This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
File:                     898CF67EE7D111F0818DDA7FDAE4EC9C.roa (raw, json)
Hash identifier:          yz+yj3VZbOOjxWLG1fBKYmynhoqx9Fke60A4sHNBTJ4=
Subject key identifier:   97:89:A8:38:21:91:CD:78:AC:8B:78:3F:0C:32:86:DA:16:82:88:D0
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
Signing time:             Fri 02 Jan 2026 11:52:39 +0000
ROA not before:           Fri 02 Jan 2026 11:52:35 +0000
ROA not after:            Sun 02 Jan 2028 11:52:35 +0000
asID:                     198100
IP address blocks:        154.16.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Jan 2026 01:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7536 (0x1d70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan  2 11:52:35 2026 GMT
            Not After : Jan  2 11:52:35 2028 GMT
        Subject: CN=6957b187-19cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:ae:dc:2b:ec:04:84:82:43:b7:3b:f9:05:
                    bf:25:f0:b6:04:d0:98:5c:43:b6:17:8c:fb:12:68:
                    9a:f8:06:42:eb:ee:42:62:d8:67:61:0e:42:22:45:
                    1f:c4:0a:9b:8f:ae:03:5a:e3:c0:05:b9:8f:3d:87:
                    3c:d8:66:69:4f:f0:59:b8:ac:6a:ce:ef:cb:90:46:
                    7d:8b:81:8c:43:1f:bd:f5:d2:ca:68:14:83:1f:3d:
                    e5:e5:83:80:bc:7c:30:a8:0f:12:12:bf:0b:12:fa:
                    6e:08:f4:1e:b0:fe:15:9a:06:4e:d5:8d:50:81:32:
                    94:a5:28:33:8b:f5:b0:b4:df:56:89:21:af:61:50:
                    ed:98:88:1c:7b:c8:1b:48:b2:69:93:69:90:f2:13:
                    fc:9c:3d:d8:75:5e:05:5a:65:b8:b1:28:74:34:fe:
                    f9:8f:9e:f4:db:a4:fb:2f:c6:e9:bb:81:33:b8:c9:
                    e1:5b:3f:69:3b:31:2d:4c:99:01:e3:85:35:7a:76:
                    fc:76:b2:6c:31:78:91:7d:a1:ee:64:5b:b8:99:c7:
                    81:af:bf:2d:88:b6:18:95:03:4e:44:44:48:75:ca:
                    bd:26:29:31:94:88:86:82:5a:85:73:40:61:d2:fb:
                    ce:a1:4a:c5:1e:9a:70:28:a1:fe:6e:11:2b:67:55:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:89:A8:38:21:91:CD:78:AC:8B:78:3F:0C:32:86:DA:16:82:88:D0
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:56:bc:37:b8:23:3d:35:d4:22:0c:01:8a:c6:71:a8:13:
         e8:ca:31:70:d9:9e:a4:66:d7:e5:c8:17:47:e9:82:bd:00:c0:
         81:ac:23:7d:d0:7f:0c:ce:0e:fc:9f:b9:fd:bc:77:60:79:19:
         59:13:0b:47:bc:70:43:4e:60:a1:6e:99:f8:38:f7:ac:07:2c:
         2a:43:0a:3f:e9:4c:64:94:c3:af:86:3f:33:0d:36:1f:35:e6:
         25:0e:8e:15:d9:60:13:de:b2:15:20:67:1a:75:d6:9e:4e:cd:
         45:32:54:56:5d:20:86:2e:dd:f8:e0:3b:0d:70:da:1c:d5:76:
         8b:7f:19:07:a1:2f:b1:34:f4:e7:40:66:98:19:51:da:79:50:
         0d:2d:46:3b:e1:40:17:92:f5:71:b0:e4:70:10:44:ee:2d:03:
         0d:55:56:0e:d6:02:b4:67:1a:e1:50:3b:b9:8b:cd:34:a0:9f:
         70:ef:dd:1b:bc:2a:57:3d:32:7a:18:ac:28:99:47:99:cd:6a:
         b5:f7:8c:ac:f3:ae:4c:48:f5:25:72:31:9a:35:2c:98:e9:77:
         f9:e0:bc:44:57:cf:9e:19:db:06:81:24:6b:95:70:81:b0:cb:
         df:a0:fb:45:dd:d0:3e:dc:92:22:37:fc:8f:0b:e8:28:b8:61:
         f4:da:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 10:37:07 2026 by rpki-client