This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/5C3C5D08E64711F0B893737EDAE4EC9C.roa
File:                     5C3C5D08E64711F0B893737EDAE4EC9C.roa (raw, json)
Hash identifier:          nyLTo0rixLCs/a1IenOrfxepHmexkFvnayqGIGvxXKM=
Subject key identifier:   A2:3C:88:1E:DA:B3:07:85:6B:D5:D8:51:35:8D:A4:35:34:A0:51:DD
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       44
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/5C3C5D08E64711F0B893737EDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:51:02 +0000
ROA not before:           Wed 31 Dec 2025 12:50:57 +0000
ROA not after:            Mon 31 Dec 2035 12:50:57 +0000
asID:                     24835
IP address blocks:        82.129.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:50:57 2025 GMT
            Not After : Dec 31 12:50:57 2035 GMT
        Subject: CN=69551c35-6c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:8d:51:9e:78:2a:f3:b0:1e:70:25:7f:58:
                    00:4e:da:6d:63:c6:6b:b5:62:ab:56:ad:3e:4b:2f:
                    41:f8:7c:00:a2:5c:ca:ea:06:57:a9:05:e3:67:94:
                    11:c4:c3:5d:a5:b5:19:7a:6e:e6:95:a7:1b:8d:a9:
                    b3:3c:8f:3d:cb:a3:8e:30:3f:ab:0a:17:bd:25:f5:
                    cb:70:bd:44:26:d1:3a:e4:f6:59:ff:12:f5:89:ae:
                    42:05:b6:68:5d:8f:21:78:e9:d5:ca:fa:3c:88:15:
                    31:1b:06:f0:58:b5:69:f7:f8:71:ac:d4:7e:d4:db:
                    e1:61:4c:cb:91:de:ef:b6:a6:0d:a5:7e:17:ac:22:
                    47:16:68:f1:24:7f:ee:4f:b9:c1:d8:c2:17:a9:d5:
                    16:32:af:dd:ce:2a:9b:e9:51:d9:de:c6:4d:15:29:
                    3e:bd:37:b1:08:f8:c5:8c:11:e4:ee:b6:41:6d:61:
                    4a:b9:26:7a:da:8f:2f:31:fc:50:f0:87:8c:0a:f3:
                    88:bf:3e:3d:68:e3:50:85:9d:88:c9:ca:8b:40:19:
                    c2:75:75:ac:8b:a3:58:9b:b4:ec:a0:22:dc:33:3d:
                    a9:a1:2a:4e:03:ba:79:17:ef:b7:c4:3b:9b:07:7c:
                    3a:59:a8:4d:fb:12:31:a3:0f:8d:34:fa:2d:69:de:
                    49:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:88:1E:DA:B3:07:85:6B:D5:D8:51:35:8D:A4:35:34:A0:51:DD
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/5C3C5D08E64711F0B893737EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.129.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:82:99:f9:f5:c4:bc:2e:22:90:12:f3:ed:36:c2:8c:c5:eb:
         5f:fa:d1:25:6f:e2:9f:db:cd:cf:93:1c:66:fb:46:67:bf:dd:
         74:14:65:58:f4:55:e6:7b:fe:ac:c9:48:fa:f7:76:f0:e1:05:
         77:f3:ad:b6:5b:c8:11:e3:e2:ed:66:46:82:e9:c8:79:8d:32:
         e7:09:61:e3:ab:62:48:40:c4:22:e6:68:ef:5d:b3:a0:e1:16:
         a7:ef:ea:56:6a:0c:f0:18:ee:49:20:da:3d:f7:90:4e:29:9e:
         33:a9:9d:e1:33:76:07:3a:cc:fb:40:a6:c3:d1:f9:a6:38:10:
         06:03:27:fc:6e:67:28:3e:64:33:ba:cc:ac:c7:cf:ac:99:5b:
         99:29:ab:e4:57:8c:f9:11:ad:af:5d:76:91:24:02:ab:89:9c:
         6b:8b:1e:16:d2:7f:79:63:f9:79:cf:b0:a5:4c:4f:70:58:2d:
         4b:56:a2:a5:56:5c:1d:5b:52:6f:de:25:0c:13:d6:77:75:45:
         6c:d0:a0:e4:f3:8e:b5:49:6c:8f:0e:86:07:c4:4b:00:b3:57:
         76:db:46:10:02:42:5b:08:a8:e1:91:76:bf:70:45:c7:91:38:
         51:ff:45:37:c2:6e:76:4e:b8:48:1a:ad:09:72:d0:90:85:fa:
         57:2a:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:30:26 2026 by rpki-client