This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
File:                     41D32A18E64811F0ACFAB484DAE4EC9C.roa (raw, json)
Hash identifier:          5V7TJLQLLojrh3rp4usM3FHkPrvqeC97To9U71gTLO4=
Subject key identifier:   32:73:82:6E:71:36:C3:77:F1:A9:01:0B:28:1B:8A:60:AA:C2:AD:00
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       4E
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:57:27 +0000
ROA not before:           Wed 31 Dec 2025 12:57:22 +0000
ROA not after:            Mon 31 Dec 2035 12:57:22 +0000
asID:                     36935
IP address blocks:        62.68.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:57:22 2025 GMT
            Not After : Dec 31 12:57:22 2035 GMT
        Subject: CN=69551db7-698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:c9:3e:42:46:19:d3:9d:50:dd:0e:56:27:
                    ff:67:3f:02:9f:a0:f5:75:a7:4a:bd:ba:8d:4d:1d:
                    0c:d8:cf:9e:27:40:cc:b3:2f:3f:a3:23:de:e5:a5:
                    61:4b:29:22:ad:8c:9e:2c:a1:40:da:ed:11:e6:0a:
                    f0:54:47:21:a0:f8:66:44:1f:15:bf:0e:41:e7:53:
                    ec:87:c8:b1:f1:1e:11:2d:ab:b2:b8:5c:73:0b:55:
                    c6:f9:f7:a6:b5:0f:05:98:df:56:98:b4:a1:78:ba:
                    96:0d:22:56:21:95:82:08:b0:4c:f2:25:0e:cc:70:
                    0d:f6:7d:25:d4:5e:94:05:a6:4f:c6:7c:b1:91:a9:
                    52:e1:6a:8e:5d:72:0d:06:a5:9d:68:78:5f:e8:04:
                    4f:18:c1:97:bb:2d:f8:2f:2a:18:07:c7:27:9d:19:
                    fb:e6:51:b0:a2:88:7f:fb:7f:69:3c:9c:20:82:8f:
                    e3:2b:36:6a:21:fa:af:54:5f:90:f0:c8:3e:c7:2a:
                    c0:b1:ca:13:47:1d:2c:59:1f:35:e8:01:25:38:cf:
                    8f:4f:08:31:5b:bd:46:d9:d3:21:5a:ca:63:61:f8:
                    7e:6b:9f:e5:b5:61:d4:21:0f:17:b8:92:a9:27:91:
                    5b:1e:78:3e:5e:dc:19:53:c5:88:3c:b2:42:9e:30:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:82:6E:71:36:C3:77:F1:A9:01:0B:28:1B:8A:60:AA:C2:AD:00
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:50:59:bf:d5:df:35:6e:07:5d:02:0b:94:0b:14:44:4a:0e:
         ab:e1:57:a3:a9:96:fa:42:f1:86:7d:fa:74:1a:d6:9e:ec:5d:
         cf:cc:64:cd:6a:45:42:41:9d:6a:a7:e1:2a:11:ab:2b:0b:30:
         22:50:a3:cb:62:ee:24:71:0c:89:d8:ce:fc:69:8e:dc:55:5e:
         74:54:1e:86:db:81:b0:37:8e:75:94:af:5b:7a:a7:8e:e2:4c:
         3d:d8:b5:de:9f:76:b2:8c:f6:87:4e:fe:94:4f:30:6b:75:17:
         53:9f:71:4c:34:3f:1c:31:65:02:5b:09:cc:a4:75:4b:ac:c7:
         42:fb:a4:58:67:69:cd:52:5a:e5:be:e6:39:9d:1f:b3:b9:3a:
         97:e6:36:86:7c:9c:43:92:53:10:76:51:d0:34:27:17:e1:f6:
         ab:4d:92:2c:05:d3:41:c6:06:ab:dd:14:e4:9f:dc:96:1a:c4:
         fb:a1:97:08:5d:6c:2e:25:4b:77:00:89:8c:43:76:37:ea:65:
         21:50:ad:62:dd:88:48:77:a9:64:e0:26:8a:bb:b7:36:df:ef:
         32:ae:f2:ef:23:8d:79:e5:04:b3:cc:2d:5b:97:f4:4a:92:10:
         81:7e:15:8c:97:de:06:2e:87:bd:fc:0c:f2:07:6d:4e:b8:8e:
         e1:84:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:36:16 2026 by rpki-client