This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
File:                     840DD0AAE64711F084488A80DAE4EC9C.roa (raw, json)
Hash identifier:          LEJhspwfo4P35G4GsyqKcA7wSNxsuLJZrV6m0oln0v0=
Subject key identifier:   72:63:39:E1:0F:1F:1B:65:5B:25:A3:41:2F:08:B4:21:29:1E:13:46
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       46
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:52:08 +0000
ROA not before:           Wed 31 Dec 2025 12:52:04 +0000
ROA not after:            Mon 31 Dec 2035 12:52:04 +0000
asID:                     36935
IP address blocks:        82.129.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:52:04 2025 GMT
            Not After : Dec 31 12:52:04 2035 GMT
        Subject: CN=69551c78-605a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:90:9d:91:e9:1c:7e:69:74:91:73:ce:f7:
                    e1:98:bc:f3:32:d0:75:98:d7:78:ee:59:4a:87:51:
                    d9:ec:2e:88:86:92:50:c4:8d:22:1e:39:d7:d5:01:
                    c8:84:80:eb:05:20:3f:ba:9e:52:62:bc:8d:14:f7:
                    ae:de:7f:da:27:3a:fd:9e:f1:bc:45:c3:02:bd:1a:
                    31:ce:4b:67:1e:4d:bd:24:5a:c1:75:10:f6:51:9c:
                    ba:b3:b0:71:d7:d7:70:00:34:f5:31:5a:7c:cc:20:
                    5f:92:01:98:c7:6c:ed:b8:51:e0:49:45:29:fe:c0:
                    f1:5f:e2:83:d2:fa:59:8d:aa:e3:04:94:01:48:f1:
                    ea:38:0a:a6:63:26:4c:82:3f:9e:ac:ab:dd:50:b8:
                    d2:84:f1:c6:4b:b9:b7:cf:a5:0e:77:83:69:93:b3:
                    e8:7f:c6:cb:7d:41:c3:8f:79:8c:f4:59:53:42:a9:
                    26:be:c1:f9:35:58:0a:37:da:1e:ae:9a:70:67:a6:
                    60:5d:0f:46:13:90:61:56:b3:a2:63:e9:5e:e3:0c:
                    e0:2e:8b:d5:ed:a0:4d:c4:d7:3a:17:5d:fc:a0:1d:
                    75:0c:55:58:6b:50:91:28:46:8b:7c:a2:f7:9b:de:
                    9e:83:96:c3:3b:11:27:82:3d:41:b3:41:89:55:14:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:39:E1:0F:1F:1B:65:5B:25:A3:41:2F:08:B4:21:29:1E:13:46
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.129.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:0a:59:10:6b:7d:15:44:1a:f2:70:ef:bf:17:5e:cc:78:
         b0:ca:e7:7d:9f:ca:94:b6:80:d7:09:b6:ba:97:11:32:56:84:
         da:53:7e:ac:ae:63:ad:9f:c0:42:12:7d:aa:e6:67:65:1d:96:
         9f:4c:ff:8c:d1:9d:97:90:41:e3:ee:6b:a8:41:e5:6b:5a:6e:
         14:93:0e:fc:34:39:25:c5:b7:4f:1e:e6:a7:03:08:9f:30:5e:
         af:14:91:7e:ca:c6:05:65:02:c3:58:9e:62:c9:6b:0b:2f:76:
         41:45:d8:99:ec:f5:76:7c:f6:1b:44:9e:f4:86:94:97:6d:15:
         16:fd:61:3b:c2:e5:63:b5:0c:a6:f7:99:ae:fa:49:23:85:a5:
         92:e4:d9:3f:7f:5b:3d:93:10:7d:d5:49:a8:65:f4:0b:48:61:
         b6:c9:c5:83:69:3e:15:8a:46:6d:79:15:b7:5a:7b:38:91:b3:
         cc:81:40:27:1c:1c:7b:5c:69:62:15:d2:d6:8a:83:ce:aa:79:
         cd:86:35:59:83:4b:68:de:8c:69:d8:d3:98:0c:f8:af:0f:8e:
         23:c4:e0:06:a1:01:f0:5e:20:5d:9d:bf:ca:46:2a:54:36:c8:
         8b:36:47:af:9f:fd:fd:1e:8b:95:1f:99:ab:98:67:6a:a1:75:
         d7:0a:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:49 2026 by rpki-client