This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55621AF8C5D711F0AE26BFA7DAE4EC9C.roa
File:                     55621AF8C5D711F0AE26BFA7DAE4EC9C.roa (raw, json)
Hash identifier:          kX46K346IoZ6uUDBsF5Fo1L3ZwBl0Faq9yXe5ZlRD3k=
Subject key identifier:   0E:37:B2:54:F1:EE:49:70:43:8D:C3:EA:4C:F6:B5:62:73:DB:B1:D7
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1CEF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55621AF8C5D711F0AE26BFA7DAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 06:08:29 +0000
ROA not before:           Thu 20 Nov 2025 06:08:24 +0000
ROA not after:            Sat 20 Nov 2027 06:08:24 +0000
asID:                     834
IP address blocks:        154.127.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Nov 2025 01:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7407 (0x1cef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 20 06:08:24 2025 GMT
            Not After : Nov 20 06:08:24 2027 GMT
        Subject: CN=691eb05d-e9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:0c:af:53:fe:6f:f5:a1:c2:30:84:f0:1c:
                    83:ff:62:65:31:04:8e:b1:d5:80:e2:ac:df:1f:b9:
                    f2:20:c3:96:8f:08:fc:28:05:61:5b:42:6d:aa:56:
                    fd:bf:5e:78:e9:88:dd:58:40:a3:ea:93:f8:44:06:
                    86:0f:fd:ca:ff:6e:98:4b:56:a7:bd:05:cb:e9:ea:
                    56:cb:31:83:7a:27:75:1f:0b:96:98:1c:ef:c2:b2:
                    ea:36:a3:9c:c4:1f:dc:5c:4c:3e:e2:77:08:61:6e:
                    d5:00:40:86:60:72:5f:47:5c:20:0b:52:b0:c0:7e:
                    49:88:ff:33:3c:bd:26:12:ac:d3:47:16:0c:52:38:
                    76:b8:b1:de:0d:d7:da:a5:46:e0:f0:b4:cb:ae:a8:
                    7f:22:92:fc:34:10:ec:bd:6b:c5:cf:cd:cb:0b:28:
                    f6:5e:0f:12:1a:17:f5:a1:c0:de:0f:75:2e:08:dc:
                    d8:a8:9e:22:1e:8b:78:3f:9f:44:5f:a4:d5:4e:13:
                    91:42:34:20:46:2c:71:84:42:43:51:48:fc:f8:49:
                    2a:45:03:e1:c9:88:09:93:b8:5a:38:8f:d4:15:60:
                    7b:c8:c1:61:6a:6c:c8:20:77:85:2c:34:03:cd:db:
                    af:65:57:72:bc:2c:0c:36:b2:c6:bc:a6:a3:a4:33:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:37:B2:54:F1:EE:49:70:43:8D:C3:EA:4C:F6:B5:62:73:DB:B1:D7
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/55621AF8C5D711F0AE26BFA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:6f:c0:a1:49:26:24:17:71:76:cb:fd:63:92:dd:09:67:
         dd:b1:7d:5b:05:71:4b:57:9e:72:c0:9e:bf:99:8f:1f:97:bf:
         31:1e:84:70:fe:d9:fc:2b:88:1e:0e:f4:36:91:d0:98:ff:97:
         42:eb:f0:59:2c:c5:e8:b2:79:f4:c9:f5:b8:fb:47:17:8b:a3:
         74:7c:e0:67:85:7e:c7:4e:f7:04:06:ed:58:db:1b:0c:5b:21:
         b1:23:d7:53:d4:a4:6c:bd:60:0d:3e:ca:1f:57:c5:a5:cf:a7:
         17:94:93:04:33:e0:e6:72:11:55:ae:75:92:5d:9b:da:7d:80:
         75:d1:65:49:ab:32:52:37:64:42:94:e5:30:f8:18:b4:75:a3:
         be:e4:4e:1c:97:38:0d:5f:c7:72:b8:42:56:56:3a:f0:ae:0f:
         1a:61:36:65:e7:c9:af:94:36:26:78:4c:c4:8a:f8:ae:49:5a:
         e1:dc:1f:5f:aa:08:f4:48:bd:02:7b:2e:81:8a:58:66:ae:f0:
         43:f4:1c:5a:04:f8:0e:b3:cc:be:75:a6:ac:c4:14:c4:8c:50:
         fe:85:5d:4b:79:dd:e2:c3:97:dd:9c:ca:17:02:08:a0:f1:99:
         a7:b4:1a:94:a0:25:a7:42:29:7e:d7:59:e7:ea:1b:b6:5a:f1:
         87:1b:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:52:30 2025 by rpki-client