This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5466F6DAFA8B11F087602C8FDAE4EC9C.roa
File:                     5466F6DAFA8B11F087602C8FDAE4EC9C.roa (raw, json)
Hash identifier:          k/s93ntapjyp+h1KXIFOcVvkyT/9WCE0PQJ8rpNOJGI=
Subject key identifier:   CD:29:86:8E:99:F4:14:F0:90:59:76:B1:E0:1D:80:7B:39:48:8E:89
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1DA6
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5466F6DAFA8B11F087602C8FDAE4EC9C.roa
Signing time:             Mon 26 Jan 2026 07:47:57 +0000
ROA not before:           Mon 26 Jan 2026 07:47:53 +0000
ROA not after:            Wed 26 Jan 2028 07:47:53 +0000
asID:                     62943
IP address blocks:        154.16.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Feb 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7590 (0x1da6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 26 07:47:53 2026 GMT
            Not After : Jan 26 07:47:53 2028 GMT
        Subject: CN=69771c2d-ac6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:1b:36:6f:4a:35:dd:d0:02:e8:20:6a:dd:
                    ce:88:c7:50:83:f5:78:64:79:dc:48:3c:a2:59:f2:
                    32:57:50:98:0b:35:a0:4a:07:71:5c:a2:a4:e4:b4:
                    a3:cc:af:d5:46:fe:c6:51:aa:c3:75:89:bd:76:64:
                    cb:80:d9:a7:1f:1d:f3:30:3f:5c:a1:4b:81:24:b2:
                    4c:d8:1a:a4:d9:d5:ce:00:dd:6a:fc:3c:74:88:4f:
                    de:4d:2d:f0:3f:aa:3f:74:60:60:b0:58:9e:89:22:
                    06:f9:ff:f5:cb:21:45:cb:ae:ab:65:65:2e:b5:f8:
                    1c:a4:75:37:34:70:5c:d0:56:c9:d1:49:3b:d3:af:
                    d9:be:05:68:5d:6e:d7:8b:55:72:d1:3c:56:c0:3b:
                    b9:28:23:de:66:66:67:03:c1:ca:50:f9:29:8a:75:
                    bd:fd:11:18:09:53:ca:d4:ca:f0:33:49:6c:86:cd:
                    ec:1b:5f:05:0c:4f:8e:54:e2:39:91:c9:25:ae:6d:
                    f3:8a:0f:7a:ca:37:7f:52:9b:3e:97:99:8f:03:e2:
                    14:7f:bd:74:7c:4c:bb:16:a1:1d:f0:63:70:45:46:
                    1a:da:4b:f5:9e:44:13:47:5d:73:b0:38:8f:35:02:
                    ba:e4:76:e8:8e:68:fd:e3:24:aa:22:99:30:b1:72:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:29:86:8E:99:F4:14:F0:90:59:76:B1:E0:1D:80:7B:39:48:8E:89
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/5466F6DAFA8B11F087602C8FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:bd:38:7e:60:d7:cf:9a:e6:4e:5c:6c:1d:7a:6c:93:d1:
         6c:0a:e5:6b:79:2a:11:bd:f1:24:e5:fe:67:bd:c9:be:43:7c:
         8a:40:9d:f8:69:95:20:b7:ad:e9:26:63:37:29:f2:a1:42:ba:
         f2:2a:a8:95:ca:d2:ca:e1:97:c0:08:b5:cb:c6:3f:2f:5e:70:
         aa:25:50:4c:13:1c:c8:2d:bc:62:d1:08:b0:5f:41:76:25:28:
         78:2a:13:b6:ee:63:d1:b2:76:4e:a7:6f:39:6a:97:5d:29:ae:
         ea:12:53:5c:45:8b:0d:55:4a:56:f5:b0:80:cb:96:73:23:1a:
         9f:fd:ff:a5:58:3d:09:2d:0f:16:16:39:26:65:2c:81:66:88:
         b3:ed:4d:8b:53:ad:aa:c2:69:4d:e7:74:d7:a4:c4:74:ec:fd:
         68:45:c1:a0:8e:eb:80:82:0e:29:d6:b0:0b:ba:38:ab:6e:36:
         c5:3a:a1:97:66:78:de:80:e3:90:35:0b:96:cc:f5:cb:57:55:
         7d:78:c9:80:5d:c3:08:6e:1a:3a:07:3d:f3:83:a8:f1:51:5b:
         3f:7e:a3:bb:5f:b3:40:c7:4a:ce:64:d7:8d:38:5b:ce:85:c8:
         bc:af:32:b4:44:4f:b9:e3:c4:dc:a9:2b:17:26:bb:21:c8:d6:
         78:6d:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 04:14:03 2026 by rpki-client