This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/455BE2F2D98111F0867B9399DAE4EC9C.roa
File:                     455BE2F2D98111F0867B9399DAE4EC9C.roa (raw, json)
Hash identifier:          o802PTnNtxbTOFVVbE810bvh2Q6UZmaxpvfh1W1msLE=
Subject key identifier:   E8:9F:28:B2:80:59:59:9B:50:47:35:0B:8C:C9:10:5D:61:98:63:5C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D3C
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/455BE2F2D98111F0867B9399DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 06:42:49 +0000
ROA not before:           Mon 15 Dec 2025 06:42:44 +0000
ROA not after:            Fri 15 Dec 2028 06:42:44 +0000
asID:                     834
IP address blocks:        154.16.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 06:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7484 (0x1d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Dec 15 06:42:44 2025 GMT
            Not After : Dec 15 06:42:44 2028 GMT
        Subject: CN=693fade9-bbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:aa:7a:66:37:f1:32:49:e2:6f:d0:0a:17:
                    7a:02:5c:7e:4d:6b:67:20:2b:d7:14:a8:91:ab:5e:
                    27:4b:da:93:88:a6:7c:21:ee:4d:b4:21:b5:50:e7:
                    46:32:ed:90:07:2d:eb:ba:50:52:60:16:3b:ee:73:
                    e6:6b:e2:f4:f9:83:57:4a:ea:bb:ee:75:3c:51:19:
                    89:c3:f5:8f:2c:d2:3a:66:7b:75:f0:69:45:13:dc:
                    a1:68:72:df:87:e3:3b:58:f3:0d:27:99:61:92:4c:
                    cd:c1:be:d6:62:f2:49:55:95:62:78:91:0b:55:41:
                    a9:f9:9b:27:8e:82:ce:59:92:b0:d1:8d:ac:79:a3:
                    09:fa:d9:f1:40:61:1a:a3:c6:0a:2a:93:ac:50:6f:
                    f7:23:03:d4:a6:8c:f2:2d:bc:3d:cb:c9:0b:e2:bf:
                    67:22:bb:89:30:43:11:39:dc:c3:8b:28:24:fa:cb:
                    96:51:a0:86:f9:23:0b:5d:b6:98:af:c3:32:11:87:
                    03:f5:3f:e4:41:95:de:c2:9d:95:46:61:85:7e:7a:
                    c2:60:a1:0c:87:d9:02:58:8a:d0:43:29:94:05:e9:
                    1f:5f:3a:05:23:67:49:15:c6:0e:11:7e:77:44:b3:
                    80:5d:8b:1e:f8:e2:7b:5a:4b:ff:4f:67:c9:f2:d8:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:28:B2:80:59:59:9B:50:47:35:0B:8C:C9:10:5D:61:98:63:5C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/455BE2F2D98111F0867B9399DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:c3:16:03:f1:7e:30:c7:9a:ff:a0:e2:6c:64:16:bf:6e:43:
         a9:f3:e8:5d:e0:6e:15:eb:ac:f3:47:fc:6f:b5:6e:6c:80:45:
         50:54:09:f0:57:fc:d6:9e:e8:44:1e:57:83:b7:8b:36:b7:c3:
         b3:7e:b0:aa:3f:f6:c0:02:ba:a5:f3:b2:30:25:6d:73:dd:77:
         61:6d:45:c1:73:40:f9:4c:f1:54:20:0e:33:0d:51:f5:a9:1e:
         34:26:c0:fc:fa:58:d6:a1:e1:0c:28:12:12:f1:be:ed:ea:8f:
         3d:48:40:31:0d:18:28:3a:fe:50:d4:8c:f8:ab:c4:8e:c9:99:
         49:49:2c:3c:ae:88:dd:5e:8f:7e:e9:8e:c2:4c:10:42:9b:88:
         df:c3:62:f0:69:86:5d:51:b1:1c:ea:a8:20:f2:11:27:92:9f:
         71:7e:20:da:eb:70:cc:de:96:d2:a0:04:48:bd:1f:53:9b:e4:
         a5:57:4d:c6:7d:64:fe:c9:db:d8:f6:3a:97:8d:72:ef:2b:cf:
         e1:7e:8b:3e:dc:08:48:6d:31:98:55:68:11:c4:ab:48:42:e4:
         10:33:97:86:f7:dc:cf:d0:d6:a1:0d:69:b5:c6:ca:c5:4d:41:
         0f:02:db:93:d8:00:7c:a5:ba:51:9a:04:7f:93:e3:ab:c5:e7:
         cc:20:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:19:26 2025 by rpki-client