This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa
File:                     A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa (raw, json)
Hash identifier:          6WEM00ZKqEuwevPcgj7EKqQZy0f2qOX5R1pO+pIZTdk=
Subject key identifier:   AB:63:E7:AD:69:7B:89:18:42:59:BB:AF:5A:9B:5B:C1:15:93:62:8A
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       11
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:53:12 +0000
ROA not before:           Sat 27 Dec 2025 22:53:08 +0000
ROA not after:            Mon 31 Dec 2035 22:53:08 +0000
asID:                     329678
IP address blocks:        102.203.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:53:08 2025 GMT
            Not After : Dec 31 22:53:08 2035 GMT
        Subject: CN=694f11d8-3ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:ff:fe:63:93:f6:49:69:10:a9:44:25:9a:
                    10:5f:6d:81:95:d8:60:fa:f5:29:1a:97:ab:15:be:
                    da:6f:22:75:1f:34:89:09:d6:22:6c:87:40:ee:1c:
                    6c:1a:4c:89:08:23:1f:d4:80:92:5d:11:ab:1a:54:
                    68:c8:c7:3b:59:7b:55:91:22:44:e9:a1:ec:36:bb:
                    de:3a:7e:f4:09:e3:a4:50:ce:dc:d0:78:44:22:6e:
                    99:05:c0:0d:6b:1e:77:25:19:00:f3:81:c4:a3:ba:
                    4b:24:d4:b7:82:73:0a:d3:82:ee:7c:96:88:47:6f:
                    65:1c:6d:55:ce:c1:ad:19:ed:3c:e1:bd:89:f0:9b:
                    c8:86:2e:4c:49:3e:45:f8:df:8d:bd:d4:b3:28:16:
                    1e:b5:65:e6:59:9e:e0:53:ea:74:18:6a:44:2b:3d:
                    86:b7:8f:46:0f:5b:8c:1a:09:0a:89:45:26:94:61:
                    5f:34:ca:58:06:62:7a:34:58:5d:ca:7e:5b:5d:c3:
                    b0:c0:da:c2:2b:34:96:13:b2:e4:d7:72:49:d9:d5:
                    43:91:1f:73:f6:f6:24:97:02:49:e1:24:76:da:a5:
                    52:7e:ba:22:70:d5:64:47:77:5f:38:66:f4:d1:8d:
                    ec:ec:b4:6f:13:dc:fc:5e:31:87:5b:f9:5c:65:85:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:63:E7:AD:69:7B:89:18:42:59:BB:AF:5A:9B:5B:C1:15:93:62:8A
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:69:db:1b:9d:5a:de:9d:32:cc:71:0a:b1:39:58:85:be:
         d5:18:00:96:e8:85:91:ad:80:02:e9:aa:d0:70:02:ea:00:80:
         10:2a:64:d2:52:1c:84:bc:a0:c3:10:97:36:c0:c7:55:32:ad:
         99:a1:8b:96:fb:0c:fa:c1:d3:1a:6b:cd:35:23:11:13:5e:5e:
         7f:b6:c6:34:bf:b9:01:91:88:ec:61:f7:88:d1:c7:29:c2:28:
         62:b4:b9:7f:5c:70:16:21:24:dd:1d:f6:eb:7e:39:3d:2f:ba:
         38:d3:70:f0:fe:5d:db:16:ad:a7:66:be:3b:18:c1:ab:85:73:
         96:fe:be:d0:9c:78:1d:e7:39:8d:a5:28:72:c3:ac:de:86:c6:
         2d:88:3e:17:bd:29:22:7f:ac:ee:ba:a8:c8:c9:7c:98:4f:f5:
         00:1a:a7:c1:f0:e9:dd:30:d5:2d:a2:ea:f7:2e:1b:02:17:ac:
         ab:e2:2e:38:4b:00:67:3d:d1:0b:93:8c:d3:c6:3c:18:a3:d9:
         85:52:0e:fd:19:87:43:b6:22:92:16:66:dc:c4:1f:c5:d7:ae:
         2c:32:84:3b:47:fc:25:7f:4f:69:ba:5a:e0:9d:fb:e0:5a:6e:
         a9:24:3a:a2:e0:b3:90:be:9c:cb:1b:21:60:74:14:ba:0c:76:
         16:c6:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:44 2026 by rpki-client