This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/66763C34E64811F09B639186DAE4EC9C.roa
File:                     66763C34E64811F09B639186DAE4EC9C.roa (raw, json)
Hash identifier:          i+w6opL2Ipyqtzv1lD31vRg6ZPrTeRTbmSF8OnbTJXo=
Subject key identifier:   4A:B4:57:CF:6E:38:74:42:89:96:A8:D8:5C:2B:A0:33:6E:7F:2D:9D
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       50
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/66763C34E64811F09B639186DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:58:28 +0000
ROA not before:           Wed 31 Dec 2025 12:58:24 +0000
ROA not after:            Mon 31 Dec 2035 12:58:24 +0000
asID:                     24835
IP address blocks:        62.240.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:58:24 2025 GMT
            Not After : Dec 31 12:58:24 2035 GMT
        Subject: CN=69551df4-038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:4a:73:88:f3:b3:9e:00:30:da:ae:80:ef:
                    df:23:98:e7:9e:c3:fc:d3:61:dd:a4:27:b7:7a:80:
                    21:cd:04:63:53:35:67:25:03:2a:3e:82:80:14:f5:
                    3b:99:e5:d4:2e:cb:d6:5e:99:d8:4e:77:61:e1:8e:
                    d1:d0:73:60:74:ab:10:49:47:19:82:f5:6c:89:7e:
                    29:6b:19:6d:73:aa:2d:50:5c:24:48:ef:a4:ca:58:
                    78:76:dc:1a:46:36:69:af:41:e3:f0:ac:48:78:9b:
                    51:1f:92:88:ab:1e:97:96:0c:91:50:9b:19:a8:e8:
                    72:b0:43:df:61:cb:50:16:a1:f1:35:48:82:f9:a2:
                    70:3a:bd:78:00:b7:76:09:9f:4c:3a:0c:d0:ac:a3:
                    07:a2:1a:76:2b:a3:6f:b5:e8:db:e7:86:75:9c:51:
                    c7:bf:cf:01:0f:09:d3:b0:4a:c6:32:9a:7d:41:c3:
                    40:67:a3:3b:52:75:36:96:bb:73:e1:b4:16:96:fc:
                    93:5f:37:e5:4c:9f:6d:9a:6c:dd:cb:69:d2:26:ab:
                    53:ff:f9:dc:72:90:af:b3:65:04:bc:25:a6:99:79:
                    d4:7e:3c:e4:5d:4d:17:62:65:8a:0b:8e:77:19:c6:
                    e7:dc:d1:08:6e:53:1e:b4:fb:78:a6:e7:72:7c:2c:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:57:CF:6E:38:74:42:89:96:A8:D8:5C:2B:A0:33:6E:7F:2D:9D
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/66763C34E64811F09B639186DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.240.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:24:44:1b:59:ca:db:97:46:70:01:b2:2a:f1:f4:81:9d:d5:
         38:89:eb:9b:ad:02:38:fa:0e:60:35:3f:e6:58:9f:0f:29:14:
         57:9a:11:d3:6c:41:c8:c5:cc:32:43:3f:41:1e:1d:ca:58:60:
         94:eb:a0:11:e2:1e:85:96:f0:8f:8a:5b:43:36:ee:bc:3c:ff:
         30:26:a6:28:30:e4:5a:1d:cd:82:36:f6:15:a9:96:94:e0:fa:
         a7:af:10:95:e5:02:7f:8a:db:b5:74:f0:50:d9:ae:3e:d5:51:
         7c:b4:08:c4:3e:f2:31:28:d0:3d:1c:83:56:4e:f4:e0:36:f5:
         3f:e1:83:a7:75:e1:17:ba:e4:c2:98:9b:19:3d:36:14:c4:d7:
         00:dc:0d:67:1e:fc:d8:01:92:ae:80:dd:ee:b6:9c:42:e3:92:
         b1:67:f5:2c:db:19:4b:53:87:ff:9d:57:cd:49:9c:e3:25:dd:
         25:ec:66:a8:75:8c:e0:1b:da:ab:0a:5e:43:ab:f7:65:2d:22:
         ed:91:25:73:95:25:b2:7c:a5:f7:76:d4:f2:59:91:0e:16:5c:
         7c:53:51:9c:30:ea:a3:47:5d:78:f7:6b:d8:07:6e:43:1f:98:
         9a:ff:d2:c6:71:19:17:e2:90:0a:0f:f7:f5:b3:9a:50:54:89:
         ee:41:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:15:42 2026 by rpki-client