This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7C79B9EE6DE11F09ADC69A2DAE4EC9C.roa
File:                     D7C79B9EE6DE11F09ADC69A2DAE4EC9C.roa (raw, json)
Hash identifier:          ysxW/dhEj+lQIdAUNoJ86O9r37OoNc8bP02RLm4lJuo=
Subject key identifier:   3D:BF:A1:6B:EC:D7:8B:08:6B:11:A1:E1:2D:05:5B:A4:4A:1B:C1:BB
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D6C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7C79B9EE6DE11F09ADC69A2DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 06:55:23 +0000
ROA not before:           Thu 01 Jan 2026 06:55:18 +0000
ROA not after:            Mon 01 Jan 2029 06:55:18 +0000
asID:                     834
IP address blocks:        154.16.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Jan 2026 01:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7532 (0x1d6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan  1 06:55:18 2026 GMT
            Not After : Jan  1 06:55:18 2029 GMT
        Subject: CN=69561a5b-08b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:8f:46:70:c8:f3:7d:82:e8:de:9e:71:b8:
                    f0:92:ce:eb:46:af:f6:11:66:ba:98:67:07:53:da:
                    a2:93:05:b4:99:a9:1c:9d:00:1b:91:35:ab:38:21:
                    cf:99:8a:ec:75:21:da:62:29:66:c5:d5:3a:0e:7c:
                    60:23:b9:df:dd:b0:7f:ad:bf:28:93:93:26:a7:a8:
                    b5:f8:7e:ef:f8:a3:e2:62:9b:3b:74:5e:8c:fa:e8:
                    a2:2e:ae:a9:f1:5f:19:c4:3f:96:3c:24:a8:cc:e4:
                    e7:e8:30:fb:33:be:cf:0f:47:ed:47:a9:83:08:31:
                    c3:6a:38:ae:9e:41:d4:4a:8f:a1:f0:11:f7:cc:51:
                    eb:c5:58:cd:31:17:6c:a7:e0:88:95:99:b9:37:74:
                    06:10:b0:88:97:76:94:6d:e0:fb:45:0e:d9:6a:f0:
                    fb:c5:9a:e8:92:55:03:1a:5e:cc:03:0d:bd:bf:e9:
                    7f:47:55:2e:0e:7e:79:9b:6c:f3:10:1c:ca:cc:4d:
                    27:5f:45:ea:2d:0d:76:39:f4:77:7f:1f:0c:51:3c:
                    cf:31:59:05:67:4f:62:f9:46:86:a3:2d:53:d6:61:
                    ca:eb:23:11:38:49:a0:d2:1a:55:4b:2b:ef:5c:2c:
                    74:5b:ed:8f:2c:d5:b9:2e:85:2d:24:2f:f4:5f:c6:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BF:A1:6B:EC:D7:8B:08:6B:11:A1:E1:2D:05:5B:A4:4A:1B:C1:BB
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D7C79B9EE6DE11F09ADC69A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:5b:9c:c4:5b:3d:67:59:70:3d:2b:01:d2:34:66:a6:04:
         8f:25:a4:ba:8e:42:ba:ee:94:6d:60:88:a2:19:17:60:67:49:
         2a:12:a5:eb:c4:92:fb:6b:30:f2:65:81:1d:4e:e4:53:29:b8:
         e0:0f:02:85:e3:ca:70:d8:af:b8:cd:05:2b:c2:1d:26:ba:8c:
         68:6f:53:45:d1:85:59:7d:bf:0f:ee:90:5e:d0:bb:e8:af:25:
         39:53:da:09:80:56:bc:48:de:96:53:12:d5:8d:a7:42:08:9c:
         0e:a4:64:23:38:45:dd:10:46:e0:48:20:32:07:15:32:83:64:
         2a:b1:7d:1f:6b:49:1b:b7:9a:33:85:a5:6b:64:4b:e0:93:35:
         e5:f2:35:6f:7e:b0:64:f6:a7:d1:4b:0c:d9:b1:35:3a:a7:4f:
         b0:26:04:1c:3d:1e:27:7d:d1:4d:88:a6:ff:02:ee:77:75:c4:
         11:87:b9:68:db:bf:02:b4:98:20:b4:b4:91:fc:09:9c:be:24:
         46:ae:9c:95:9c:48:24:16:17:98:11:19:68:00:4a:cd:67:ba:
         dc:f1:d2:99:e8:54:58:7e:76:c4:c3:83:27:0c:1b:a7:5f:11:
         95:e4:62:6c:6b:3c:c3:bc:e4:62:c8:fc:3c:d0:78:ae:0d:b5:
         db:ae:6b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 10:37:06 2026 by rpki-client