This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AFCB6ADCAC11F0B3DFB87DDAE4EC9C.roa
File:                     D5AFCB6ADCAC11F0B3DFB87DDAE4EC9C.roa (raw, json)
Hash identifier:          UCAVwSrictYdu478CO1Y3svF4fyqS+c8sVgJDRlBPKE=
Subject key identifier:   CF:23:65:B2:C5:BC:9C:F5:3D:C8:AF:68:AE:F0:70:E2:07:5C:C1:82
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D50
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AFCB6ADCAC11F0B3DFB87DDAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 07:32:13 +0000
ROA not before:           Fri 19 Dec 2025 07:32:07 +0000
ROA not after:            Sun 19 Dec 2027 07:32:07 +0000
asID:                     139989
IP address blocks:        154.127.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7504 (0x1d50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 19 07:32:07 2025 GMT
            Not After : Dec 19 07:32:07 2027 GMT
        Subject: CN=6944ff7d-20a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:f4:70:1e:71:fd:66:3c:f7:88:bd:65:ff:
                    8b:6e:32:0e:9c:47:17:de:4e:0f:ba:af:3f:28:e8:
                    ae:b2:5e:1f:8d:ce:2b:78:90:8e:24:ef:71:d1:d7:
                    53:b0:ad:a0:3a:13:84:e4:43:86:72:78:79:a1:fa:
                    4f:f7:0f:cd:a1:66:19:e4:03:1a:ba:ce:c3:4b:58:
                    69:93:07:9f:6d:6f:b8:2e:f9:58:df:1a:14:c4:df:
                    b8:92:7e:20:4f:7f:92:63:7a:3f:ab:f1:cf:6e:2a:
                    13:12:ac:73:39:25:eb:a6:25:f6:47:c1:ed:14:a4:
                    aa:54:ad:6e:28:53:b3:4b:63:56:20:24:b6:d7:cd:
                    b1:6b:db:72:33:a3:0d:14:d6:98:44:65:81:43:e5:
                    64:97:20:ae:99:60:b4:69:4a:f6:ad:b5:1a:37:4a:
                    fa:48:fc:e0:6b:54:22:77:e1:34:89:3b:76:c9:17:
                    52:ce:1a:e8:ad:a1:ed:00:2a:71:56:56:1c:f8:ed:
                    03:af:52:38:c8:70:3b:39:c0:f1:92:d0:e3:28:d5:
                    db:8e:f5:aa:26:11:80:0b:4d:4e:4d:ea:81:3e:11:
                    ed:5e:67:33:62:d3:81:86:c6:6d:ac:4f:73:1c:a6:
                    df:0c:95:a4:a0:d9:54:e8:a6:17:ff:7b:28:92:0f:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:65:B2:C5:BC:9C:F5:3D:C8:AF:68:AE:F0:70:E2:07:5C:C1:82
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D5AFCB6ADCAC11F0B3DFB87DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.127.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:f4:44:69:76:95:94:f4:3f:4c:3e:b4:9b:6b:99:5f:81:
         34:2e:ab:2d:4c:0f:83:e0:5d:91:31:18:a2:ec:2d:08:c4:b7:
         16:8d:4e:b9:f8:17:bf:45:18:db:92:63:f0:28:13:3a:ba:ba:
         80:66:38:c1:9f:d1:5c:05:af:94:fa:7f:e0:de:19:7f:5f:6e:
         a1:11:47:34:78:10:46:29:7a:79:7d:1f:23:96:00:8d:1a:6d:
         c4:8a:f9:20:b7:6d:32:88:89:f2:4d:8d:ce:58:d6:c8:dc:c1:
         bf:05:86:6e:55:cb:ea:e1:8f:96:46:f2:38:4c:23:1f:6c:5e:
         fb:b6:86:fa:e6:d8:d8:76:3d:a9:dc:ae:68:a8:c5:5c:e1:0e:
         90:9e:63:b0:20:e7:34:33:cd:e0:40:49:1f:ac:d5:96:35:c7:
         de:78:e0:24:d1:f4:4d:d6:4e:1b:28:77:86:d0:f9:57:10:91:
         49:f5:9c:96:40:1c:39:d6:0d:72:99:e2:dc:32:d8:11:de:a4:
         cb:5b:1f:42:77:1d:e4:91:49:71:4d:95:77:6e:66:78:82:3a:
         96:a6:25:17:bb:59:47:20:da:32:b0:e0:2b:d4:5b:47:9e:ae:
         a7:2a:43:7d:5a:36:22:c6:16:b0:67:81:74:65:4d:00:e7:c0:
         3d:e3:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:24 2025 by rpki-client