This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0476E0ECE64311F0AEA94AE3DAE4EC9C.roa
File:                     0476E0ECE64311F0AEA94AE3DAE4EC9C.roa (raw, json)
Hash identifier:          gJqY8hbUmXFsQqTPCTHgTkcC0h4IBxALOcQy7DKycfE=
Subject key identifier:   CD:6F:3A:1D:EA:41:90:0F:15:EE:F4:F9:52:8D:59:64:74:68:AE:09
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       8B
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0476E0ECE64311F0AEA94AE3DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:19:56 +0000
ROA not before:           Wed 31 Dec 2025 12:19:52 +0000
ROA not after:            Wed 31 Jan 2035 12:19:52 +0000
asID:                     24835
IP address blocks:        41.68.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:19:52 2025 GMT
            Not After : Jan 31 12:19:52 2035 GMT
        Subject: CN=695514ec-200c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:34:9c:87:a9:2e:25:ed:17:d2:db:17:33:
                    0a:52:27:51:e3:c8:cc:07:64:00:62:68:a8:a1:cd:
                    ce:65:15:88:98:71:ed:bb:a5:0a:cf:b0:24:b4:5e:
                    92:ea:46:96:9f:04:f6:30:36:00:f6:05:b0:2e:af:
                    c3:4b:d8:02:22:c4:fa:f9:62:94:6e:4f:b9:16:13:
                    fd:9d:c7:af:89:ac:3f:fe:b8:b3:bb:59:8a:b0:44:
                    7d:ea:d0:90:e0:29:f3:53:22:c3:8c:e9:16:30:ea:
                    02:da:ab:f4:0f:d7:c3:a5:d5:a1:39:b7:2e:2e:7e:
                    9a:47:54:4b:42:1f:06:63:21:58:16:c4:4c:73:e4:
                    9a:66:cd:00:12:e4:c3:3a:28:e7:b6:e6:0a:cd:09:
                    ba:23:62:e1:67:80:fe:41:4b:69:de:3b:b9:70:d1:
                    5a:43:af:91:33:c0:d5:0d:8e:66:e7:ea:ee:0b:7f:
                    81:d1:b5:c8:5f:3a:9a:b3:dc:8a:fc:a7:0d:b7:5e:
                    b3:a8:96:e7:7f:ea:21:ec:b0:86:ad:be:81:55:92:
                    82:a8:dd:4f:32:30:72:4a:80:aa:cf:94:8c:16:c6:
                    1d:43:0f:6a:a1:c6:72:3b:e4:36:c4:14:3a:aa:bc:
                    d9:9b:3c:b5:d4:50:38:94:82:fc:ea:58:82:df:0b:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:3A:1D:EA:41:90:0F:15:EE:F4:F9:52:8D:59:64:74:68:AE:09
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0476E0ECE64311F0AEA94AE3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.68.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:0e:a9:16:37:ad:30:8c:00:ab:2a:2a:f2:0f:51:33:cd:
         56:82:b0:21:07:fd:10:94:89:97:39:07:ff:64:d6:13:d4:57:
         d0:84:76:df:b8:2b:fb:d2:80:30:e3:29:86:79:a4:a5:f7:e1:
         19:0a:77:14:cf:03:cb:ac:90:96:c1:27:9a:97:52:cf:c3:1b:
         47:80:ba:79:02:ba:62:64:e1:36:04:aa:23:34:f2:38:d4:f8:
         a9:6a:b4:e7:cc:45:32:5d:4f:f8:21:08:6d:0f:5f:fd:41:4e:
         fb:e9:b3:0f:73:02:ae:b0:48:4d:da:84:2a:01:fa:54:eb:5e:
         33:e8:83:6b:6b:c0:e6:4f:25:43:ba:1d:71:52:8e:6c:93:72:
         14:ce:ca:18:49:03:e9:be:2a:79:54:c2:d7:61:e1:6b:c1:e6:
         0e:48:4d:0a:37:f2:93:26:9b:bb:96:9e:94:c7:8f:68:21:fb:
         59:70:d7:60:80:58:8a:90:7d:bc:56:73:af:0c:e6:36:53:24:
         e7:be:69:da:a4:5a:3e:05:92:e0:8c:dd:66:2c:ae:b1:c5:4e:
         1c:32:09:01:db:c7:6e:54:a9:69:1c:10:0b:c5:e6:a7:30:71:
         38:83:c8:cc:ae:b5:33:f5:f1:85:b9:8d:a2:6a:4a:8e:a5:bb:
         89:6d:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:25 2026 by rpki-client