This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa
File:                     5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa (raw, json)
Hash identifier:          Lb+wrneK44yBD0CAONsxLgg7KqMCARKbOXH5GvTo2qM=
Subject key identifier:   06:D7:10:5B:AD:EA:B8:B0:5D:5A:57:49:A1:5C:A1:07:E2:FB:7A:27
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       0A
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:44:00 +0000
ROA not before:           Sat 27 Dec 2025 22:43:55 +0000
ROA not after:            Mon 31 Dec 2035 22:43:55 +0000
asID:                     329678
IP address blocks:        102.203.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:43:55 2025 GMT
            Not After : Dec 31 22:43:55 2035 GMT
        Subject: CN=694f0fb0-121d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:30:f8:99:ad:09:b0:a2:53:a3:02:6d:d8:
                    98:46:95:8a:ef:a7:d7:f2:80:df:60:1a:d1:e1:aa:
                    00:f7:db:d7:7c:f4:ed:76:65:ca:99:b9:32:e9:e7:
                    c2:e5:46:d1:d2:5c:c6:6f:e0:96:33:78:76:be:9a:
                    63:24:67:2a:d8:31:ff:f2:92:df:e7:67:fb:c6:49:
                    cf:fa:c4:97:b4:a2:fa:85:f1:4d:7f:22:75:aa:bc:
                    2c:ad:30:68:e9:58:e6:ef:a7:08:9f:94:5a:d5:f9:
                    28:5b:3c:b8:e4:e6:50:c9:e9:88:bc:2c:88:e0:76:
                    94:de:99:d6:62:d3:75:22:54:67:6d:8f:fa:a9:55:
                    0e:0b:48:3b:dc:55:d7:b9:ec:d2:c1:84:24:64:c3:
                    c9:4a:30:bf:ea:a2:76:b3:c6:d9:f0:60:10:a2:b4:
                    f5:77:f7:cd:b2:cf:17:44:7a:4c:49:20:fb:4d:a7:
                    44:d0:59:62:fd:2c:a6:78:3f:b2:c3:a0:9a:1e:c9:
                    99:6e:2e:6a:44:39:6a:ed:74:dc:8b:0f:42:cf:ec:
                    38:94:e2:3e:74:1f:48:88:2e:ea:7c:87:af:44:63:
                    b8:77:e3:f1:39:53:10:83:47:b0:80:2d:ce:e7:f5:
                    20:3d:c6:1a:ac:fd:f6:4b:ba:03:fb:d7:cd:85:27:
                    b1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:10:5B:AD:EA:B8:B0:5D:5A:57:49:A1:5C:A1:07:E2:FB:7A:27
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:0f:f6:dd:5a:4b:7e:20:61:07:8d:99:ba:b4:20:46:9f:
         c5:33:fc:ec:da:c6:12:74:f7:eb:ed:12:ad:b6:42:f6:a4:93:
         34:10:58:1b:65:76:3a:e5:da:35:87:f0:5d:4f:5a:d6:7c:b6:
         ca:6b:86:3f:ea:44:07:86:1c:d8:be:bc:ea:15:b9:84:ab:65:
         89:56:89:a5:d0:02:3f:d2:fe:13:83:5e:5a:6a:c7:9d:d8:b5:
         8e:59:2a:99:da:c4:80:e6:dd:5e:37:05:58:eb:e1:a4:21:dc:
         bf:9a:59:28:b8:c2:8f:d2:ee:84:9f:d7:69:1f:25:b9:fb:a1:
         26:bb:f7:4d:47:86:1c:09:59:ba:23:50:98:5c:3f:7e:fc:93:
         97:18:4a:18:81:aa:2f:88:10:fe:ee:80:8c:6e:1f:07:e8:7b:
         9f:0b:d5:4a:9a:50:39:a2:16:86:e4:b5:c5:45:22:f5:58:fd:
         4d:9b:42:3c:c1:c1:1c:cb:86:82:2d:68:9d:9a:8c:80:52:af:
         d0:3b:d3:a7:d9:80:ec:35:d4:ba:15:32:5c:c9:a3:d1:91:a3:
         46:6e:d6:c8:bb:18:fc:e2:dc:92:7c:34:7c:62:1e:a0:4e:d4:
         78:10:7c:14:06:ba:3d:7f:ab:36:de:9d:89:eb:8b:7d:e0:a2:
         67:64:77:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:35:31 2026 by rpki-client