This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa
File:                     D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa (raw, json)
Hash identifier:          AsFQ03ZNXkHPbbINQUBNQ5N+wl37nGduJvWmVv5sY+I=
Subject key identifier:   F1:44:EE:3A:2B:A8:B5:74:4C:C2:00:8B:13:11:E8:4B:62:37:F7:F6
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       13
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 22:54:30 +0000
ROA not before:           Sat 27 Dec 2025 22:54:25 +0000
ROA not after:            Mon 31 Dec 2035 22:54:25 +0000
asID:                     329678
IP address blocks:        102.203.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 27 22:54:25 2025 GMT
            Not After : Dec 31 22:54:25 2035 GMT
        Subject: CN=694f1226-bcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:b0:6c:b8:35:d4:36:0d:68:35:67:da:79:
                    79:52:ce:58:24:3a:ac:1a:32:a7:e4:9d:4c:c3:11:
                    4a:34:8e:af:de:99:39:be:aa:a3:21:b1:a3:0d:34:
                    11:df:fe:61:4a:2a:88:74:df:70:1b:7a:7e:4e:46:
                    6b:8b:a3:71:96:dc:29:12:36:73:63:ce:fe:52:80:
                    49:4b:c5:f9:93:db:1b:a6:ff:e0:dc:c1:79:d1:44:
                    ac:83:1b:84:9b:3b:b2:fd:90:84:1b:b3:ec:c2:c7:
                    43:60:e0:40:77:e0:da:ce:46:ae:0b:00:3c:a8:b6:
                    2c:af:8b:b4:26:a5:a4:78:c1:90:5f:b6:46:75:b2:
                    ae:da:99:f6:18:2b:72:fd:a9:6d:4f:3f:d0:e1:34:
                    d3:14:b4:e7:3c:c0:6f:ca:3d:e1:29:8c:d2:3c:c1:
                    d6:75:d9:95:e8:cb:f0:42:77:88:14:05:33:41:87:
                    81:45:0b:00:4d:be:ac:c4:30:45:4d:3c:e7:ab:6c:
                    ef:f2:f6:14:5f:71:e1:a9:31:84:fa:2d:d5:5c:b6:
                    26:a7:c2:db:e8:70:5f:e6:6d:2d:70:cf:4f:17:c1:
                    0b:d5:a7:e0:a0:4a:5c:86:6f:82:15:4d:52:90:85:
                    06:f2:65:e5:d8:6a:42:fd:76:a8:fd:21:9d:74:36:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:44:EE:3A:2B:A8:B5:74:4C:C2:00:8B:13:11:E8:4B:62:37:F7:F6
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:1c:26:2f:7a:63:c5:50:07:06:55:e9:fd:01:32:52:a1:
         b5:24:1e:75:5a:7c:ff:ed:af:68:fd:77:02:a0:e3:2e:82:7a:
         cb:ef:6c:5d:21:dc:59:cf:0c:32:45:6b:51:4f:54:c8:13:5e:
         91:c1:32:a1:87:ae:41:bf:19:31:5a:1c:24:8f:5d:bb:d8:58:
         c6:dc:0a:7f:f3:2d:81:92:0e:2d:b3:40:88:ee:de:ca:b2:6f:
         25:63:15:79:81:7c:23:7c:4d:f1:50:f4:02:6d:10:56:5e:b0:
         b1:b5:67:6b:28:d3:cc:c1:92:70:79:be:a1:95:54:a1:1f:f3:
         f3:80:19:a8:ca:c6:3b:3f:c4:38:79:3a:75:0a:d9:78:62:49:
         2b:a8:44:ba:59:d0:b9:c8:3a:d3:c0:06:27:ad:00:6e:e8:0e:
         e7:3e:a5:64:a4:fc:4d:da:7a:e8:bd:c7:58:e8:85:cc:2e:76:
         6c:98:9d:6a:c3:d8:1f:bb:c6:09:52:9f:d1:69:ea:41:1d:82:
         92:9b:31:ff:92:4a:b8:89:77:55:4b:da:e2:9d:c4:2b:e8:b8:
         88:97:82:4e:c7:91:d9:44:8f:4c:22:f2:9e:a8:30:21:47:a9:
         e2:db:b9:af:ab:ea:8d:9d:4b:39:1c:1e:57:1a:a6:2e:7a:31:
         56:9c:cc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:34:09 2026 by rpki-client