This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/015730D2CF7411F0A454E58DDAE4EC9C.roa
File:                     015730D2CF7411F0A454E58DDAE4EC9C.roa (raw, json)
Hash identifier:          QIv0DyDj4WhustZ3YZHoGeDgWl8ufi8spRvYkd4cu3I=
Subject key identifier:   86:57:A2:4E:1E:D4:65:C4:2A:09:3A:17:5F:E6:9E:E6:C3:9F:FE:D1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D15
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/015730D2CF7411F0A454E58DDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 11:42:40 +0000
ROA not before:           Tue 02 Dec 2025 11:42:33 +0000
ROA not after:            Thu 02 Dec 2027 11:42:33 +0000
asID:                     60602
IP address blocks:        154.16.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7445 (0x1d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec  2 11:42:33 2025 GMT
            Not After : Dec  2 11:42:33 2027 GMT
        Subject: CN=692ed0b0-d4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:b8:ea:63:1e:93:64:c2:04:48:46:68:83:
                    c7:6f:c3:33:a5:4a:d0:79:e3:5d:91:57:8c:af:bb:
                    0d:4b:24:b7:22:ba:1d:65:a7:a3:3f:c3:61:39:98:
                    9a:83:46:bd:7d:55:84:e4:08:bb:0e:9c:b8:1f:18:
                    3f:18:2b:c1:d5:88:e7:7b:11:20:b1:f3:9f:24:d0:
                    ef:45:bb:56:58:b7:b7:c5:5b:5e:0c:cc:1c:ca:41:
                    54:8c:5d:ce:7a:32:f4:23:50:14:1d:78:ca:9c:b5:
                    26:91:6f:65:0b:5e:b0:fe:10:b7:9d:4a:eb:f4:75:
                    04:87:55:ee:9c:6b:f4:63:0c:02:ca:02:bf:32:cc:
                    1e:d8:47:77:ff:5f:ec:a5:ee:de:f0:b3:8b:01:37:
                    96:dd:f8:eb:66:1b:46:18:94:e6:64:2c:81:8b:a0:
                    20:31:ca:d0:89:75:48:cc:b2:dd:ce:43:f1:ae:ab:
                    c5:9e:03:e2:65:a7:c9:4c:80:a9:d1:1e:f9:01:e3:
                    0f:a0:8e:25:04:ff:4d:fb:79:02:cf:e7:99:dd:e1:
                    ba:ba:0b:d8:46:4b:3a:35:83:a0:bf:b7:0b:e3:bb:
                    26:3e:da:9a:82:7c:1f:ad:eb:72:7c:bf:a8:df:b3:
                    7d:bc:d8:4e:ec:7f:a8:7c:51:f5:3a:a4:d7:28:61:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:57:A2:4E:1E:D4:65:C4:2A:09:3A:17:5F:E6:9E:E6:C3:9F:FE:D1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/015730D2CF7411F0A454E58DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8a:56:91:cf:71:b4:31:9b:c7:2a:6d:3e:ca:3c:5a:30:d6:
         91:03:2d:48:a6:9a:d0:e2:52:07:19:bc:18:c1:81:3d:1f:87:
         25:5a:1d:f9:8a:0b:61:b4:17:a0:88:d6:2f:67:1d:26:23:94:
         72:41:e5:e2:e2:c1:cf:ca:32:13:f6:42:c6:21:20:f9:ae:b8:
         b5:60:f9:7e:1b:72:74:4c:55:4e:3e:3a:80:79:cc:05:15:39:
         61:08:65:d5:e4:60:fc:73:5e:04:75:fb:aa:c1:d7:56:5d:e5:
         f3:4d:fb:7d:83:20:ef:ea:d8:e5:1f:34:ec:62:a1:28:75:36:
         17:b8:06:76:7f:87:2e:d5:d8:ad:1c:ed:34:88:84:c6:b2:a6:
         f1:79:bc:4e:60:10:93:ad:c2:c6:fd:e5:d8:13:28:74:bf:e9:
         3f:56:95:14:1d:d4:73:7e:72:43:cf:22:57:2d:38:6a:1b:a3:
         8b:34:d9:3f:5e:4c:d0:95:0f:5e:10:82:aa:ea:df:12:bd:d5:
         d2:d2:c2:0b:27:d9:2a:57:df:c7:ff:5b:26:61:ba:53:18:13:
         4d:bf:1c:f6:e6:40:a9:33:e0:0a:86:40:89:d6:ca:2f:84:84:
         2a:56:8f:64:a6:98:46:37:27:a0:28:88:83:2d:a3:13:a0:67:
         26:5a:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:49:20 2025 by rpki-client