This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
File:                     16C311B8DB3911F090B142DEDAE4EC9C.roa (raw, json)
Hash identifier:          oTycKqiylbUdKMVCBD4pMuYdWpoylPqw/eqePPTrrvM=
Subject key identifier:   BA:CD:0E:0E:16:1C:5F:F1:C4:6D:4E:E4:3B:8A:40:57:47:F8:53:FB
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       087E
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 11:11:09 +0000
ROA not before:           Wed 17 Dec 2025 11:11:05 +0000
ROA not after:            Sun 17 Dec 2045 11:11:05 +0000
asID:                     33771
IP address blocks:        196.97.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Dec 17 11:11:05 2025 GMT
            Not After : Dec 17 11:11:05 2045 GMT
        Subject: CN=69428fcd-a53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:f9:b5:9c:f8:90:21:68:25:04:70:92:8e:
                    ed:3e:e1:85:a9:54:b7:de:0d:f9:65:d9:14:82:44:
                    72:2f:ce:eb:ff:e3:73:b0:bf:52:7f:48:e5:9e:50:
                    27:cb:9a:9a:ef:80:e8:78:6e:c2:ac:e0:06:b8:5f:
                    ce:2a:84:41:83:34:f3:54:9c:53:57:e7:5d:f9:d6:
                    79:52:00:38:88:ff:9a:49:be:73:9f:5a:20:2c:1d:
                    cf:4c:5d:04:cb:4a:cf:f3:81:29:2f:b4:d0:be:41:
                    f6:c1:f9:cf:de:f3:36:3f:51:51:3a:a0:c0:8e:2e:
                    8c:2c:b6:ec:a6:0d:4b:58:67:f3:f7:9a:34:bb:d9:
                    21:fd:13:e5:48:3b:b4:da:05:92:2b:15:e2:b2:09:
                    dd:9e:4c:c1:9f:b0:59:07:5b:58:1f:d6:ad:b1:e3:
                    47:65:79:db:50:f5:32:c8:26:ac:d1:0f:e5:3f:87:
                    36:85:03:17:42:27:b3:b3:7e:d3:ea:64:d6:9e:2a:
                    4d:3a:50:b5:7b:49:7c:b5:44:10:fa:cd:3f:ac:3f:
                    c7:a2:00:bb:fe:84:00:e8:14:e4:93:b9:ea:a1:bb:
                    3b:9c:46:54:d5:1e:5d:65:d7:0f:9a:d8:86:62:39:
                    5f:de:41:4d:f9:35:c3:e9:5e:b9:60:98:dc:86:6c:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:0E:0E:16:1C:5F:F1:C4:6D:4E:E4:3B:8A:40:57:47:F8:53:FB
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.97.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:66:d4:ae:0b:e2:9f:da:64:84:dd:e7:25:b7:e3:9f:bd:
         82:32:17:c2:b9:a1:00:17:12:67:5d:62:84:94:00:90:b3:d9:
         95:fa:fb:ae:c6:02:53:12:8f:b8:71:dc:b6:c5:35:52:f6:9f:
         96:21:60:dd:b8:9e:fd:4a:3a:c8:e4:fd:ee:4d:53:48:10:e9:
         bd:bd:6c:07:21:93:0d:1f:7b:6c:43:3a:69:3f:14:5f:8b:10:
         68:06:f8:5f:da:77:b3:4c:f3:2c:6f:08:d5:d4:35:cc:4a:cd:
         25:b4:77:22:16:16:b8:92:10:7e:7a:7d:28:4b:31:a3:8c:09:
         2d:2f:54:cd:87:68:da:5c:ad:9e:2d:ae:62:2f:a7:1d:5e:58:
         f1:7d:32:19:55:0e:a8:5e:c0:ed:87:00:22:be:e0:61:a1:56:
         65:60:2c:63:38:6a:dd:6a:b1:f7:c3:af:f6:1c:7c:44:06:49:
         71:c3:64:15:37:0f:34:6f:a4:02:c0:a0:9f:5c:38:a7:77:3a:
         02:d0:3b:27:b3:00:9d:c3:46:e0:23:93:cf:ca:a2:9c:2e:5c:
         01:33:fa:72:b3:2f:f5:b1:28:79:2c:6e:6c:c6:0b:16:bb:b9:
         4f:b8:1f:4b:4d:b5:4c:09:ba:46:44:95:39:65:96:ed:84:a3:
         e4:3c:1b:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCH4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODIxMDRBRjExMC8GA1UEBRMoOEIxMDI2OTUzRUNGN0M0Q0UxMzlGRTlBNTlCREQ3
MjI4QTE1MzU0NDAeFw0yNTEyMTcxMTExMDVaFw00NTEyMTcxMTExMDVaMBgxFjAU
BgNVBAMTDTY5NDI4ZmNkLWE1M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC76/m1nPiQIWglBHCSju0+4YWpVLfeDfll2RSCRHIvzuv/43Owv1J/SOWe
UCfLmprvgOh4bsKs4Aa4X84qhEGDNPNUnFNX51351nlSADiI/5pJvnOfWiAsHc9M
XQTLSs/zgSkvtNC+QfbB+c/e8zY/UVE6oMCOLowstuymDUtYZ/P3mjS72SH9E+VI
O7TaBZIrFeKyCd2eTMGfsFkHW1gf1q2x40dledtQ9TLIJqzRD+U/hzaFAxdCJ7Oz
ftPqZNaeKk06ULV7SXy1RBD6zT+sP8eiALv+hADoFOSTueqhuzucRlTVHl1l1w+a
2IZiOV/eQU35NcPpXrlgmNyGbHj3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUus0O
DhYcX/HEbU7kO4pAV0f4U/swHwYDVR0jBBgwFoAUixAmlT7PfEzhOf6aWb3XIooV
NUQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4QUVBMjI4L2l4QW1s
VDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2l4QW1sVDdQZkV6aE9mNmFXYjNYSW9vVk5VUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyMTA0LzA5Q0NCOTRDQTc2MzExRUFCQkMxOTExQ0Y4
QUVBMjI4LzE2QzMxMUI4REIzOTExRjA5MEIxNDJERURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALEYRAwDQYJKoZIhvcNAQEL
BQADggEBADTtZtSuC+Kf2mSE3eclt+OfvYIyF8K5oQAXEmddYoSUAJCz2ZX6+67G
AlMSj7hx3LbFNVL2n5YhYN24nv1KOsjk/e5NU0gQ6b29bAchkw0fe2xDOmk/FF+L
EGgG+F/ad7NM8yxvCNXUNcxKzSW0dyIWFriSEH56fShLMaOMCS0vVM2HaNpcrZ4t
rmIvpx1eWPF9MhlVDqhewO2HACK+4GGhVmVgLGM4at1qsffDr/YcfEQGSXHDZBU3
DzRvpALAoJ9cOKd3OgLQOyezAJ3DRuAjk8/KopwuXAEz+nKzL/WxKHksbmzGCxa7
uU+4H0tNtUwJukZElTlllu2Eo+Q8G0U=
-----END CERTIFICATE-----
Generated at Thu Dec 18 22:33:29 2025 by rpki-client