This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa
File:                     37372e37352e3139352e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          dgmPK09iXzDYDpxJIMfPKXQZ3IRk+qztTi97JwxEWHU=
Subject key identifier:   D9:66:1D:99:A0:1D:CE:82:76:B6:BD:E0:55:47:93:5A:77:E1:38:4F
Certificate issuer:       /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial:       09289649347EC16DE45C3E01A4D8B7CCEB6F7832
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa
Signing time:             Mon 19 Jan 2026 13:55:34 +0000
ROA not before:           Mon 19 Jan 2026 13:50:34 +0000
ROA not after:            Mon 18 Jan 2027 13:55:34 +0000
asID:                     16276
IP address blocks:        77.75.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
                          rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 16:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:28:96:49:34:7e:c1:6d:e4:5c:3e:01:a4:d8:b7:cc:eb:6f:78:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
        Validity
            Not Before: Jan 19 13:50:34 2026 GMT
            Not After : Jan 18 13:55:34 2027 GMT
        Subject: CN=D9661D99A01DCE8276B6BDE05547935A77E1384F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b5:6c:81:43:79:71:14:09:6d:81:fb:2b:9c:
                    da:84:82:4d:56:09:90:f7:99:6b:ee:00:7b:90:76:
                    55:3c:3f:db:8f:32:57:6e:ff:ef:44:4f:df:69:db:
                    37:a2:56:5e:dd:76:5c:10:cc:d7:20:ec:ce:c5:d1:
                    84:f9:ca:ee:83:b7:ff:43:3d:71:48:7f:af:91:a2:
                    18:97:b1:3c:02:66:5d:4e:e6:4e:ea:73:d8:14:d6:
                    e3:7b:28:c4:3b:26:1b:ff:5c:1a:1c:c2:36:db:60:
                    2d:36:c9:1d:91:c3:36:12:05:45:bd:78:46:ea:f8:
                    96:ef:3f:2d:27:f6:56:35:91:cb:9e:c7:6b:a7:ab:
                    70:b4:41:3a:47:11:54:fb:81:1a:8c:6d:42:25:0d:
                    c0:69:42:c7:0c:37:ec:bf:1a:ef:9d:4f:e7:7b:7d:
                    f4:d5:bb:9d:1a:66:4e:6d:9f:d9:4e:87:44:3c:d8:
                    08:0e:28:82:96:0d:f7:41:9a:50:84:45:56:16:01:
                    7b:6f:97:90:c8:04:b4:15:11:c5:08:63:9f:96:71:
                    12:e2:20:b5:c1:55:24:1a:c2:5f:c0:a8:6f:6b:eb:
                    57:71:53:20:5e:9c:d4:23:ab:15:e6:36:7a:8d:e8:
                    c2:18:15:b4:3c:b7:d5:37:3b:3c:3d:28:00:09:9a:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:66:1D:99:A0:1D:CE:82:76:B6:BD:E0:55:47:93:5A:77:E1:38:4F
            X509v3 Authority Key Identifier:
                keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:66:a2:fc:a3:15:ab:86:86:ad:ad:8a:74:5b:8e:d3:07:c5:
         95:c3:4c:6a:a7:1c:29:84:40:1d:68:67:7d:cf:8d:13:77:f0:
         7d:f8:f6:94:33:ff:ab:2e:0e:f3:ad:35:3f:ae:e9:ba:7e:c9:
         c9:91:65:a6:35:3d:77:fe:5a:73:1c:89:51:2a:b7:a3:ca:7f:
         95:8e:f0:9e:6a:27:5f:6d:83:c0:5b:99:93:9c:c0:36:ac:7c:
         2d:fe:d6:bb:11:8c:4c:34:ab:22:2f:4e:44:af:92:f8:fd:bc:
         2b:35:38:c4:ca:3d:23:94:ed:71:00:13:de:bc:a4:2a:d4:ba:
         c9:46:8d:75:47:c2:d9:63:c6:04:8b:e4:f3:90:0e:70:2e:cd:
         77:af:5c:9b:2e:bf:66:04:3e:f5:66:83:16:90:8c:9f:86:f5:
         57:94:62:da:00:86:f3:c9:91:ff:3b:ec:3b:47:c5:3b:2d:04:
         e9:cd:0e:35:4e:2c:d3:72:5d:63:69:92:6d:29:73:4e:f7:f0:
         46:0e:5d:5b:ca:40:f8:d3:b9:b3:46:66:8d:b2:3b:ee:35:91:
         2e:39:f1:9e:14:cb:ae:a7:b0:fd:16:83:4d:02:e0:d7:c9:6a:
         4d:8c:0a:a8:95:f0:2d:02:fe:c3:60:5e:ac:00:3b:55:81:0b:
         3e:4b:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:02:41 2026 by rpki-client