This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/13AACCE2CFB711F09229CCAADAE4EC9C.roa
File:                     13AACCE2CFB711F09229CCAADAE4EC9C.roa (raw, json)
Hash identifier:          fS1ORJyrCWqpjqKTqGpU1u815FIRaBm8TD7If34NgsA=
Subject key identifier:   65:71:EA:F0:BF:17:12:8D:26:43:7A:30:3F:8F:7D:5E:45:89:E6:4F
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       31
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/13AACCE2CFB711F09229CCAADAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:42:47 +0000
ROA not before:           Tue 02 Dec 2025 19:42:42 +0000
ROA not after:            Mon 31 Dec 2035 19:42:42 +0000
asID:                     24835
IP address blocks:        105.196.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:42:42 2025 GMT
            Not After : Dec 31 19:42:42 2035 GMT
        Subject: CN=692f4137-dff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:72:d2:a9:c8:b6:8d:fb:76:52:f0:20:3a:
                    5a:06:0e:43:bd:b8:35:9b:44:47:0b:95:ef:97:e3:
                    8a:4a:20:90:09:f7:5b:b0:0a:b6:2c:2e:a4:34:26:
                    ea:4b:08:9f:aa:46:23:4f:c8:ce:0f:1c:27:62:9c:
                    4e:a7:b7:8b:d6:d3:e0:19:d4:25:1e:b7:a5:77:bd:
                    d6:78:34:80:3b:8b:5c:4f:bd:1f:71:d2:92:83:2e:
                    ad:4c:05:73:90:9c:36:29:49:fa:04:2b:35:ed:59:
                    5d:d4:8e:88:ba:c6:d5:ae:c8:1d:59:9a:d2:2f:7b:
                    09:6a:95:74:ea:76:7c:7f:31:a0:b3:11:de:f0:84:
                    34:0d:ba:0d:33:3a:dc:6a:2e:33:98:c9:4b:97:93:
                    83:e2:03:99:e1:e3:79:e0:42:a5:93:01:96:45:54:
                    37:4d:de:dc:73:fd:f0:ac:99:b3:3b:9e:8b:1b:9f:
                    68:45:d1:ab:83:61:73:fd:a9:be:64:3f:96:7b:70:
                    f5:a2:04:5c:dd:b9:46:ae:7b:8d:f3:ad:43:52:10:
                    f0:b4:04:19:2d:8b:ec:a5:1b:bc:bc:3c:76:3b:93:
                    60:74:d2:57:17:f7:80:64:0f:84:6d:a6:7c:e4:1d:
                    f7:0a:4b:f2:dc:e3:e6:e8:b5:f5:ef:b7:97:0d:3b:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:EA:F0:BF:17:12:8D:26:43:7A:30:3F:8F:7D:5E:45:89:E6:4F
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/13AACCE2CFB711F09229CCAADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         25:98:d0:44:30:90:73:2f:bc:27:d9:85:90:9d:a7:d2:6d:e7:
         99:62:10:31:43:f1:eb:2d:06:a2:06:98:e5:24:44:e7:a7:41:
         17:57:f0:64:6d:e2:f3:31:11:af:91:31:87:93:b7:96:48:12:
         5a:b1:2a:20:6e:29:93:d6:b1:72:72:d1:c7:b1:a0:38:6a:30:
         0e:cd:68:ee:23:72:8c:91:fe:42:5e:f6:5a:33:54:2c:3d:5e:
         dc:23:35:96:59:c0:4f:5a:08:ca:9e:6c:10:a3:58:ad:ce:8c:
         f0:fe:82:51:f4:0f:16:67:ea:ca:2e:17:21:a4:d7:73:89:45:
         96:fb:92:c1:aa:c6:8a:bc:11:a7:ac:bb:6a:43:bc:e3:d5:96:
         6d:dc:fa:62:69:d5:7a:38:18:53:19:70:6a:9b:a4:8e:57:79:
         b2:ef:23:d2:5f:1d:5c:59:52:79:7f:9a:b3:07:53:00:08:72:
         01:be:4b:a1:1b:d8:a2:a7:91:12:15:6e:04:8c:83:31:20:c9:
         6d:6a:f5:61:a2:3f:58:7a:26:7a:d1:fa:0c:19:64:22:01:ef:
         8e:48:2f:df:70:38:87:9b:72:fe:fe:25:eb:fd:d3:61:cd:9b:
         9f:cb:8f:f2:25:23:6b:1b:e8:3e:57:5f:de:ad:9c:5e:c4:b1:
         dd:8b:f5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client