This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa
File:                     0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa (raw, json)
Hash identifier:          l9uO6T9qnIveSVMO0EAfStM5WqM8vIz3UlicMoWrw2s=
Subject key identifier:   2E:F7:7E:FA:F0:CD:74:C4:91:3A:6C:AD:20:65:A6:2F:92:00:CA:1D
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       0F
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:48:48 +0000
ROA not before:           Sat 27 Dec 2025 22:48:44 +0000
ROA not after:            Mon 31 Dec 2035 22:48:44 +0000
asID:                     329678
IP address blocks:        102.203.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:48:44 2025 GMT
            Not After : Dec 31 22:48:44 2035 GMT
        Subject: CN=694f10d0-242d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:e0:6e:70:bd:67:f5:ab:73:c8:1c:66:96:
                    83:c5:f5:e0:5b:9e:d2:15:b9:84:f7:c2:15:8d:57:
                    97:5e:c9:aa:2d:16:12:34:2b:20:d4:f6:d0:2c:6a:
                    b2:5f:ee:cf:29:6f:6f:a9:1c:c0:33:59:18:f5:78:
                    f9:d5:c9:e9:9c:d2:c1:f1:0b:79:5b:9f:eb:96:a8:
                    bf:a8:67:90:59:ea:5a:13:d5:ca:c3:3c:2c:c7:1c:
                    5e:8d:1d:f5:da:18:c8:4a:d9:bb:81:b9:1b:92:d8:
                    a2:1d:d3:26:45:87:f0:0f:e6:4a:98:1a:20:05:97:
                    e6:1f:da:5a:89:b0:78:76:45:3d:0c:6d:67:ef:d7:
                    d7:60:7c:aa:77:0f:00:9e:ca:38:dc:9e:3d:a2:8c:
                    39:26:a5:64:47:df:e0:89:e8:cf:08:ec:2e:93:ef:
                    aa:f3:f3:23:2f:be:fe:85:28:f2:07:6c:3f:25:64:
                    8b:9e:10:df:d2:bc:65:5d:6d:9f:cd:32:8b:a8:cf:
                    10:16:e9:ed:07:4b:da:4f:a0:c1:03:a7:a8:fc:af:
                    c9:2e:5b:19:cf:31:b7:7a:a7:44:76:46:b6:41:d1:
                    d8:21:09:fc:85:49:4b:62:ed:fe:34:56:ba:71:87:
                    0c:08:02:2f:c1:9b:da:03:1b:23:45:c1:7f:ba:39:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F7:7E:FA:F0:CD:74:C4:91:3A:6C:AD:20:65:A6:2F:92:00:CA:1D
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:99:2f:34:30:03:c9:f0:f2:e3:ea:92:0c:43:ed:16:b9:d1:
         ac:b9:00:07:f5:29:a6:e8:2b:25:16:6f:45:6d:24:3e:78:51:
         9f:15:f3:2a:82:47:6d:70:9d:79:ca:c3:eb:ee:da:54:f8:66:
         1c:07:b9:f1:63:0b:8d:8e:fb:60:67:fb:24:db:e9:53:0c:fe:
         ed:63:fe:13:f5:9d:7b:69:b3:bb:04:a6:79:64:2e:80:81:4e:
         bd:ad:60:d8:6c:94:f3:3e:ae:5a:b8:06:c6:7f:2c:43:d4:de:
         bd:bc:41:c4:f7:14:c9:7f:4a:e9:74:23:b2:be:0b:12:73:10:
         98:2a:53:77:79:17:73:f0:ef:a3:a3:45:f6:ee:06:ca:d8:78:
         e1:09:29:0a:25:12:95:6d:cc:cc:74:44:34:ea:89:ad:56:d3:
         4f:de:1a:dc:0d:76:d2:c1:25:7b:ee:0e:6c:23:e1:2c:ce:5d:
         4f:0f:a6:a9:1f:16:1b:e4:8b:d4:9c:8b:51:d1:97:27:08:af:
         ca:dd:4c:64:2b:94:c2:c0:37:07:d1:e1:9c:9f:74:f8:e1:ed:
         5a:17:10:20:c5:9b:d1:bb:ba:8b:11:32:c2:c1:18:ec:d5:e6:
         91:0e:d7:cd:91:ce:16:e9:51:cd:3a:e7:38:fa:d3:b9:62:a1:
         4a:c3:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:48 2026 by rpki-client