This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/EECB2F1EE64711F09EF7A882DAE4EC9C.roa
File:                     EECB2F1EE64711F09EF7A882DAE4EC9C.roa (raw, json)
Hash identifier:          6+EHSpYkLMZkNikFTUcxHrLnTv0tuncTsjXIBMarg3U=
Subject key identifier:   5F:72:8B:21:E3:B0:4C:6A:BF:20:2A:BD:40:BC:3C:BE:25:2E:3C:6F
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       4A
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/EECB2F1EE64711F09EF7A882DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:55:07 +0000
ROA not before:           Wed 31 Dec 2025 12:55:03 +0000
ROA not after:            Mon 31 Dec 2035 12:55:03 +0000
asID:                     36935
IP address blocks:        213.212.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Dec 31 12:55:03 2025 GMT
            Not After : Dec 31 12:55:03 2035 GMT
        Subject: CN=69551d2b-1b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:79:f0:9d:84:41:ab:b4:5d:ee:7e:eb:1c:
                    c0:ef:cd:ff:f3:f5:9b:2c:eb:4d:40:f4:bb:22:f8:
                    ce:80:3f:67:18:f7:44:dd:b1:e2:94:69:8a:db:2a:
                    aa:1a:04:f8:76:9c:e2:d9:33:0a:a9:8f:af:0b:25:
                    62:e4:3c:de:e9:0f:00:9f:e0:2c:d3:51:ef:b7:73:
                    2e:b9:eb:a8:91:4b:76:eb:7b:8c:4a:00:e0:58:65:
                    ff:fa:03:71:97:ae:bb:31:50:3c:66:25:54:07:13:
                    84:2e:4e:1a:8f:12:03:98:a9:45:51:e8:1b:a8:33:
                    f8:fc:ec:f7:65:25:23:ff:49:fb:d5:00:a5:cb:b2:
                    63:97:b4:a1:f6:0f:2b:3d:bc:55:ae:63:33:33:16:
                    af:93:87:73:db:4e:91:5c:04:39:7b:35:fb:ca:56:
                    c4:65:e2:9a:41:81:bc:9e:68:fa:15:9b:8f:67:d4:
                    6a:24:46:6f:8d:96:2d:97:2f:50:55:8e:f1:86:2d:
                    16:2d:22:e2:ef:ab:48:40:a4:b2:6a:44:3b:d4:be:
                    df:e8:14:79:19:72:80:2e:8b:18:d6:88:43:18:b4:
                    55:ab:1f:bd:1f:35:4e:7c:6f:17:d5:61:b8:b0:13:
                    d5:80:49:f5:66:08:b0:52:17:8a:56:1c:ae:66:5e:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:8B:21:E3:B0:4C:6A:BF:20:2A:BD:40:BC:3C:BE:25:2E:3C:6F
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/EECB2F1EE64711F09EF7A882DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.212.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:9c:57:c5:bd:7d:b8:0b:ec:b6:16:3e:f4:04:56:69:9f:
         98:28:4d:67:57:10:86:05:df:6a:26:7b:55:16:8b:61:04:d6:
         36:3c:fe:14:75:9d:8c:0e:14:a9:63:c8:17:3f:68:8c:16:2a:
         24:46:b7:ca:d9:2c:9e:47:2a:6f:e3:5d:95:5e:59:04:38:06:
         0a:ff:e0:d7:98:33:94:ff:e5:94:71:de:64:d8:70:6e:5a:81:
         3c:b5:bb:bb:af:da:4e:f6:7c:5d:4f:0f:a0:0c:0b:03:df:d0:
         16:78:5f:3b:a4:b9:75:0e:fe:38:7a:50:ad:97:66:28:b8:74:
         6b:6e:5f:49:59:c3:e6:f2:63:15:41:92:56:d3:fe:3e:4d:e2:
         bb:0c:8e:12:d3:9d:54:f9:9a:54:a8:c8:88:f8:3b:c6:80:07:
         6d:41:72:28:49:c4:1e:83:f5:8c:39:e3:3d:18:c4:f0:a1:ce:
         49:2f:97:1e:7d:72:ad:d6:78:49:63:ca:ce:ee:9c:eb:93:a0:
         2a:90:55:26:c0:cb:c5:35:af:51:c4:0a:9f:5f:1a:89:b5:c2:
         57:25:75:52:98:b7:d7:bc:4b:30:03:f3:dc:f0:cb:cc:62:fa:
         bd:22:f8:ce:82:8c:de:b1:80:29:a5:d0:a0:c1:96:31:70:6b:
         ed:ea:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:28 2026 by rpki-client