This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5090EDECD65811F0946B17CEDAE4EC9C.roa
File:                     5090EDECD65811F0946B17CEDAE4EC9C.roa (raw, json)
Hash identifier:          WR9j3k542EE2RwwT8x8oJ/4BT1rIm/VCRQ69dOjH2AE=
Subject key identifier:   16:E8:CD:7C:12:05:43:09:CD:97:CF:D4:FD:77:86:18:ED:E9:1F:61
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D32
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5090EDECD65811F0946B17CEDAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 06:12:05 +0000
ROA not before:           Thu 11 Dec 2025 06:12:00 +0000
ROA not after:            Sat 11 Dec 2027 06:12:00 +0000
asID:                     834
IP address blocks:        154.16.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7474 (0x1d32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 11 06:12:00 2025 GMT
            Not After : Dec 11 06:12:00 2027 GMT
        Subject: CN=693a60b5-0602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:44:ff:c1:de:a5:54:85:ab:e7:53:98:2b:
                    40:ad:b7:aa:1e:0f:b2:34:5a:d9:a3:66:23:3e:94:
                    b2:71:df:f1:3e:68:83:e7:fb:e9:7a:2c:db:cd:df:
                    50:b0:9b:8d:5a:f3:9a:2a:4f:0f:85:b1:ee:20:91:
                    96:5c:c2:d8:b8:74:dd:d2:54:7a:de:e3:7a:fe:c8:
                    ba:d8:b9:0f:50:a8:2c:81:db:61:40:8d:a8:98:8b:
                    d8:24:9e:9a:b8:fb:fb:36:be:9e:5a:d0:7d:c6:d6:
                    31:13:43:bd:8d:2f:7d:4f:5b:c2:49:58:96:58:d4:
                    cb:18:63:14:fc:98:5b:96:8e:4f:89:4e:51:d2:a4:
                    1a:c4:8d:bf:de:33:b4:40:42:ef:d7:3e:24:b5:1c:
                    fe:76:79:09:2d:cf:ab:3f:b2:75:aa:7a:df:6a:ea:
                    97:21:ae:74:05:aa:13:6a:44:8d:2f:93:b4:a0:6d:
                    36:21:a6:f5:56:c0:f6:75:ca:49:25:54:6f:de:9f:
                    e9:4a:87:c9:29:f6:63:32:65:0c:99:94:84:e5:51:
                    1c:f2:73:56:6c:97:ec:6d:24:eb:0a:10:a7:bc:93:
                    af:7c:42:ab:92:77:d5:c2:89:cb:d1:70:c8:f8:86:
                    9e:53:62:f0:0a:94:68:9a:d6:e2:91:c1:1a:08:0f:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E8:CD:7C:12:05:43:09:CD:97:CF:D4:FD:77:86:18:ED:E9:1F:61
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5090EDECD65811F0946B17CEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fe:02:d3:35:a7:7f:33:31:3a:31:6a:22:03:c2:c4:5f:34:
         eb:94:94:77:e2:f3:33:04:be:d4:f6:f5:c6:f5:74:e1:20:db:
         18:41:49:59:a1:95:9b:72:50:bb:d0:cc:af:ae:52:a5:d1:d0:
         5e:ab:f5:95:48:cb:7b:e7:40:68:23:41:76:6c:1a:ea:da:04:
         d3:ac:8c:6f:d4:32:c2:cb:d7:a1:5b:62:d3:fa:05:75:2b:5b:
         2c:fa:e1:92:87:a7:2a:e6:9e:34:1e:07:d5:a7:a3:6a:ec:e1:
         cb:52:f4:03:10:84:78:ae:0a:5f:f8:e1:5f:e2:ba:5a:27:d0:
         fa:b9:6a:f6:dc:a8:80:94:a4:35:d7:fa:52:68:be:17:20:53:
         cf:1c:2f:94:00:cb:42:08:12:dd:3f:5a:98:bb:c4:7d:82:10:
         71:05:d8:99:cf:04:ec:51:d5:ac:be:96:45:47:af:6d:7f:42:
         74:8b:1b:da:97:ee:62:6e:a9:76:fb:e5:86:2e:c0:54:76:e9:
         91:3f:af:5a:76:e6:dc:33:55:e5:6d:84:4a:04:e2:30:0b:bf:
         74:85:c1:68:92:65:9d:6b:32:ce:a2:1d:1d:b7:ae:0d:fa:2c:
         dc:be:b5:ac:26:0c:02:ed:62:ae:37:40:22:a9:b9:56:e5:f8:
         4c:f4:47:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHTIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNTEyMTEwNjEyMDBaFw0yNzEyMTEwNjEyMDBaMBgxFjAU
BgNVBAMTDTY5M2E2MGI1LTA2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFl0T/wd6lVIWr51OYK0Ctt6oeD7I0WtmjZiM+lLJx3/E+aIPn++l6LNvN
31Cwm41a85oqTw+Fse4gkZZcwti4dN3SVHre43r+yLrYuQ9QqCyB22FAjaiYi9gk
npq4+/s2vp5a0H3G1jETQ72NL31PW8JJWJZY1MsYYxT8mFuWjk+JTlHSpBrEjb/e
M7RAQu/XPiS1HP52eQktz6s/snWqet9q6pchrnQFqhNqRI0vk7SgbTYhpvVWwPZ1
ykklVG/en+lKh8kp9mMyZQyZlITlURzyc1Zsl+xtJOsKEKe8k698QquSd9XCicvR
cMj4hp5TYvAKlGia1uKRwRoID+2JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFujN
fBIFQwnNl8/U/XeGGO3pH2EwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzUwOTBFREVDRDY1ODExRjA5NDZCMTdDRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGAwDQYJKoZIhvcNAQEL
BQADggEBAC/+AtM1p38zMToxaiIDwsRfNOuUlHfi8zMEvtT29cb1dOEg2xhBSVmh
lZtyULvQzK+uUqXR0F6r9ZVIy3vnQGgjQXZsGuraBNOsjG/UMsLL16FbYtP6BXUr
Wyz64ZKHpyrmnjQeB9Wno2rs4ctS9AMQhHiuCl/44V/iulon0Pq5avbcqICUpDXX
+lJovhcgU88cL5QAy0IIEt0/Wpi7xH2CEHEF2JnPBOxR1ay+lkVHr21/QnSLG9qX
7mJuqXb75YYuwFR26ZE/r1p25twzVeVthEoE4jALv3SFwWiSZZ1rMs6iHR23rg36
LNy+tawmDALtYq43QCKpuVbl+Ez0R8Q=
-----END CERTIFICATE-----
Generated at Fri Dec 12 13:13:41 2025 by rpki-client