This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/83E3D206DB3811F0B374F4DBDAE4EC9C.roa
File:                     83E3D206DB3811F0B374F4DBDAE4EC9C.roa (raw, json)
Hash identifier:          34qjKxpSW0bIH6PWUpdvDjDm4+YGbEyAh1sydxcdIW4=
Subject key identifier:   05:C2:9C:7F:4E:D8:D7:72:0D:FC:D9:A8:4F:A7:0F:83:24:C9:19:10
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       087B
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/83E3D206DB3811F0B374F4DBDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 11:07:03 +0000
ROA not before:           Wed 17 Dec 2025 11:06:58 +0000
ROA not after:            Sun 17 Dec 2045 11:06:58 +0000
asID:                     328988
IP address blocks:        196.97.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Dec 17 11:06:58 2025 GMT
            Not After : Dec 17 11:06:58 2045 GMT
        Subject: CN=69428ed7-3187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:a7:e8:27:89:ea:ef:00:e4:2b:84:d0:78:
                    49:4d:24:f7:5e:3b:96:cf:27:cd:42:94:e9:a3:97:
                    f6:67:29:21:5a:45:f4:b1:b6:d9:4a:5d:73:d9:fc:
                    92:d7:a5:46:96:6a:9e:89:43:5f:46:8d:78:22:cc:
                    1f:09:5a:d3:44:80:ee:1e:74:f5:ec:ec:f4:23:4d:
                    d1:e0:22:75:6e:37:56:22:8f:b5:8f:a9:47:8c:4e:
                    63:24:6b:37:cc:60:4d:98:f9:08:92:a6:6c:17:f1:
                    a1:31:50:69:57:60:dd:42:4f:1e:f8:f0:61:3e:1d:
                    54:4a:6d:0f:ad:61:f2:4b:75:62:8d:ba:4d:16:06:
                    3e:ef:04:ff:7b:5d:56:cf:0a:65:18:14:2a:9e:dc:
                    88:6f:7f:18:0c:c2:5f:86:43:6a:6b:af:e3:a2:18:
                    51:45:5e:05:81:63:f0:24:8d:77:45:2b:c6:1b:05:
                    f5:ca:64:67:4e:dc:d7:62:dd:20:b0:45:47:63:9d:
                    38:6e:db:6e:0e:f3:7b:b8:93:b0:b4:8c:36:44:13:
                    0d:43:e2:8c:96:2b:7d:a7:87:91:4b:67:02:87:c8:
                    15:7f:e6:18:23:d5:21:55:55:57:b6:79:6f:a1:58:
                    22:4a:67:90:d2:32:27:ff:3f:44:1c:70:a5:38:04:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:9C:7F:4E:D8:D7:72:0D:FC:D9:A8:4F:A7:0F:83:24:C9:19:10
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/83E3D206DB3811F0B374F4DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.97.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:38:a3:61:f9:f0:90:fa:e1:58:8e:cb:08:fe:65:3b:47:9c:
         03:01:96:87:89:c5:9e:44:38:b1:0e:7d:8c:83:a5:71:ce:5b:
         3e:18:dd:87:00:e7:7b:69:3e:fb:31:65:a8:ac:40:97:9d:99:
         3d:d6:d1:b0:eb:84:b8:ad:22:4a:11:19:6c:21:91:b3:78:17:
         f3:01:0a:0c:2c:a0:e8:8a:50:4b:48:3c:05:91:f3:3c:f4:4a:
         9c:2e:19:79:9b:0c:20:6a:cf:b3:28:79:df:46:c0:03:76:db:
         94:1d:a0:12:3f:b3:87:69:23:09:18:a5:ab:2c:f4:55:08:a8:
         82:12:2c:f5:cd:78:85:5c:f7:ba:58:49:1b:11:9f:64:af:a3:
         76:18:07:ab:43:83:54:0a:55:36:e4:f3:20:dd:d1:8a:1c:c1:
         ce:f7:e3:ff:c2:42:e4:4a:54:ca:5d:ca:30:47:1f:26:53:90:
         3e:f3:af:ae:5c:3d:12:c2:c2:a2:33:7a:b9:ee:4a:a1:d6:4b:
         22:9f:69:a9:70:b6:72:c9:18:44:36:01:fa:94:c4:bf:d2:a8:
         47:c1:08:6f:ed:3b:de:83:c0:58:4c:d9:b9:1f:8d:65:c4:1e:
         1e:80:26:2d:80:fc:8d:1d:d9:70:e9:5d:ac:c0:d2:d6:db:fb:
         18:3e:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:27 2025 by rpki-client