This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa
File:                     352e38332e3232332e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier:          20XgZX55TVy15xPdXlqgVUebbhSE9rIQonIUr2LRupk=
Subject key identifier:   2C:5C:E2:E1:23:33:94:86:BD:67:75:26:A2:8B:88:C7:87:0C:59:AC
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       2A65711E5C436B0F813729D27672F3F2FF43E24B
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa
Signing time:             Mon 29 Dec 2025 00:55:33 +0000
ROA not before:           Mon 29 Dec 2025 00:50:33 +0000
ROA not after:            Mon 28 Dec 2026 00:55:33 +0000
asID:                     58061
IP address blocks:        5.83.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:71:1e:5c:43:6b:0f:81:37:29:d2:76:72:f3:f2:ff:43:e2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Dec 29 00:50:33 2025 GMT
            Not After : Dec 28 00:55:33 2026 GMT
        Subject: CN=2C5CE2E123339486BD677526A28B88C7870C59AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:a0:c0:ed:81:c9:be:11:33:e8:20:45:99:
                    43:f5:2f:5c:8a:10:e9:a0:9c:86:15:6b:52:40:f5:
                    2b:d2:d8:09:d6:13:c7:8f:71:f7:2b:14:2a:70:28:
                    14:58:01:e5:75:bb:92:89:5e:3c:6b:e7:2e:0b:2c:
                    92:40:90:93:5e:4d:8b:64:63:ac:85:3a:c4:2a:ed:
                    81:83:f4:65:a0:41:fd:13:e3:e8:ed:37:12:de:16:
                    9c:2c:4e:1f:3d:33:3b:1c:f3:98:7c:e1:93:b9:37:
                    ff:67:ad:56:5a:b7:56:09:87:c5:25:dc:f4:51:ca:
                    ea:a6:a4:7e:3c:08:e3:50:63:9f:83:88:a8:df:24:
                    6c:49:ac:8c:4e:53:31:6e:10:a1:d8:b6:60:0f:da:
                    47:3d:8c:9b:1b:c2:34:2c:f9:09:b6:7b:af:23:a1:
                    f9:0b:d8:d4:fc:c5:09:f4:1a:18:8b:ad:e3:8e:71:
                    ea:8d:99:7c:49:dc:dd:32:02:95:b6:1d:3b:3d:99:
                    7c:70:af:bc:93:75:6e:5e:70:d0:4f:ca:a6:46:4e:
                    a1:62:b8:a0:e9:f6:4a:45:c3:bc:e3:b8:20:8d:a1:
                    26:bb:6b:1a:c6:ee:d7:97:4b:2b:a0:d6:d8:a0:d8:
                    f4:3a:33:50:b2:06:1c:8d:4e:d7:eb:0a:4e:6b:f4:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5C:E2:E1:23:33:94:86:BD:67:75:26:A2:8B:88:C7:87:0C:59:AC
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e203538303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:df:5e:fc:72:97:08:6b:7b:b9:cc:8d:5e:46:64:03:f6:
         b7:6b:5a:72:0b:83:d4:10:3c:02:e6:92:7e:98:cb:1f:d9:5e:
         49:d1:76:35:bf:ee:07:55:22:3d:e6:f5:63:12:10:18:07:15:
         a9:21:8b:44:b6:fc:7e:30:23:81:e3:d4:2a:e5:07:67:a7:85:
         3c:d2:91:77:72:33:e2:15:bf:f2:b6:74:70:32:5b:35:ff:e0:
         e1:6f:94:81:03:d4:68:36:ac:8d:4d:ae:a3:30:01:98:ed:e3:
         14:49:86:68:03:71:f3:3a:65:47:83:ed:f3:c6:2b:85:e6:ae:
         2f:5b:a4:7a:76:be:96:89:53:04:3e:af:f8:50:32:50:aa:a2:
         c7:e1:bd:89:d8:5d:29:66:21:b8:61:50:6b:2d:2a:13:be:15:
         82:bc:00:9b:81:6c:d3:18:54:9a:8b:56:38:b2:f7:cf:04:72:
         5d:8f:2d:09:ce:87:6e:a8:41:c9:05:28:cf:a5:13:44:27:bb:
         63:c6:c6:30:f6:d8:2c:43:93:2c:eb:b3:96:6f:b4:5c:3d:85:
         5d:48:bf:05:ae:fe:f9:a0:47:6e:d1:fd:93:06:0a:7e:60:1f:
         5e:cd:08:cb:e1:e7:12:15:d3:0d:77:01:73:1d:11:9e:c5:aa:
         56:77:ac:5b
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUKmVxHlxDaw+BNynSdnLz8v9D4kswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNTEyMjkwMDUwMzNaFw0yNjEyMjgwMDU1MzNaMDMxMTAvBgNV
BAMTKDJDNUNFMkUxMjMzMzk0ODZCRDY3NzUyNkEyOEI4OEM3ODcwQzU5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VqDA7YHJvhEz6CBFmUP1L1yK
EOmgnIYVa1JA9SvS2AnWE8ePcfcrFCpwKBRYAeV1u5KJXjxr5y4LLJJAkJNeTYtk
Y6yFOsQq7YGD9GWgQf0T4+jtNxLeFpwsTh89Mzsc85h84ZO5N/9nrVZat1YJh8Ul
3PRRyuqmpH48CONQY5+DiKjfJGxJrIxOUzFuEKHYtmAP2kc9jJsbwjQs+Qm2e68j
ofkL2NT8xQn0GhiLreOOceqNmXxJ3N0yApW2HTs9mXxwr7yTdW5ecNBPyqZGTqFi
uKDp9kpFw7zjuCCNoSa7axrG7teXSyug1tig2PQ6M1CyBhyNTtfrCk5r9M4xAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQULFzi4SMzlIa9Z3UmoouIx4cMWawwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMyMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPfMA0GCSqGSIb3DQEB
CwUAA4IBAQA++t9e/HKXCGt7ucyNXkZkA/a3a1pyC4PUEDwC5pJ+mMsf2V5J0XY1
v+4HVSI95vVjEhAYBxWpIYtEtvx+MCOB49Qq5Qdnp4U80pF3cjPiFb/ytnRwMls1
/+Dhb5SBA9RoNqyNTa6jMAGY7eMUSYZoA3HzOmVHg+3zxiuF5q4vW6R6dr6WiVME
Pq/4UDJQqqLH4b2J2F0pZiG4YVBrLSoTvhWCvACbgWzTGFSai1Y4svfPBHJdjy0J
zoduqEHJBSjPpRNEJ7tjxsYw9tgsQ5Ms67OWb7RcPYVdSL8Frv75oEdu0f2TBgp+
YB9ezQjL4ecSFdMNdwFzHRGexapWd6xb
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:48 2026 by rpki-client