This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/72CF763805E911F1B98A89DBDAE4EC9C.roa
File:                     72CF763805E911F1B98A89DBDAE4EC9C.roa (raw, json)
Hash identifier:          edoFQ4ApGwpDn+eWw3q1r3iAT+Us3UfeNa/c9oBGRmk=
Subject key identifier:   B1:78:A8:0C:D6:E8:54:63:C1:FE:9D:CA:97:B6:10:AE:33:08:FD:B1
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1DCF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/72CF763805E911F1B98A89DBDAE4EC9C.roa
Signing time:             Mon 09 Feb 2026 18:59:24 +0000
ROA not before:           Mon 09 Feb 2026 18:59:19 +0000
ROA not after:            Wed 09 Feb 2028 18:59:19 +0000
asID:                     834
IP address blocks:        154.16.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7631 (0x1dcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb  9 18:59:19 2026 GMT
            Not After : Feb  9 18:59:19 2028 GMT
        Subject: CN=698a2e8c-2aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:cb:20:41:1d:32:3d:e7:43:9a:9f:2f:95:
                    f1:1b:18:5f:13:ef:42:5e:ff:e6:8a:40:e2:b4:5f:
                    1a:b3:72:17:be:af:41:68:53:5e:f9:b4:17:32:e9:
                    4c:58:b8:b7:b4:6f:86:5e:f6:d4:97:cf:ca:ad:84:
                    4e:01:fb:d2:b9:4c:72:ba:4f:a7:bf:a8:08:bd:33:
                    4b:9e:af:5a:8e:76:66:a5:61:91:39:d1:6d:93:24:
                    a7:f6:a2:07:66:81:63:9a:fe:ed:2d:4c:75:41:5d:
                    dc:cf:8c:31:23:48:94:d1:da:74:7c:5b:e8:c5:9f:
                    8e:fa:66:16:c5:44:e2:f1:fe:b8:47:ba:4e:a6:65:
                    ec:4c:5a:1f:3c:71:11:11:c6:45:52:dc:1e:b3:7c:
                    e7:45:da:27:d7:6d:88:50:0d:07:2e:e2:9a:56:c1:
                    da:66:2d:e1:42:0d:60:a2:e0:f6:3e:e8:a6:b5:69:
                    6a:4b:88:15:76:b9:37:c1:69:e0:38:31:ad:d3:27:
                    ae:20:62:e4:04:a2:47:12:56:c6:32:9a:3d:7c:d1:
                    83:1b:ae:0b:cd:29:ea:0a:85:f2:1a:6a:77:9d:41:
                    53:0c:7f:af:cc:6c:26:ee:4e:c4:66:c9:fc:48:0e:
                    56:1f:77:0d:45:eb:6e:1a:92:81:4b:f9:52:ac:f4:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:A8:0C:D6:E8:54:63:C1:FE:9D:CA:97:B6:10:AE:33:08:FD:B1
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/72CF763805E911F1B98A89DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:50:3c:e4:35:14:95:36:d3:a1:bf:38:08:78:54:10:71:52:
         94:e7:6c:ce:fc:67:3b:6d:3d:65:93:c3:9a:f4:1f:04:4f:82:
         03:69:eb:06:f6:12:df:24:51:d5:cf:a8:d8:68:bc:04:42:b1:
         4d:f7:3e:81:51:92:e7:14:5b:8c:8e:28:d4:74:4e:73:13:5f:
         31:43:16:4e:e7:f4:bd:14:cf:ea:b5:05:8f:f5:bb:f0:36:70:
         bc:4b:84:72:78:2c:79:5c:e1:27:84:9d:4b:96:6d:cd:8d:e8:
         41:de:71:dd:96:26:ff:5c:09:3d:e4:b3:bb:48:9b:71:d9:02:
         bc:41:0e:21:5b:41:7a:64:d8:e4:3a:a6:54:54:dd:7e:77:02:
         4f:01:63:b1:8f:fc:31:01:20:b9:ed:96:bd:d4:55:02:15:2c:
         50:b8:17:2c:92:4f:e5:1f:23:8e:26:ff:19:ad:5f:08:7e:af:
         86:f3:db:1b:ca:9d:6a:a3:1d:73:02:c1:51:25:92:53:22:5c:
         f4:e7:6e:d5:59:8b:2d:4d:a4:ed:30:1e:e2:39:50:d7:fc:d2:
         64:42:82:41:10:e0:18:e0:e5:9b:72:1c:5f:07:3e:00:7d:91:
         3e:a8:76:ef:a5:47:e7:df:84:5a:27:d1:89:cd:e1:46:df:38:
         7e:a9:ce:ba
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHc8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAyMDkxODU5MTlaFw0yODAyMDkxODU5MTlaMBgxFjAU
BgNVBAMTDTY5OGEyZThjLTJhZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSIMsgQR0yPedDmp8vlfEbGF8T70Je/+aKQOK0Xxqzche+r0FoU175tBcy
6UxYuLe0b4Ze9tSXz8qthE4B+9K5THK6T6e/qAi9M0uer1qOdmalYZE50W2TJKf2
ogdmgWOa/u0tTHVBXdzPjDEjSJTR2nR8W+jFn476ZhbFROLx/rhHuk6mZexMWh88
cRERxkVS3B6zfOdF2ifXbYhQDQcu4ppWwdpmLeFCDWCi4PY+6Ka1aWpLiBV2uTfB
aeA4Ma3TJ64gYuQEokcSVsYymj180YMbrgvNKeoKhfIaanedQVMMf6/MbCbuTsRm
yfxIDlYfdw1F624akoFL+VKs9Cy/AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsXio
DNboVGPB/p3Kl7YQrjMI/bEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzcyQ0Y3NjM4MDVFOTExRjFCOThBODlEQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaELowDQYJKoZIhvcNAQEL
BQADggEBAJpQPOQ1FJU206G/OAh4VBBxUpTnbM78ZzttPWWTw5r0HwRPggNp6wb2
Et8kUdXPqNhovARCsU33PoFRkucUW4yOKNR0TnMTXzFDFk7n9L0Uz+q1BY/1u/A2
cLxLhHJ4LHlc4SeEnUuWbc2N6EHecd2WJv9cCT3ks7tIm3HZArxBDiFbQXpk2OQ6
plRU3X53Ak8BY7GP/DEBILntlr3UVQIVLFC4FyyST+UfI44m/xmtXwh+r4bz2xvK
nWqjHXMCwVElklMiXPTnbtVZiy1NpO0wHuI5UNf80mRCgkEQ4Bjg5ZtyHF8HPgB9
kT6odu+lR+ffhFon0YnN4UbfOH6pzro=
-----END CERTIFICATE-----
Generated at Tue Feb 10 06:36:51 2026 by rpki-client