This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
File:                     9D82E42EC48911F0BC7506F4DAE4EC9C.roa (raw, json)
Hash identifier:          Zt/yWAQi6ahROZlkMnNlofa8dpwzGrwyLELVOLgztGc=
Subject key identifier:   C6:DD:7C:4A:B6:54:3E:7A:84:87:17:C8:4A:50:FF:35:8E:B9:2A:62
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1CBE
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 14:19:39 +0000
ROA not before:           Tue 18 Nov 2025 14:19:33 +0000
ROA not after:            Sat 20 Nov 2027 14:19:33 +0000
asID:                     212238
IP address blocks:        154.16.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Nov 2025 01:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7358 (0x1cbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 18 14:19:33 2025 GMT
            Not After : Nov 20 14:19:33 2027 GMT
        Subject: CN=691c807a-ad2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:6b:5d:ca:59:d4:21:d8:66:1b:25:78:d7:
                    35:4e:ee:a4:c0:5e:b3:ac:0c:a9:31:86:55:a0:01:
                    97:be:94:47:57:d6:ab:f8:73:bc:ae:06:ba:7a:b1:
                    be:b2:8e:a7:6b:5b:3d:0a:3c:a9:f9:2b:c4:2c:ef:
                    bc:ca:d9:39:85:54:ae:bc:1c:75:5e:60:0f:7d:39:
                    aa:ff:ad:d6:bd:a8:c0:96:50:d3:3e:97:4c:2e:da:
                    e7:97:99:4c:24:f8:56:a8:94:6c:49:7b:01:09:ff:
                    83:64:e6:34:95:c1:d0:f7:6b:76:82:e8:05:67:d2:
                    d2:3e:b2:8c:47:05:02:e9:7a:fc:31:02:1a:9f:bf:
                    93:ef:2f:1f:0d:b0:06:56:6d:2f:65:59:b9:4f:5a:
                    c2:e5:d3:9e:e5:1b:65:3d:35:04:46:ef:26:3b:a1:
                    73:bd:12:4d:81:85:7e:16:87:30:f1:69:81:3b:14:
                    f7:d9:1b:c5:18:90:a3:cc:e4:25:df:e2:47:49:cb:
                    4e:88:63:d9:39:c5:d7:fd:6f:fe:19:1d:4e:d4:ba:
                    18:dc:37:f2:fe:67:94:41:aa:b4:ac:72:dc:ea:9b:
                    35:27:2a:57:89:a5:cc:9e:c3:d1:59:5c:99:fc:b6:
                    88:01:93:5d:e1:5d:78:8a:fa:15:31:ab:dd:46:1d:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DD:7C:4A:B6:54:3E:7A:84:87:17:C8:4A:50:FF:35:8E:B9:2A:62
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D82E42EC48911F0BC7506F4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:45:0a:49:b4:b6:f3:2d:6c:6e:31:0b:30:9e:3f:9e:3e:
         d1:7f:15:51:c8:ae:41:32:37:78:d0:d1:d4:c3:a5:59:64:2a:
         12:6a:22:c8:f5:de:18:64:a0:17:be:53:59:ff:f4:3f:63:fd:
         1a:67:29:3c:e6:ea:4a:8c:db:65:67:05:3a:c4:35:03:11:cb:
         87:54:df:9b:bf:cb:d3:78:f5:48:99:32:36:8a:6a:c8:83:88:
         a1:f9:55:2a:ef:55:d2:f8:03:d1:bb:e2:1c:7c:69:2f:fa:0a:
         34:94:e8:2c:f3:b5:c4:9a:e4:ce:64:c9:2d:8d:72:50:3e:ed:
         ed:dd:2f:df:52:e9:bc:db:0a:45:4b:2f:2e:bd:d5:bf:e6:0e:
         c3:79:0a:32:56:f3:3e:33:59:bf:91:54:3c:90:b5:14:e1:92:
         6a:e1:48:b8:01:70:66:40:61:cf:73:ec:35:9b:49:db:45:35:
         00:dd:69:4d:47:6f:64:ad:9b:1c:a4:5e:d3:58:2f:22:ab:9f:
         79:3c:6c:81:51:e4:38:1f:e5:27:df:bb:18:d7:34:08:60:a2:
         08:54:d7:98:d1:fe:ae:b9:df:22:05:12:0b:2f:90:c5:7f:15:
         96:84:bf:9d:3d:0a:74:a5:f7:e7:3a:e4:dd:77:60:53:a6:35:
         62:a3:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:52:01 2025 by rpki-client