTQ1MEU4MjFENTNENjFDNjQ5M0M0OUMyQzE1NERFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyf69RDQneolpqs1mvEjrMhg3R
iHKjy1FraNqwdtVpSFsKnTS805+SwlsDnf+bk0uZzkO1KOkdSA4D6cwWjHVr2rYG
YhHg3wRYyLHVHMfaQ6BQe3TwyTHcu3qB7R5nDBQKarw2bk7NEUwqqI+zAMyQWI3Y
Bs1nTJn4KOwJnvoZ0XEWshXJazxdsttGO/yicMocShVMBkOvVVln6R8eLSBHQz0z
YHFLCh2HU55GTOp21V4Penz7nGYZNoykufxiLKXznYiu2mSUvxpB5sk4/occk7Hq
UPR8huW636g2lscWGIQ+2a2ecVShR2qW9LSJYffv3Ebog44a6fdds06lTfzlAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU86cXElRQ6CHVPWHGSTxJwsFU3mswHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMTANBgkqhkiG
9w0BAQsFAAOCAQEAP6j9MXNJrgiAWi1HNH6/lTlayiwZ1d4IkSAPqPiRuD9eUZqK
oTnlhIt1soL34G+UJekcrkiKAzXsc5W7riljpPxV4Ly3L1F9a1oE/U3X4eh+82n+
gPWRUCiPlH7hYbu33AL18+O664wWnmje00wai9ScAP6KapHnh6cDVIQtJTtTFLZU
LmRE84yWSiKw43HJbuiigGNCJeDVmIPWrIRyeYXP6Vn5Hv2ZKBj4gyRSO9vaSQ6S
adHxBD0UuR0xJF8PRjGdb2Nmw1Y2djaiWs3d/0wsIKi0IhIDfCAg8kdPCrhRhlNO
yslQncEC7Gm25HXlx9G3uZTTIl3Or8bssiIXaw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:51:25 2026 by rpki-client