This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50129702F08A11F0A86CF4A3DAE4EC9C.roa
File:                     50129702F08A11F0A86CF4A3DAE4EC9C.roa (raw, json)
Hash identifier:          +3Wp4Xd+w8p0JaGy+DHlVS8RLaQiVmHBcSQvz04TUxU=
Subject key identifier:   5F:E4:FB:02:91:54:F5:CD:D5:EB:54:46:E6:33:31:17:B1:77:63:55
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       1D90
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50129702F08A11F0A86CF4A3DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 14:15:29 +0000
ROA not before:           Tue 13 Jan 2026 14:15:24 +0000
ROA not after:            Thu 13 Jan 2028 14:15:24 +0000
asID:                     212238
IP address blocks:        154.16.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7568 (0x1d90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jan 13 14:15:24 2026 GMT
            Not After : Jan 13 14:15:24 2028 GMT
        Subject: CN=69665381-f2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:96:d1:98:c2:93:1f:07:48:68:ad:b7:7d:
                    0c:45:3c:64:ee:8d:86:b1:e7:ea:48:5c:4c:17:b0:
                    c3:86:0e:1b:3a:b8:70:ab:de:28:1c:c2:03:ef:c3:
                    28:ec:e9:46:bf:98:32:6c:b7:ec:52:4b:46:5c:78:
                    63:22:2e:1a:d2:34:a1:0d:97:c6:1f:52:80:ce:8c:
                    ab:13:64:6e:37:75:e5:94:99:bd:b9:fd:9b:6d:c5:
                    b3:ce:0f:0a:4c:09:a7:9b:ac:d7:6b:83:62:f6:63:
                    c4:1c:aa:9f:e6:96:c5:67:5b:8b:e9:89:cc:8a:4a:
                    46:a8:d7:8b:0f:4c:92:ef:f3:1c:79:82:98:71:1e:
                    ba:ac:3a:f6:93:79:86:07:4d:5b:b1:c0:04:19:35:
                    0b:f2:10:26:c2:32:e4:cc:0a:dd:d2:a4:1d:e5:fc:
                    46:a7:64:0d:0c:a8:72:9c:9a:d3:b1:49:70:5d:eb:
                    e8:0c:80:e5:c1:82:7c:16:56:49:1f:a0:4e:32:23:
                    9e:02:be:fa:d4:71:4d:27:f7:97:5d:62:61:96:16:
                    45:51:3c:81:88:cd:38:21:a3:7a:39:a9:65:29:af:
                    ab:47:a5:4c:e1:f6:6b:23:3c:7a:a4:a7:c9:cc:2b:
                    47:4a:9f:ff:72:62:df:0b:bd:b4:26:cb:8e:a4:fd:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E4:FB:02:91:54:F5:CD:D5:EB:54:46:E6:33:31:17:B1:77:63:55
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/50129702F08A11F0A86CF4A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:95:e1:94:31:c3:5e:9d:81:89:a3:f9:3b:72:3c:7b:93:56:
         aa:82:fe:fe:13:9c:cc:6a:db:ee:15:e1:ee:af:2b:6f:31:91:
         df:d6:f1:8b:ad:4b:aa:44:b0:04:54:0d:a3:13:d9:9b:44:01:
         e5:49:92:40:98:86:db:59:89:17:2b:14:ec:c6:05:ed:7d:ca:
         59:ac:77:8f:55:43:75:15:1a:0b:de:5e:39:8b:82:6c:46:f3:
         26:ee:cd:55:91:3f:79:c9:2f:7f:1f:13:4e:48:69:b7:d6:f1:
         5c:fd:65:3b:96:14:51:fd:6e:92:32:6b:e9:44:49:ab:1b:f5:
         b0:84:c5:dd:cc:c8:d3:7f:f7:ba:04:e4:8d:f0:71:4d:5e:04:
         67:00:fd:0e:2f:e7:50:0e:6c:df:d0:95:fa:7d:53:a4:21:ed:
         0e:5b:8d:85:0b:21:47:cd:24:78:dd:8e:35:a6:c7:35:72:ed:
         36:20:bf:08:26:de:66:58:e5:87:67:84:e6:da:2f:69:66:2c:
         3e:fa:73:55:b7:ac:85:df:cd:e0:e6:dc:90:7c:0b:cd:e2:0a:
         6f:f1:8e:b7:65:6b:10:c7:75:57:7a:95:56:0b:fd:a0:d1:66:
         ea:8f:79:b7:7f:d4:71:ab:e9:f5:99:bb:2e:1c:b5:d5:ab:0a:
         21:3f:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:49 2026 by rpki-client