This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/16E842F8BDAC11F0B472F08BDAE4EC9C.roa
File:                     16E842F8BDAC11F0B472F08BDAE4EC9C.roa (raw, json)
Hash identifier:          EhpKapZP+bvJ8pIPWPKsjy23/0JHazNOFIbhIW5/eUc=
Subject key identifier:   56:69:E1:A0:B4:2D:29:E4:1E:FF:2A:16:96:30:30:11:B8:D9:78:95
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       04
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/16E842F8BDAC11F0B472F08BDAE4EC9C.roa
Signing time:             Sun 09 Nov 2025 20:38:47 +0000
ROA not before:           Sun 09 Nov 2025 20:38:42 +0000
ROA not after:            Mon 31 Dec 2035 20:38:42 +0000
asID:                     24835
IP address blocks:        62.68.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Nov  9 20:38:42 2025 GMT
            Not After : Dec 31 20:38:42 2035 GMT
        Subject: CN=6910fbd7-dcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:c8:a0:c3:31:e5:5f:93:b9:ff:3a:96:d9:
                    34:09:da:58:59:61:19:40:08:d8:89:85:97:e9:03:
                    67:a3:ef:0e:fe:3f:de:f3:bb:17:f8:95:30:db:8e:
                    ea:5c:a8:0a:9c:11:44:b3:fc:fb:6c:55:e6:8c:c0:
                    53:66:3a:e3:6f:57:b7:b7:db:39:6f:c0:20:c2:29:
                    4c:e6:1b:6d:a7:3a:27:c8:c0:4a:e7:2e:93:be:60:
                    54:11:c7:2d:1c:26:4b:97:ae:34:86:d3:22:e0:4b:
                    c6:17:fc:23:45:5d:ad:2f:95:82:b0:29:49:9f:1c:
                    ee:d3:23:29:71:67:b3:c0:98:f0:d8:99:1c:f4:f4:
                    60:bd:c6:eb:4c:3d:3d:12:92:4f:c0:9d:c5:66:1c:
                    98:74:13:f2:fe:3f:a0:b7:a7:cf:03:99:7b:3f:07:
                    1a:23:e8:a5:eb:1a:98:f0:ac:3c:84:c8:99:6f:68:
                    4f:15:fa:f7:47:ce:62:00:1a:85:a1:16:27:7a:72:
                    19:f2:5d:f1:6a:13:63:1c:0c:4c:e4:6c:ee:40:8f:
                    53:9d:a9:c6:d1:04:8f:2f:c4:2f:e1:32:c1:e7:e8:
                    b7:ba:fc:49:87:69:25:a4:c6:85:19:e1:43:ee:da:
                    98:82:6d:ea:8b:90:1e:54:e0:2d:39:0e:bb:1f:0f:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:E1:A0:B4:2D:29:E4:1E:FF:2A:16:96:30:30:11:B8:D9:78:95
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/16E842F8BDAC11F0B472F08BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:f8:85:93:22:31:7c:e8:3b:50:33:df:ed:49:ee:66:7a:
         ab:40:a9:27:cb:e5:3d:2a:9f:09:e3:b8:5a:88:77:62:cb:9a:
         27:c1:2f:b8:51:01:ed:48:78:32:e6:28:9f:f9:cd:3f:52:7c:
         f1:23:ba:5e:d9:f6:70:46:27:d1:41:73:e1:44:28:1d:1a:d7:
         3a:60:8a:99:39:59:51:a4:69:68:16:27:bc:83:a6:10:2c:91:
         b4:9c:b0:08:ae:5f:0d:8d:b0:e7:3e:73:be:a1:4b:21:f4:99:
         da:31:31:7f:89:18:5f:b5:89:e3:b6:2b:29:a0:dd:6e:87:d2:
         f0:ec:9c:af:8d:c0:03:81:af:90:2b:5a:39:b3:f1:80:a6:4e:
         5f:7f:26:2a:db:90:6e:b0:24:80:f4:44:5f:65:7e:a2:11:99:
         50:78:63:4f:ac:13:b2:26:7f:2c:51:5d:22:84:4d:ea:a9:f0:
         9c:3d:e3:e0:e4:9e:9f:50:f6:05:f0:17:08:74:92:d7:b9:c5:
         ed:d3:1a:7b:0f:03:e2:12:56:66:4d:50:52:5f:07:99:38:f8:
         c6:bb:8d:7a:f7:6b:8f:b3:88:90:2a:dd:74:c0:80:3f:80:01:
         b8:5f:38:59:58:b2:c4:84:d3:15:ab:2e:fc:8d:41:e4:2b:fa:
         9b:ca:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 20:01:00 2025 by rpki-client