This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323134303235.roa
File:                     352e38332e3232302e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          /akMGVnUp1qxS+arLnG8n0xLG++GqIuJKbcg58OkYO0=
Subject key identifier:   20:AC:AB:0D:DD:5C:4C:2D:01:82:57:DF:22:36:AE:01:80:7C:64:12
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       381A1B3EEAC998420B1ED12BB2B3E4AE1D90D295
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323134303235.roa
Signing time:             Sat 13 Dec 2025 07:58:05 +0000
ROA not before:           Sat 13 Dec 2025 07:53:05 +0000
ROA not after:            Sat 12 Dec 2026 07:58:05 +0000
asID:                     214025
IP address blocks:        5.83.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 21:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1a:1b:3e:ea:c9:98:42:0b:1e:d1:2b:b2:b3:e4:ae:1d:90:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec 13 07:53:05 2025 GMT
            Not After : Dec 12 07:58:05 2026 GMT
        Subject: CN=20ACAB0DDD5C4C2D018257DF2236AE01807C6412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:be:45:38:33:64:60:33:37:9a:62:14:a8:
                    fa:fa:58:46:02:39:c6:88:99:0b:c3:ed:52:59:fe:
                    1d:b1:b2:c3:2d:50:b2:0f:f8:6e:eb:41:53:c7:31:
                    f6:da:0f:73:46:65:bc:08:1d:21:f9:81:73:72:c5:
                    f1:77:e6:4e:78:80:6d:5b:ad:a4:22:e0:5d:cd:68:
                    dd:64:b4:57:64:c6:76:41:a2:e9:11:55:e8:30:af:
                    c9:aa:0b:c0:13:ee:25:9d:f6:ae:ce:db:81:63:be:
                    b5:ff:58:ab:f0:35:d4:7a:55:ef:ae:b4:0c:58:42:
                    07:18:66:45:09:6a:8c:be:32:31:a8:68:63:1b:62:
                    6b:3d:dc:53:f6:c0:06:9b:16:3d:a3:91:8c:43:29:
                    71:0f:39:d5:70:46:be:57:62:64:29:7f:d9:e5:bc:
                    d0:87:2f:d5:6e:ec:2f:2f:9a:df:5f:14:30:2b:d7:
                    1f:f2:cb:e5:32:02:a9:f6:67:07:70:76:39:96:4d:
                    8e:11:e6:60:50:59:83:64:67:3d:77:f5:7b:4a:a2:
                    34:e0:a8:34:47:1c:aa:4b:0c:25:5f:32:20:2a:d0:
                    65:fe:17:01:c8:26:7c:f8:dd:ff:78:0d:13:64:cb:
                    a2:23:d8:9e:e2:9d:f6:5f:48:cc:cb:8b:41:8c:c8:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:AB:0D:DD:5C:4C:2D:01:82:57:DF:22:36:AE:01:80:7C:64:12
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:7d:47:fb:ae:c5:1b:4a:eb:60:28:70:d6:07:b0:3b:e2:
         ac:e5:c1:df:e4:55:03:fe:81:ab:20:9b:4f:7f:34:80:ac:a1:
         b4:dc:0b:f0:57:e6:fc:ca:6e:e1:df:c9:3b:48:83:26:13:f0:
         1c:f9:5c:fc:5b:81:a6:8d:bd:ce:34:91:df:a4:02:bd:7b:e1:
         3d:82:cd:7a:7a:38:ff:28:b0:a0:55:0c:fe:5a:96:ad:3e:3e:
         25:5b:9e:1b:a1:9b:1c:76:23:d6:3b:17:6f:b5:4e:c0:98:0c:
         5d:3d:15:7c:98:66:49:de:be:04:16:d1:4f:44:46:72:1d:0f:
         f9:56:27:54:7f:0f:1a:d2:ed:98:63:3a:03:55:97:41:3d:c3:
         8b:e4:a9:fc:53:6f:1f:d8:e9:2d:82:cb:c9:be:5e:a5:ec:25:
         59:68:e0:7a:42:b6:bd:87:f2:7a:a8:fd:fd:6e:b9:ef:44:1f:
         2a:b0:a7:69:f5:58:55:e1:69:dc:55:60:db:a6:7a:19:5f:4d:
         4e:d1:21:e8:87:35:a3:f0:c3:7d:39:8e:ba:7c:0d:d9:0a:0c:
         76:5f:0a:e1:1f:fe:89:fd:61:a1:3c:c6:d6:6c:92:ed:1e:04:
         9b:ed:ad:16:7f:68:fb:c9:51:e1:6a:f1:45:81:fe:c0:c1:05:
         24:80:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:25:14 2025 by rpki-client