This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
File:                     9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa (raw, json)
Hash identifier:          RK9dAGK/gtZoUJAFvQqH97/rvZt9P+Ne+uS2kFVa808=
Subject key identifier:   B2:70:79:8B:BB:00:C6:18:F1:8C:38:A7:75:AE:32:A8:57:87:50:67
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D96
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 16:40:51 +0000
ROA not before:           Tue 13 Jan 2026 16:40:46 +0000
ROA not after:            Thu 13 Jan 2028 16:40:46 +0000
asID:                     8220
IP address blocks:        154.16.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7574 (0x1d96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 13 16:40:46 2026 GMT
            Not After : Jan 13 16:40:46 2028 GMT
        Subject: CN=69667593-62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:19:a1:ab:f2:55:08:3a:66:39:d6:ae:9e:
                    e8:9f:f8:fb:4d:50:49:94:9f:fd:52:f7:6e:6e:72:
                    c4:29:6f:9d:20:6f:d0:9e:a3:58:fc:13:8a:e9:50:
                    28:73:37:88:3a:7b:ec:fb:77:dd:fa:1e:ee:68:4a:
                    9a:f4:b7:53:5b:28:5f:cf:49:d2:38:f9:cd:9f:65:
                    75:e9:1b:55:16:0e:95:ea:ac:63:19:04:00:8e:88:
                    9c:64:2a:d3:c4:24:cc:9f:fb:36:b9:1e:02:0f:90:
                    49:68:30:b6:b3:66:b2:bf:36:08:88:c9:ae:9d:7e:
                    3e:98:f3:9a:9a:4a:b6:e4:69:7a:76:f7:f4:6d:ce:
                    2f:1e:fa:21:6b:d4:3c:41:cd:09:2d:66:c7:af:ec:
                    8c:52:ad:f6:64:06:89:14:54:57:2c:ca:b8:df:ac:
                    3e:4b:24:9d:4f:cc:49:d6:31:71:49:85:47:7f:d6:
                    a8:fc:db:33:a2:76:62:8b:24:7b:50:23:62:bb:6b:
                    c1:13:8f:fe:0e:26:c6:51:7e:c1:6b:11:ae:bf:57:
                    2a:52:a5:9c:8c:93:9a:a1:21:5c:07:9a:ca:27:e9:
                    98:98:35:c4:9c:be:5f:09:57:31:e2:23:7b:d3:5c:
                    14:a6:ef:b7:fe:69:c3:e5:8c:bd:3a:3e:49:fc:a2:
                    6b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:79:8B:BB:00:C6:18:F1:8C:38:A7:75:AE:32:A8:57:87:50:67
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:93:fa:d0:81:e5:44:7e:d6:7c:2d:1e:61:65:91:f6:43:1f:
         aa:21:90:88:0d:48:d6:1d:1f:a1:59:bd:4f:1e:ac:ec:a1:8f:
         8b:96:5a:cc:b3:a4:f9:fb:a2:19:8e:a2:a0:6a:86:8d:23:40:
         46:e9:c5:72:05:24:27:b1:97:04:49:ee:c6:f1:b5:f5:7b:9b:
         ac:14:53:ba:0c:4b:c5:68:8a:32:3b:32:f3:0f:1c:e3:c7:ed:
         68:76:b8:95:79:46:05:12:5b:12:1d:95:93:31:fb:f5:97:0f:
         50:45:74:6f:ee:99:c4:bb:1a:8c:a4:1f:9e:86:6d:79:4f:84:
         a5:d4:cf:08:af:c5:2a:32:2c:f1:03:fa:b9:db:58:68:91:df:
         5e:fd:f5:27:d3:31:34:2c:b4:f6:29:e1:d8:cb:0b:42:12:d1:
         7e:ab:cd:a4:95:b2:2c:ea:87:28:c8:d6:24:30:a5:60:e9:a1:
         df:33:d1:f5:45:cb:3b:67:8e:8e:2c:df:6f:6a:f3:5e:36:33:
         f9:8d:1e:c2:a0:49:10:7a:d5:8b:0e:d8:39:f8:3d:3d:ad:48:
         d3:53:4c:e8:d8:98:75:fa:cf:9d:55:46:10:b4:a2:40:08:16:
         f5:ea:34:e8:cb:62:9d:2d:d0:00:ca:6e:1c:1e:15:92:89:6c:
         0f:a7:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:21:07 2026 by rpki-client