This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/1CB58EB0E64811F0B101CE82DAE4EC9C.roa
File:                     1CB58EB0E64811F0B101CE82DAE4EC9C.roa (raw, json)
Hash identifier:          GmVFU5Fj3JlQpS5TQySgt0n+nxZd6U1yLmPCADpRfXI=
Subject key identifier:   8F:A7:67:AE:5F:19:A0:EF:35:45:BB:38:41:8A:55:F2:DA:B6:F2:DC
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       4C
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/1CB58EB0E64811F0B101CE82DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:56:25 +0000
ROA not before:           Wed 31 Dec 2025 12:56:20 +0000
ROA not after:            Mon 31 Dec 2035 12:56:20 +0000
asID:                     24835
IP address blocks:        62.68.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:56:20 2025 GMT
            Not After : Dec 31 12:56:20 2035 GMT
        Subject: CN=69551d78-db0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:12:24:43:39:55:49:9b:cd:90:ba:8f:0d:
                    4c:43:1a:78:d2:6b:ec:a6:c2:12:33:0a:8f:05:51:
                    08:27:04:15:9f:77:d5:8f:73:b1:97:a0:8c:1a:0d:
                    33:04:ab:c7:4d:6c:7a:7a:24:6c:83:67:fa:11:ae:
                    4c:2d:91:b6:ad:fb:19:26:3f:44:a7:eb:45:4a:66:
                    af:92:8a:b1:31:9f:8d:12:49:c0:28:e8:ff:c6:87:
                    da:87:03:47:5d:12:2c:74:25:78:62:e5:ef:96:59:
                    1e:da:3e:4b:bf:e0:ec:5b:e7:25:df:f4:38:b7:0c:
                    30:85:10:7f:fb:ce:56:f1:ce:20:4b:cc:34:0b:78:
                    0c:7c:ad:d4:8b:1b:9d:07:28:ad:27:2b:c9:9e:4d:
                    fd:2e:72:ff:af:c1:95:bd:e4:4e:60:5a:60:a1:05:
                    2b:e7:30:37:56:3f:d2:cc:d4:46:5c:84:6d:43:15:
                    6b:5e:5d:0d:cc:64:b2:a0:25:f4:cc:78:a1:3b:66:
                    af:f1:3b:5a:1c:46:72:55:5f:00:f0:54:52:ae:1e:
                    14:21:33:ca:e2:a5:01:67:b5:1e:2a:24:28:ad:84:
                    30:e2:88:75:fe:6c:8f:ee:29:b2:d0:81:47:0b:f1:
                    32:19:3c:6d:91:1f:de:ed:36:43:ed:56:8c:8e:66:
                    77:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:67:AE:5F:19:A0:EF:35:45:BB:38:41:8A:55:F2:DA:B6:F2:DC
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/1CB58EB0E64811F0B101CE82DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:41:8e:d1:a5:d9:f3:62:8f:a8:3c:74:2e:6f:e3:41:48:
         69:af:67:45:cb:97:b5:9b:fb:33:38:e7:8b:f7:ca:b2:5e:77:
         70:4f:32:85:5c:d2:fa:5e:5d:f4:79:6a:15:0c:69:b8:3e:85:
         0f:cc:27:e0:5d:44:c6:2c:e8:02:a4:97:59:90:88:51:33:f9:
         fd:cb:02:c3:49:37:e5:5e:f7:99:49:a3:80:e0:9b:a9:20:26:
         83:a8:a6:2c:ec:10:d7:a1:de:b1:e5:d8:c8:56:1b:24:17:e8:
         aa:71:d0:b7:a3:09:7f:1e:ec:42:6f:0b:1f:51:42:99:fa:9a:
         69:e1:e8:59:9e:98:ac:0c:93:c4:ae:ab:ad:5c:42:bf:d9:3c:
         ae:b7:02:84:36:7b:85:0b:a2:32:cb:b0:d8:17:5b:58:cc:d3:
         c6:35:8d:6a:8e:d3:b0:df:27:a5:12:6d:e7:65:57:b2:34:19:
         29:5e:dd:73:6d:04:7d:07:5f:2a:65:04:37:d1:3f:b1:cb:18:
         f2:4b:d5:5a:5f:ba:6d:79:1e:a2:d7:bd:c6:15:98:c5:06:7c:
         e4:04:94:5a:1a:99:08:f7:75:b1:29:0f:4f:8e:73:96:99:6e:
         4a:fe:89:35:fe:92:7c:56:4a:0f:d1:73:06:eb:46:a8:25:b8:
         bf:4c:b2:36
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBTDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QlJJMTEwLwYDVQQFEyhDMzI0OTdCMkEyNTdGQTY3MjZGRDlFMDY5RjA1ODI1
QURBNzBGOTY2MB4XDTI1MTIzMTEyNTYyMFoXDTM1MTIzMTEyNTYyMFowGDEWMBQG
A1UEAxMNNjk1NTFkNzgtZGIwZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3IEiRDOVVJm82Quo8NTEMaeNJr7KbCEjMKjwVRCCcEFZ931Y9zsZegjBoN
MwSrx01senokbINn+hGuTC2Rtq37GSY/RKfrRUpmr5KKsTGfjRJJwCjo/8aH2ocD
R10SLHQleGLl75ZZHto+S7/g7FvnJd/0OLcMMIUQf/vOVvHOIEvMNAt4DHyt1Isb
nQcorScryZ5N/S5y/6/Blb3kTmBaYKEFK+cwN1Y/0szURlyEbUMVa15dDcxksqAl
9Mx4oTtmr/E7WhxGclVfAPBUUq4eFCEzyuKlAWe1HiokKK2EMOKIdf5sj+4pstCB
RwvxMhk8bZEf3u02Q+1WjI5md0MCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSPp2eu
Xxmg7zVFuzhBilXy2rby3DAfBgNVHSMEGDAWgBTDJJeyolf6Zyb9ngafBYJa2nD5
ZjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvMkFEMjlDRkNCREFBMTFGMDg5MzEyOTdGREFFNEVDOUMvd3lTWHNx
SlgtbWNtX1o0R253V0NXdHB3LVdZLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
d3lTWHNxSlgtbWNtX1o0R253V0NXdHB3LVdZLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjVEN0IvMkFEMjlDRkNCREFBMTFGMDg5MzEyOTdGREFFNEVD
OUMvMUNCNThFQjBFNjQ4MTFGMEIxMDFDRTgyREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT5E4DANBgkqhkiG9w0BAQsFAAOC
AQEATEtBjtGl2fNij6g8dC5v40FIaa9nRcuXtZv7Mzjni/fKsl53cE8yhVzS+l5d
9HlqFQxpuD6FD8wn4F1ExizoAqSXWZCIUTP5/csCw0k35V73mUmjgOCbqSAmg6im
LOwQ16HeseXYyFYbJBfoqnHQt6MJfx7sQm8LH1FCmfqaaeHoWZ6YrAyTxK6rrVxC
v9k8rrcChDZ7hQuiMsuw2BdbWMzTxjWNao7TsN8npRJt52VXsjQZKV7dc20EfQdf
KmUEN9E/scsY8kvVWl+6bXkeote9xhWYxQZ85ASUWhqZCPd1sSkPT45zlpluSv6J
Nf6SfFZKD9FzButGqCW4v0yyNg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:36:28 2026 by rpki-client