This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948BD19AD51011F08BF008B9DAE4EC9C.roa
File:                     948BD19AD51011F08BF008B9DAE4EC9C.roa (raw, json)
Hash identifier:          Rhzqd5NuqbTHc6elEXy8Ql9hmP4lpvJnntK6pieBuXE=
Subject key identifier:   E5:73:60:EF:6F:D8:41:0C:62:DB:DF:8D:53:79:7C:FB:C1:1F:60:AB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D2A
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948BD19AD51011F08BF008B9DAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 15:06:04 +0000
ROA not before:           Tue 09 Dec 2025 15:05:59 +0000
ROA not after:            Thu 09 Dec 2027 15:05:59 +0000
asID:                     212238
IP address blocks:        154.16.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7466 (0x1d2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec  9 15:05:59 2025 GMT
            Not After : Dec  9 15:05:59 2027 GMT
        Subject: CN=69383adc-2c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:f5:e9:8e:79:7f:5e:29:58:dd:c7:cf:be:
                    7f:d8:c2:c7:e1:78:5a:15:58:94:0a:37:92:3c:88:
                    37:73:ef:91:80:19:c1:4a:63:8d:6e:c8:7f:2d:35:
                    c0:48:72:85:ab:57:71:f2:f8:40:a7:d5:7c:67:6b:
                    10:1c:d2:c2:b5:3f:ab:40:2b:f4:86:d5:77:d1:9e:
                    95:25:23:06:3b:7f:34:88:e5:f9:14:b8:b2:13:10:
                    38:9c:c6:c5:8b:13:3b:97:b9:5c:5e:29:ac:d5:85:
                    11:b6:2e:b1:c6:69:59:11:ca:a2:82:7e:0c:ba:7e:
                    35:29:a0:f0:5c:9d:27:3a:c9:6a:cd:4a:ed:59:0d:
                    35:8b:1b:59:73:14:e9:7f:00:b6:60:82:c2:fc:67:
                    dc:97:1d:7a:db:bf:37:3c:8e:93:ff:d5:22:4b:dd:
                    29:32:07:bb:9c:af:29:e0:74:92:d6:87:fa:e8:ed:
                    18:42:66:c9:3a:20:77:60:10:96:ea:87:8b:9e:4f:
                    c1:7b:01:52:b2:e0:93:cc:ae:c8:31:9f:1c:50:50:
                    86:8d:dd:ba:3a:83:7a:eb:f6:ed:33:2c:36:7b:1b:
                    72:3e:14:41:55:7d:65:9b:84:61:48:61:fa:8e:0c:
                    36:23:af:50:7c:20:29:32:d6:c7:7c:85:eb:57:fd:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:73:60:EF:6F:D8:41:0C:62:DB:DF:8D:53:79:7C:FB:C1:1F:60:AB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/948BD19AD51011F08BF008B9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:14:a1:98:ac:fd:f3:de:fb:e7:34:b7:89:a6:21:93:5c:09:
         da:14:f1:36:d5:41:d5:71:dd:af:b7:38:57:3a:b6:bf:2e:a3:
         36:50:6e:5c:ef:6c:a2:68:db:bd:b7:49:88:99:5d:80:b7:fc:
         ae:0c:1b:7b:75:a8:bf:18:8c:1b:19:e2:1c:d3:31:6e:62:e7:
         aa:ef:b5:05:e7:fc:2b:c1:ea:42:d5:10:0c:88:6f:c5:ba:ff:
         f9:4a:15:ee:83:1f:b3:9a:48:18:d8:57:9f:54:9b:b6:56:be:
         65:e0:cb:d3:07:17:b3:f3:4c:52:8e:a9:c2:eb:b9:7c:79:4d:
         b7:63:9f:8b:d7:8f:42:eb:f2:3f:30:91:d9:5c:e5:b5:4b:f4:
         57:a2:53:50:73:f5:7e:e4:e4:5c:60:07:01:4a:21:14:b3:a4:
         a1:33:58:fc:58:71:0e:70:08:bd:6e:05:1b:85:af:99:ef:f1:
         42:26:b2:d9:4f:a7:e3:0e:8c:3b:80:9c:e5:22:57:43:cb:5a:
         36:ad:a7:e3:d4:e8:8a:df:c1:f0:42:5b:b3:82:83:8b:e4:f1:
         f3:05:04:1f:c7:16:45:84:97:2a:ae:cb:de:0a:f1:36:dc:8f:
         4e:19:da:29:b8:ce:63:f7:a1:bb:11:19:e1:5e:ae:12:58:ee:
         1e:24:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:13:41 2025 by rpki-client