This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
File:                     18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (raw, json)
Hash identifier:          HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=
Subject key identifier:   BF:2F:6B:83:3E:A3:96:11:5E:87:EC:0C:54:4A:57:7C:36:0A:20:EF
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       99
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:34:49 +0000
ROA not before:           Wed 31 Dec 2025 12:34:45 +0000
ROA not after:            Mon 31 Dec 2035 12:34:45 +0000
asID:                     36935
IP address blocks:        41.206.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:34:45 2025 GMT
            Not After : Dec 31 12:34:45 2035 GMT
        Subject: CN=69551869-b4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:1c:20:12:f8:da:34:93:46:ef:dd:b6:4d:
                    95:67:ca:90:c7:36:36:ec:e4:09:d1:75:0d:02:63:
                    ee:ee:0e:04:d6:79:37:c3:3e:e5:25:a9:d6:87:e2:
                    80:e7:cb:00:3a:5c:58:0c:7d:d2:65:65:b3:1b:3d:
                    c9:b5:9b:95:f9:e1:7a:86:22:f3:43:df:eb:9b:bc:
                    2a:fb:88:fc:72:c2:bf:4d:31:f8:ff:11:ef:05:97:
                    b0:70:b4:c0:88:e9:28:68:e4:92:15:e4:88:ea:ef:
                    9d:1d:9d:2a:f2:80:21:2b:90:68:e9:0c:34:ca:07:
                    49:d9:d6:f0:03:cb:5b:97:44:44:ff:4e:7b:51:a0:
                    49:5f:b4:c5:51:e8:83:d9:e2:9e:8c:0e:2d:67:7b:
                    42:77:ef:f0:83:8c:49:bb:8f:1b:2a:7a:47:03:c6:
                    4f:dc:45:22:74:7f:0a:4c:dc:6d:9c:17:f9:02:4f:
                    98:e7:ad:91:2f:ff:03:cb:bc:cf:1e:3c:fa:ef:1e:
                    8f:db:8f:0c:41:5a:a5:c5:af:93:2c:71:11:43:57:
                    90:ca:cf:48:02:73:d8:27:9c:e8:54:9e:38:d2:cb:
                    f0:13:9c:b1:7d:11:07:78:db:07:75:37:14:5d:a5:
                    db:b6:8d:6f:38:b3:7d:c7:e1:0d:66:66:37:a5:9d:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2F:6B:83:3E:A3:96:11:5E:87:EC:0C:54:4A:57:7C:36:0A:20:EF
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.206.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:ba:c5:5a:d6:d9:93:b7:19:f7:b0:c9:fb:3d:f5:2c:9c:
         c4:3d:31:ca:e4:1d:8a:43:bf:8c:5b:45:de:0e:5f:b4:2c:c3:
         ca:82:04:50:7b:95:4c:d1:6d:f7:92:3d:6c:be:6a:2d:fc:d8:
         df:65:8e:9c:f4:2e:f6:12:48:91:98:b7:9a:20:8c:42:b3:48:
         bb:6e:5e:6c:e0:8f:f2:c4:20:0c:19:02:7b:ec:5a:8e:ae:fa:
         eb:40:f9:f9:e1:e4:65:c8:06:ec:d5:79:9b:14:44:10:f5:c9:
         cc:09:30:37:a1:77:5b:85:42:3b:f6:4d:a8:2e:ee:d2:49:a4:
         5e:03:44:41:2f:24:8d:b1:1a:c8:75:d6:ff:71:d3:b5:58:44:
         6d:27:dc:28:53:2f:aa:31:38:a8:55:bc:bc:88:6c:f8:9c:ff:
         9c:b1:29:69:9a:1c:a4:f5:32:ea:b1:19:d0:4a:1a:c4:2c:05:
         76:8a:62:21:97:9d:d8:fd:05:ee:f1:fa:db:6e:5f:63:2c:4e:
         4b:93:5d:67:83:dd:9d:8c:e7:ea:56:a7:2f:0a:1a:a5:9f:9d:
         54:82:b0:af:41:59:11:4a:7d:45:a1:c2:f8:3b:27:46:d6:d2:
         b0:fc:a6:39:4b:3c:94:63:31:75:65:30:d3:00:fb:af:6f:a2:
         4d:74:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:54 2026 by rpki-client