This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B407D140CA2511F090C0DFCCDAE4EC9C.roa
File:                     B407D140CA2511F090C0DFCCDAE4EC9C.roa (raw, json)
Hash identifier:          NhdEllsMycK2qFY9UP/HbKecgv29bhl+wWQo41iMiRA=
Subject key identifier:   4B:46:FC:EB:0F:D3:47:59:BD:BC:D3:62:30:EC:87:4D:82:C0:9A:EF
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D05
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B407D140CA2511F090C0DFCCDAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 17:39:33 +0000
ROA not before:           Tue 25 Nov 2025 17:39:28 +0000
ROA not after:            Thu 25 Nov 2027 17:39:28 +0000
asID:                     834
IP address blocks:        154.16.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 30 Nov 2025 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7429 (0x1d05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Nov 25 17:39:28 2025 GMT
            Not After : Nov 25 17:39:28 2027 GMT
        Subject: CN=6925e9d5-d020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:dc:f1:f0:3a:5b:2a:23:f1:8d:b4:f4:6f:
                    c0:a3:3b:5a:a1:b5:12:d0:d2:e1:9d:18:92:b4:84:
                    26:8e:f4:11:fd:07:b4:95:2a:30:83:c9:da:a9:e7:
                    01:f2:d3:ce:24:df:14:5f:1d:51:5b:af:0b:ca:07:
                    d5:2c:ef:28:ed:00:c9:a2:d5:7c:96:44:7f:e1:a7:
                    e6:7e:00:74:18:a7:66:62:68:ff:38:e0:55:33:5f:
                    96:2b:a5:83:d8:73:e7:cf:56:7d:54:1c:e7:9f:50:
                    cc:fd:02:5a:20:03:0c:f5:d4:fc:84:64:01:aa:65:
                    74:72:bc:e2:70:25:2f:f7:74:0f:b8:5b:8b:79:c4:
                    b6:bc:e1:13:f2:52:30:f0:5e:53:db:97:09:31:e3:
                    92:d6:49:cd:0e:82:33:ac:85:da:93:9d:d0:3b:0b:
                    e7:9b:2c:c3:23:4b:03:77:3d:81:0b:21:75:d0:f3:
                    54:33:20:02:a6:c2:33:69:08:19:99:7d:6f:37:9b:
                    84:12:b0:3a:1f:dd:96:f3:2b:a8:b0:5f:16:eb:4f:
                    35:cf:2e:1a:3e:06:cc:b4:d4:2a:dc:17:f5:2f:ab:
                    78:53:6a:48:11:f6:82:67:b3:29:ec:88:9a:61:eb:
                    d7:8c:8c:18:b0:9f:43:19:c8:1e:82:c2:a2:2a:34:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:46:FC:EB:0F:D3:47:59:BD:BC:D3:62:30:EC:87:4D:82:C0:9A:EF
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/B407D140CA2511F090C0DFCCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:ef:3c:11:47:05:54:7a:91:27:12:69:71:52:db:73:5f:
         71:58:8d:e8:ab:e6:d7:3d:94:ab:c5:33:4f:95:e6:f0:40:af:
         27:9a:4a:f2:f7:0b:fc:bd:f5:08:fe:40:5c:ae:9b:8d:3b:b5:
         2f:72:34:87:2c:7d:1b:65:27:ad:f9:07:1b:ff:fa:16:9e:aa:
         60:21:44:1b:b9:16:d0:70:a3:b6:f7:00:f5:55:df:fa:09:75:
         66:f9:ca:27:e1:de:a7:38:6d:db:f2:a8:da:21:ed:8f:7e:55:
         c0:61:6f:28:fa:c0:80:91:cf:b4:82:3f:d6:01:91:e3:0e:00:
         d0:58:84:0a:59:97:ec:71:de:2c:4c:b5:47:e9:b5:d0:f4:2a:
         0b:27:57:a8:67:45:5f:27:be:2d:70:86:31:43:f7:1d:e0:6d:
         b6:93:32:9a:18:42:f1:6b:a6:88:08:c3:2d:50:d0:be:af:04:
         7d:f8:4d:38:cf:3a:d4:e4:b9:87:cb:08:71:16:46:e4:16:31:
         02:ef:67:88:50:fd:34:2d:1b:21:d0:5b:36:76:3d:ce:d0:82:
         07:67:d4:c0:b1:16:31:68:82:26:2a:69:4a:f9:e7:53:90:15:
         f8:c1:88:24:e8:a0:54:7b:88:42:2e:2d:ed:dd:37:8d:dd:cd:
         9e:dd:16:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 07:18:33 2025 by rpki-client