This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
File:                     107ED0CACFE111F0957C53ACDAE4EC9C.roa (raw, json)
Hash identifier:          RIkwUzoDd3XDed4hEq/jalYnrLUgJWyxDayVH4F6t5g=
Subject key identifier:   D0:18:20:36:16:AF:7E:3E:14:39:0F:F5:39:A0:DA:AD:F4:5C:0A:B1
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       37
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 00:43:20 +0000
ROA not before:           Wed 03 Dec 2025 00:00:15 +0000
ROA not after:            Mon 31 Dec 2035 00:00:15 +0000
asID:                     24835
IP address blocks:        105.199.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  3 00:00:15 2025 GMT
            Not After : Dec 31 00:00:15 2035 GMT
        Subject: CN=692f87a8-0077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:7f:dc:03:45:59:c9:04:ea:9c:17:08:1a:
                    ac:f5:3b:33:b1:fc:05:c4:fd:f9:58:cd:b3:d8:58:
                    61:a1:f4:cc:b9:9c:fd:83:27:c0:cb:a7:3b:84:a9:
                    b4:44:4c:e6:0d:04:14:bd:11:b8:d1:fe:07:6b:3f:
                    c3:2f:70:1d:48:6f:e0:8f:aa:0e:4e:e2:2e:61:24:
                    4f:15:5f:f0:ae:a3:6c:20:06:ec:47:70:05:d0:db:
                    5f:b0:f7:40:bc:3c:5d:0b:75:c5:72:5c:df:7d:6f:
                    e6:98:e1:04:a5:a7:50:08:f9:1b:af:f7:c3:6c:7f:
                    89:14:76:d4:6e:18:aa:9e:19:0b:15:8e:7e:2b:a3:
                    09:57:0a:69:56:36:e3:84:19:2e:68:6d:4f:63:f0:
                    2e:a8:ff:5e:34:b1:54:07:46:26:18:15:25:48:ab:
                    41:25:5a:17:fd:72:e6:db:c1:fe:93:aa:4e:a5:5c:
                    01:c1:88:05:64:46:52:02:48:94:12:31:fd:dd:7c:
                    6f:11:82:71:39:b5:9c:14:3a:e4:8f:27:bc:e4:19:
                    68:57:71:8e:7b:41:79:72:ad:89:0d:8f:e4:23:f2:
                    67:30:41:31:25:08:7f:9d:3e:77:b9:17:c5:8c:61:
                    81:dd:0d:7c:66:ad:1b:1b:c0:cb:b7:f0:ca:be:72:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:20:36:16:AF:7E:3E:14:39:0F:F5:39:A0:DA:AD:F4:5C:0A:B1
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.199.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:f9:dc:d9:ea:25:e9:66:5c:37:b9:6b:ce:91:3f:82:5f:
         b8:11:1d:a8:9a:e9:2d:76:8e:0f:97:02:a4:a1:2a:d8:bb:58:
         e3:36:e8:fd:00:0b:a8:ef:03:09:bc:2d:ac:0a:51:7a:8e:16:
         3b:7f:1b:00:3e:37:2b:b8:80:c3:09:db:1f:6a:e1:20:60:ea:
         40:ec:1c:c0:8f:1f:df:9d:fc:28:67:06:09:a6:77:d0:4e:b2:
         f5:fc:91:b8:91:d4:4b:d5:29:67:4f:82:8c:01:88:04:be:02:
         98:c5:42:c4:ae:cb:cd:1e:3f:cb:ac:d3:09:67:85:c3:b6:83:
         39:87:35:84:ad:75:d7:a6:55:9f:08:65:ce:57:af:15:53:a0:
         cd:2a:de:91:5c:76:85:15:e3:63:96:b6:74:db:a5:32:3a:92:
         40:2b:95:1d:af:31:83:9c:ee:d3:e9:24:18:61:7e:41:a2:96:
         c4:86:c4:6a:03:0a:98:50:c4:84:0a:12:ba:aa:8f:28:d8:c4:
         a4:6d:e6:f4:10:a7:fa:97:02:fd:3a:ea:6d:71:37:b3:34:e8:
         e0:5c:ef:7c:ae:80:b7:c8:5e:c8:6b:1b:dc:5b:5c:a0:ab:6b:
         49:aa:a4:5f:90:96:2c:cf:dc:2e:87:71:68:f3:98:dc:02:fa:
         45:ac:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client