This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F6F1C1AC49111F08ACF9CA9DAE4EC9C.roa
File:                     8F6F1C1AC49111F08ACF9CA9DAE4EC9C.roa (raw, json)
Hash identifier:          hfrOkJNQTrPSFT0JmkdzU5iL0qjUiSbxFKgaQyb43mc=
Subject key identifier:   6B:0F:89:41:B7:26:40:18:A6:F9:82:04:EC:54:74:DB:D6:F8:4D:0A
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1CDF
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F6F1C1AC49111F08ACF9CA9DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 15:16:31 +0000
ROA not before:           Tue 18 Nov 2025 15:16:26 +0000
ROA not after:            Sat 20 Nov 2027 15:16:26 +0000
asID:                     212238
IP address blocks:        154.16.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Nov 2025 01:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7391 (0x1cdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 18 15:16:26 2025 GMT
            Not After : Nov 20 15:16:26 2027 GMT
        Subject: CN=691c8dcf-827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:31:25:78:9d:26:58:03:3b:33:f5:a3:17:
                    d9:10:32:26:12:49:ea:f6:b0:1c:fb:3b:1e:37:1d:
                    dc:ab:e4:ae:99:9e:69:d6:8c:40:74:d8:de:19:f7:
                    74:57:fb:58:57:c0:42:6f:5c:62:63:10:73:e9:68:
                    d8:14:f0:5d:61:4c:34:ed:98:ad:37:db:6a:3d:c3:
                    05:21:be:79:01:03:48:89:6e:ea:ef:d0:27:e1:26:
                    17:f9:75:02:e5:3c:0c:5e:4d:8d:ae:9d:ac:1d:ea:
                    f6:46:be:b9:83:a1:0b:39:f6:b5:23:cc:74:ea:79:
                    2b:d3:fe:49:15:de:05:bd:9d:ca:2a:07:66:bc:63:
                    c6:42:c5:09:54:94:3e:40:ad:c2:fe:c3:79:6c:11:
                    4b:73:fa:b7:55:59:1e:e4:86:a0:39:fa:b7:c2:c6:
                    6c:e5:92:d1:39:ac:37:88:6a:a9:0a:89:b0:f4:a9:
                    e8:ae:68:05:21:e7:0f:ed:d3:c9:cc:9e:80:b8:4a:
                    6f:7b:f1:31:90:75:d3:08:e1:43:3d:fa:93:9b:7b:
                    ea:37:ee:50:4c:f2:c2:98:83:17:df:86:a0:61:4a:
                    c4:0d:a7:08:59:3e:a2:08:61:3f:2d:7d:18:bf:0a:
                    2c:19:51:20:58:64:87:6a:37:d6:ab:b4:cd:52:02:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0F:89:41:B7:26:40:18:A6:F9:82:04:EC:54:74:DB:D6:F8:4D:0A
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/8F6F1C1AC49111F08ACF9CA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:51:90:e4:78:76:1c:95:8c:bf:36:d3:dd:57:09:c2:14:
         46:8c:56:51:3b:b0:d9:44:4b:63:96:44:f9:78:aa:49:2b:22:
         0c:e3:e6:ef:e3:c1:01:fe:2f:d3:04:ee:d1:30:b1:da:e2:8b:
         cc:89:12:97:b0:e2:cb:da:e4:bd:7e:66:0a:2e:f5:6a:5e:79:
         d3:40:dd:05:da:a4:57:cc:22:a2:d8:b4:bf:fb:ba:16:8a:2c:
         5c:c3:74:c8:63:30:11:ef:ca:6f:4e:7e:5f:c4:21:95:19:c8:
         21:06:94:8b:fc:b4:bc:9f:4f:cb:39:a4:ec:17:ed:89:a4:e5:
         43:f7:d3:00:e2:f6:8d:69:82:43:24:61:ea:44:98:9b:ed:eb:
         9f:53:b8:da:2b:b0:7c:83:e8:4a:0f:0e:2b:09:21:12:e8:7a:
         0f:d0:c5:eb:15:20:52:7b:68:7d:d8:72:f5:1e:d2:50:81:ff:
         8c:13:12:22:38:c2:97:f6:1f:9e:e0:21:74:85:41:34:64:89:
         68:ef:89:b3:62:56:fe:c3:8b:b4:ae:69:e5:e4:d5:03:ed:de:
         04:2f:14:e4:00:08:1a:18:ec:e4:14:e1:66:97:d8:8f:98:22:
         08:3e:44:41:20:9a:17:df:95:2c:a9:d8:ae:82:d0:13:8f:47:
         e4:ff:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:51:16 2025 by rpki-client