This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa
File:                     D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa (raw, json)
Hash identifier:          1WlQj4309rmMEuDFbG4TCzXscQ6wxxa2/yO0H6jLRvo=
Subject key identifier:   08:54:F4:F2:62:39:89:FF:11:DD:71:20:EF:CA:21:29:A8:B2:F7:3F
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       023C
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 07:10:38 +0000
ROA not before:           Fri 19 Dec 2025 07:10:23 +0000
ROA not after:            Tue 19 Dec 2028 07:10:23 +0000
asID:                     328596
IP address blocks:        192.145.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Dec 19 07:10:23 2025 GMT
            Not After : Dec 19 07:10:23 2028 GMT
        Subject: CN=6944fa6e-faaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:ab:e5:e1:06:25:11:a5:7d:de:9b:4a:09:
                    e6:98:09:e7:49:55:4b:06:f4:f0:eb:05:65:b9:28:
                    3f:44:86:6f:71:49:dc:62:1a:2a:0d:08:3b:ad:95:
                    3a:93:a4:d9:9b:e1:ee:46:2c:c9:79:9d:28:40:cb:
                    14:b6:52:c6:cf:1c:e8:48:84:9b:5b:f1:7a:0a:e4:
                    4a:52:47:18:01:29:59:78:6d:1d:59:86:7f:6a:2d:
                    77:0b:db:82:cd:c5:8e:e8:0e:02:d9:a6:33:64:56:
                    6c:33:eb:e3:20:99:21:1a:5c:e6:7a:01:79:e7:8f:
                    70:9e:53:19:79:eb:c9:08:64:50:e3:dd:74:c5:6c:
                    1f:52:0d:31:b3:ce:c7:f0:e9:c8:e2:8b:bf:d1:b3:
                    71:bf:bf:83:c7:0f:13:3c:17:a5:12:b1:61:54:66:
                    7e:75:e4:78:f3:af:f5:3f:6c:f9:7f:60:8f:9b:42:
                    59:b3:70:94:0f:fb:3d:8e:9d:50:36:de:cd:e9:37:
                    53:4a:21:83:70:13:df:1a:36:39:a6:18:fb:f9:dc:
                    c0:7a:56:21:ab:61:bb:29:0c:2a:77:af:75:b3:61:
                    1c:88:04:c4:3e:96:09:d7:7c:dc:07:ef:ff:41:27:
                    af:38:cf:51:cc:9d:b3:c6:23:4f:c7:1c:32:2a:9e:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:F4:F2:62:39:89:FF:11:DD:71:20:EF:CA:21:29:A8:B2:F7:3F
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/D1E82CD2DCA911F0A5AE17E9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:9c:26:0c:be:2d:7c:23:97:0e:09:ec:73:82:4d:64:99:
         0a:cb:1f:79:26:ae:a5:9b:17:44:77:45:9b:ae:5d:4b:02:76:
         4e:86:46:4f:2a:27:6e:06:85:93:44:df:b5:99:fb:bc:3b:3c:
         20:f5:97:b1:dc:dd:01:c6:7b:d8:9a:c5:e1:71:d5:11:fe:a2:
         ec:7d:df:98:b9:02:10:22:6d:37:ca:e3:51:aa:9b:20:90:1c:
         f0:b5:38:b9:fe:90:61:04:6e:b3:c8:22:12:f2:2d:50:67:25:
         75:df:0f:89:28:cd:29:8e:c5:3a:dc:e9:5d:b5:b8:77:d1:9b:
         f8:a0:7c:3a:dc:30:c9:0c:bf:fb:d0:b0:9d:45:19:a4:c9:4c:
         00:52:c0:e0:fa:bb:4c:ec:9a:77:9f:2f:ed:25:75:32:fa:18:
         d4:ff:5a:70:70:bd:a1:8d:1f:e1:6a:c4:b7:09:33:ea:33:56:
         fe:9a:1d:36:ad:6e:c5:13:14:b1:a8:d1:30:46:d2:ff:18:82:
         f6:f9:aa:53:53:c8:1a:e8:3e:76:e8:06:e8:05:03:c2:ab:3a:
         01:8b:9b:a2:1d:0f:12:e9:95:13:01:5a:70:83:e7:99:c9:54:
         be:64:b6:bb:ca:91:fa:d4:1d:0e:d2:18:1a:ef:d5:f7:09:9e:
         7b:3c:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:12:49 2025 by rpki-client