This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/BEF7090AE2AC11F08942E698DAE4EC9C.roa
File:                     BEF7090AE2AC11F08942E698DAE4EC9C.roa (raw, json)
Hash identifier:          FhBtGfwBJqyBaCCf7eyjt0uPvyWt1f6aEoLSZs81xgc=
Subject key identifier:   A0:D9:F0:60:BA:88:EE:5A:A9:06:50:0D:6F:E3:3E:9D:56:8B:22:EE
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       0D
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/BEF7090AE2AC11F08942E698DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:46:42 +0000
ROA not before:           Sat 27 Dec 2025 22:46:36 +0000
ROA not after:            Mon 31 Dec 2035 22:46:36 +0000
asID:                     329678
IP address blocks:        102.203.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:46:36 2025 GMT
            Not After : Dec 31 22:46:36 2035 GMT
        Subject: CN=694f1052-b053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:b3:a6:18:c5:2f:0f:31:26:d3:24:61:88:
                    08:9e:33:44:1b:64:69:7d:89:1f:5d:35:e0:1e:f0:
                    58:0b:5e:d4:10:09:63:cf:c9:14:ea:b2:0c:bf:10:
                    fc:3a:e5:93:2c:75:ff:c3:e4:8b:ab:79:1f:1a:66:
                    17:ac:84:40:ac:88:a3:44:8a:57:b1:0f:71:60:02:
                    0e:fd:36:a0:24:0e:19:43:b2:ed:a7:69:fb:2f:32:
                    ce:9b:67:76:19:67:c3:27:cf:58:c2:61:fd:2b:d9:
                    83:12:f4:b9:c4:08:52:de:62:8b:6f:4a:0b:91:69:
                    3b:0d:b3:09:f7:bb:91:5d:ce:e8:b4:66:a7:82:7f:
                    94:5f:ba:d0:f3:95:18:a5:72:70:52:67:23:8f:b0:
                    cc:7d:39:1e:ec:1a:35:ea:49:d5:9b:a1:48:e5:09:
                    1f:0a:6a:e5:42:73:de:cf:df:3f:88:eb:6b:e9:cc:
                    43:be:a9:52:c7:4f:40:f9:66:78:ef:81:58:1b:02:
                    c3:d0:73:1f:25:ce:b6:b8:71:dd:9d:9e:10:77:bf:
                    ad:4d:6c:89:5c:fc:d8:cd:4d:4f:94:48:62:a8:fc:
                    8a:ca:c1:ba:20:25:6b:6c:4a:de:e8:f9:70:4f:57:
                    33:55:c8:e9:7a:37:32:9a:67:39:b1:84:41:14:d8:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:F0:60:BA:88:EE:5A:A9:06:50:0D:6F:E3:3E:9D:56:8B:22:EE
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/BEF7090AE2AC11F08942E698DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:94:fd:06:7a:9b:ef:21:79:36:38:eb:59:9c:c0:4b:c5:ab:
         df:23:d7:8b:d3:3b:18:e8:54:a8:b6:ab:ac:63:19:49:e5:62:
         85:44:ba:0b:32:58:5c:71:57:ad:af:72:77:f0:38:6b:45:0a:
         13:63:c0:bb:cb:d0:83:1d:37:07:ad:cf:a9:ad:f6:2f:ef:6b:
         53:d1:2b:92:45:5f:ca:08:15:ef:c9:15:63:bc:d3:ee:c4:b4:
         93:46:21:ae:71:f0:a1:a4:2a:de:7e:a2:b0:7c:2d:1c:e1:b1:
         6e:89:95:ee:7b:c6:dd:a0:10:46:ef:64:49:d5:bd:34:73:f3:
         b0:3d:33:e2:93:47:8f:5a:60:67:88:e0:49:15:f6:0f:50:c2:
         a9:f7:a7:6f:b8:4c:b5:59:03:6b:a8:4a:de:85:f6:35:c8:4f:
         d7:16:01:81:24:a8:4a:c3:fc:3d:6f:a7:7d:83:c2:ac:0c:1d:
         47:9b:4e:9c:2a:71:9c:ff:17:85:37:60:4b:26:47:92:1c:3b:
         80:61:4a:a5:d1:61:8e:1c:66:d3:52:62:53:0d:0c:b1:c6:74:
         5d:2f:55:02:f9:e3:ad:cc:1b:39:b5:ab:38:94:84:0f:5a:dd:
         50:cc:75:90:83:2c:a1:b5:1c:fd:cd:ab:92:e4:49:cc:60:91:
         6c:93:7a:a5
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
OEVEQkFGMTEwLwYDVQQFEygyODMyNzRDNDMwOUIwMjdBOUJENUUwNjRCQzZFRDBD
RjNGREY5QjdEMB4XDTI1MTIyNzIyNDYzNloXDTM1MTIzMTIyNDYzNlowGDEWMBQG
A1UEAxMNNjk0ZjEwNTItYjA1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANy6s6YYxS8PMSbTJGGICJ4zRBtkaX2JH1014B7wWAte1BAJY8/JFOqyDL8Q
/Drlkyx1/8Pki6t5HxpmF6yEQKyIo0SKV7EPcWACDv02oCQOGUOy7adp+y8yzptn
dhlnwyfPWMJh/SvZgxL0ucQIUt5ii29KC5FpOw2zCfe7kV3O6LRmp4J/lF+60POV
GKVycFJnI4+wzH05HuwaNepJ1ZuhSOUJHwpq5UJz3s/fP4jra+nMQ76pUsdPQPlm
eO+BWBsCw9BzHyXOtrhx3Z2eEHe/rU1siVz82M1NT5RIYqj8isrBuiAla2xK3uj5
cE9XM1XI6Xo3MppnObGEQRTYDZMCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSg2fBg
uojuWqkGUA1v4z6dVosi7jAfBgNVHSMEGDAWgBQoMnTEMJsCepvV4GS8btDPP9+b
fTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MThFREIvRUM3MkFDM0FFMEY1MTFGMDk2NDBDQUQ3REFFNEVDOUMvS0RKMHhE
Q2JBbnFiMWVCa3ZHN1F6el9mbTMwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvS0RKMHhEQ2JBbnFiMWVCa3ZHN1F6el9mbTMwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MThFREIvRUM3MkFDM0FFMEY1MTFGMDk2NDBDQUQ3REFF
NEVDOUMvQkVGNzA5MEFFMkFDMTFGMDg5NDJFNjk4REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWbLxDANBgkqhkiG9w0BAQsF
AAOCAQEAaZT9Bnqb7yF5NjjrWZzAS8Wr3yPXi9M7GOhUqLarrGMZSeVihUS6CzJY
XHFXra9yd/A4a0UKE2PAu8vQgx03B63Pqa32L+9rU9ErkkVfyggV78kVY7zT7sS0
k0YhrnHwoaQq3n6isHwtHOGxbomV7nvG3aAQRu9kSdW9NHPzsD0z4pNHj1pgZ4jg
SRX2D1DCqfenb7hMtVkDa6hK3oX2NchP1xYBgSSoSsP8PW+nfYPCrAwdR5tOnCpx
nP8XhTdgSyZHkhw7gGFKpdFhjhxm01JiUw0MscZ0XS9VAvnjrcwbObWrOJSED1rd
UMx1kIMsobUc/c2rkuRJzGCRbJN6pQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:05 2026 by rpki-client