This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/08555AE2E2AE11F0B1962FA1DAE4EC9C.roa
File:                     08555AE2E2AE11F0B1962FA1DAE4EC9C.roa (raw, json)
Hash identifier:          3dtsbRMFUQeDPfQli+f46C9vMLlNlqAr7VBqoPX8KyQ=
Subject key identifier:   5E:64:1E:4C:34:68:11:BF:D7:62:EF:8E:D8:4C:CF:C4:EC:A0:05:EE
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       15
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/08555AE2E2AE11F0B1962FA1DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:55:54 +0000
ROA not before:           Sat 27 Dec 2025 22:55:50 +0000
ROA not after:            Mon 31 Dec 2035 22:55:50 +0000
asID:                     329678
IP address blocks:        102.203.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:55:50 2025 GMT
            Not After : Dec 31 22:55:50 2035 GMT
        Subject: CN=694f127a-1dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:2c:14:f3:67:3e:8d:cc:85:1e:11:7e:ef:
                    ac:bb:a0:3c:48:10:c0:27:88:07:03:ef:4e:56:b0:
                    7a:ff:4e:8e:dd:30:47:8d:0f:94:23:48:ab:0a:31:
                    2e:e2:f9:7f:07:3e:23:9b:c7:61:5d:7f:7e:25:d1:
                    2b:f7:30:ba:16:11:cc:9d:fb:50:24:3a:7f:83:1c:
                    58:d9:67:da:84:52:0d:fe:b4:c0:77:51:bc:c4:6b:
                    6d:e2:e5:c8:63:77:b5:b2:7b:02:ed:24:ee:66:6e:
                    0d:de:fd:4b:39:03:0e:16:d3:fd:8f:f4:b4:87:ab:
                    77:c1:87:6d:78:8a:2b:7e:80:95:d1:aa:f6:61:49:
                    74:27:84:32:92:fa:07:d3:11:96:6e:4d:18:d9:3f:
                    15:71:e6:54:44:7b:c9:f3:ec:13:a8:10:4f:32:63:
                    d3:01:5b:3d:9d:eb:8a:82:22:13:68:af:8f:56:5b:
                    cf:e0:a4:76:c3:09:0e:3e:99:6b:12:1d:eb:1a:f6:
                    98:f3:07:32:b8:42:74:70:b9:98:31:ad:1d:f9:c5:
                    db:d2:91:4e:28:3d:3a:61:81:b6:02:1f:df:7d:07:
                    f9:38:69:fa:96:02:54:07:b7:20:5c:52:88:a9:57:
                    f1:32:4e:d4:d1:35:58:ce:5a:9e:ed:a3:77:5b:8c:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:64:1E:4C:34:68:11:BF:D7:62:EF:8E:D8:4C:CF:C4:EC:A0:05:EE
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/08555AE2E2AE11F0B1962FA1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:ab:e5:ad:50:49:75:96:49:16:77:16:1c:7c:29:c8:5d:
         bf:f2:26:65:86:75:20:6f:b0:45:16:4a:6d:39:2b:25:c4:30:
         b3:fb:9c:74:b2:ec:46:b5:86:45:05:db:59:8f:07:88:78:e3:
         7d:ad:e2:5f:de:4a:c4:8d:42:9f:9c:0b:e4:ef:64:12:77:cd:
         f6:0a:2f:32:33:e1:0d:2d:f2:8c:0b:6f:4c:35:ab:30:64:34:
         ec:b8:3a:c4:3b:7a:96:2a:d7:2e:bc:1f:eb:e5:4a:75:f5:94:
         e9:6a:fd:29:01:c9:a1:e1:38:0f:3e:c7:ff:d1:1c:fb:cd:39:
         09:a4:5e:60:1f:24:87:ad:db:98:3b:51:c8:51:a9:97:3a:c9:
         66:95:d3:ee:d7:c7:e9:b2:4a:0b:f4:30:b6:cd:71:39:2c:98:
         67:8e:9e:cb:b7:79:c7:fe:24:e7:6c:68:78:80:d4:46:90:d9:
         60:25:1e:66:19:d3:1f:ec:69:3f:e2:e2:fe:23:e0:78:a7:40:
         ff:53:23:f9:85:86:71:0b:7f:18:c7:d4:32:a3:07:d8:6f:d4:
         f0:93:2f:a4:e3:7f:81:43:f1:bb:4e:38:14:e6:d3:7d:8e:0a:
         b8:1f:76:ce:8f:8a:f5:53:3d:e8:0a:49:c2:02:39:3a:a7:88:
         d9:ff:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:31:56 2026 by rpki-client