This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
File:                     ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa (raw, json)
Hash identifier:          fez3VFbI5DWKwISQt2buuQKu/T+6AQw86T7mj8Hw4Y8=
Subject key identifier:   1E:E2:15:56:5B:57:BC:8F:79:B7:CE:03:14:5B:3E:16:9C:2E:51:06
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D93
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 14:18:05 +0000
ROA not before:           Tue 13 Jan 2026 14:18:00 +0000
ROA not after:            Thu 13 Jan 2028 14:18:00 +0000
asID:                     212238
IP address blocks:        154.16.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7571 (0x1d93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 13 14:18:00 2026 GMT
            Not After : Jan 13 14:18:00 2028 GMT
        Subject: CN=6966541d-5e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:6d:d4:3c:96:9b:94:43:ed:01:40:03:57:
                    8a:4d:81:46:56:2d:69:fe:ed:e4:95:57:84:03:12:
                    5a:08:60:41:17:da:bb:ed:18:6c:55:b4:69:e0:71:
                    89:60:3e:5a:d7:30:2e:f3:21:a0:93:79:12:ef:78:
                    26:5b:31:e3:2f:1b:61:19:59:7d:a7:de:b7:a1:35:
                    d8:82:1f:ab:3a:2d:f3:b5:a3:7e:13:0a:f5:79:af:
                    0c:b8:af:53:1f:07:ac:f1:4c:2d:03:e1:87:2f:8c:
                    d3:82:86:e5:54:d2:b7:b3:ea:43:63:1a:90:8b:47:
                    c6:ad:d8:0d:4f:ce:2f:7b:fd:98:70:3c:fd:dc:3b:
                    e7:1b:b7:4e:5f:6f:1d:4d:d3:04:1d:a3:bf:c2:3d:
                    47:75:74:73:2b:b5:0a:10:15:d0:21:a7:ec:11:79:
                    be:24:aa:ca:20:40:aa:ba:8e:d7:99:4b:8a:e9:22:
                    45:a8:d3:3d:c4:06:01:52:90:5d:d5:98:e8:43:ea:
                    65:44:4f:ba:34:48:7d:ec:2f:65:d4:d0:82:e9:4b:
                    9e:bf:fd:e4:e0:3e:e0:c9:88:30:4b:e7:46:30:5f:
                    52:db:0c:aa:b3:42:a7:3c:09:c2:e0:c4:36:f8:31:
                    48:20:1c:a1:9d:95:e4:00:32:73:23:45:3e:cc:6e:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:15:56:5B:57:BC:8F:79:B7:CE:03:14:5B:3E:16:9C:2E:51:06
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:9e:e8:8d:eb:ef:6b:4e:af:cc:0f:0f:0e:00:27:bd:49:d2:
         2e:0b:18:54:86:e2:db:91:bf:f9:3d:65:bc:e0:01:63:ff:e1:
         72:1c:4a:8e:8d:e3:d1:be:7d:07:c8:ea:a2:ef:03:ac:06:3c:
         6d:22:96:ba:1d:ab:5a:48:13:28:a1:85:52:26:2c:93:f8:23:
         49:15:65:a2:63:f5:76:0d:08:35:3b:53:88:f3:20:5e:d8:dd:
         28:65:b4:f7:de:0e:e2:b7:ee:f3:ec:af:bd:9f:7f:1a:87:07:
         61:5b:3d:ea:8b:36:2e:ea:86:c6:77:5f:b5:11:13:49:42:40:
         12:e7:e3:eb:5e:8d:2d:d9:2e:bf:a7:93:ca:68:64:27:31:88:
         56:fe:6d:3e:47:ba:1f:b2:08:c0:47:35:43:79:d3:08:5f:86:
         d9:a6:e6:0e:02:c6:7d:57:eb:de:be:44:26:4f:c0:ea:09:bf:
         64:d3:bb:6b:6a:b5:ef:e4:6a:5d:63:13:13:4e:76:92:6d:15:
         33:c5:1a:f8:6e:70:3e:af:ee:a5:01:91:7c:a8:b9:16:a2:1e:
         57:bc:f1:d9:1d:1b:c8:00:b9:34:e9:11:e9:56:67:d3:2f:72:
         ed:d8:63:71:6c:58:33:56:81:07:df:5a:52:21:80:90:16:5e:
         c4:62:00:1a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHZMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAxMTMxNDE4MDBaFw0yODAxMTMxNDE4MDBaMBgxFjAU
BgNVBAMTDTY5NjY1NDFkLTVlNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwh23UPJablEPtAUADV4pNgUZWLWn+7eSVV4QDEloIYEEX2rvtGGxVtGng
cYlgPlrXMC7zIaCTeRLveCZbMeMvG2EZWX2n3rehNdiCH6s6LfO1o34TCvV5rwy4
r1MfB6zxTC0D4YcvjNOChuVU0rez6kNjGpCLR8at2A1Pzi97/ZhwPP3cO+cbt05f
bx1N0wQdo7/CPUd1dHMrtQoQFdAhp+wReb4kqsogQKq6jteZS4rpIkWo0z3EBgFS
kF3VmOhD6mVET7o0SH3sL2XU0ILpS56//eTgPuDJiDBL50YwX1LbDKqzQqc8CcLg
xDb4MUggHKGdleQAMnMjRT7MbhnZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHuIV
VltXvI95t84DFFs+FpwuUQYwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4L0FDRTE4RkY2RjA4QTExRjBCMjAxRkRBNURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEI4wDQYJKoZIhvcNAQEL
BQADggEBAESe6I3r72tOr8wPDw4AJ71J0i4LGFSG4tuRv/k9ZbzgAWP/4XIcSo6N
49G+fQfI6qLvA6wGPG0ilrodq1pIEyihhVImLJP4I0kVZaJj9XYNCDU7U4jzIF7Y
3ShltPfeDuK37vPsr72ffxqHB2FbPeqLNi7qhsZ3X7URE0lCQBLn4+tejS3ZLr+n
k8poZCcxiFb+bT5Huh+yCMBHNUN50whfhtmm5g4Cxn1X696+RCZPwOoJv2TTu2tq
te/kal1jExNOdpJtFTPFGvhucD6v7qUBkXyouRaiHle88dkdG8gAuTTpEelWZ9Mv
cu3YY3FsWDNWgQffWlIhgJAWXsRiABo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:17 2026 by rpki-client