This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
File:                     1FB32634CFB611F0A31DAAA4DAE4EC9C.roa (raw, json)
Hash identifier:          DZhYeLrVZ0weMplnQYlSAPus+IEMEVNVzO++jLpv0YY=
Subject key identifier:   A4:EC:14:6A:B1:65:12:87:2A:82:F7:1D:76:E8:C1:5F:7D:B8:AE:74
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       2F
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:35:58 +0000
ROA not before:           Tue 02 Dec 2025 19:35:53 +0000
ROA not after:            Mon 31 Dec 2035 19:35:53 +0000
asID:                     24835
IP address blocks:        197.132.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:35:53 2025 GMT
            Not After : Dec 31 19:35:53 2035 GMT
        Subject: CN=692f3f9e-6ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:31:eb:2f:7d:20:41:5f:86:d7:5c:a6:e0:
                    aa:0f:9c:fe:17:d8:90:e5:c1:98:d4:9c:da:8b:c5:
                    aa:12:9d:39:ca:d0:8f:c6:61:4c:f6:20:ad:c0:23:
                    9b:6d:6b:9f:a7:3d:6f:4d:8f:83:3c:72:24:7a:33:
                    82:51:3b:f3:48:a1:30:cf:4c:e4:f6:76:c3:d9:75:
                    a0:2c:35:ff:f8:ad:2f:09:21:ac:ba:b6:22:a6:9c:
                    f6:48:db:77:54:b7:e5:94:a8:c7:e6:a6:6d:42:08:
                    a4:78:c4:55:a5:d6:df:84:2c:1d:2b:5a:53:29:7a:
                    c2:75:a9:76:68:e6:b3:40:d0:eb:98:ec:93:d1:29:
                    f7:09:fa:67:31:0c:f2:42:89:9f:00:f9:f1:2f:f0:
                    88:c7:26:60:16:e7:55:f7:29:d3:2b:56:46:d2:d3:
                    aa:a0:d5:a2:a5:5a:21:fb:13:fc:9e:82:63:7c:fe:
                    fe:f7:70:d6:1d:7d:36:db:6a:9a:64:c4:56:50:6f:
                    9b:60:2c:41:5c:b1:dc:04:9f:61:5f:8a:b0:63:c3:
                    db:e4:07:5b:53:d1:19:59:f7:6b:e7:9b:0a:d3:05:
                    95:94:65:6a:4d:05:50:7e:8d:27:da:ce:85:b4:da:
                    bf:f5:7a:35:9a:08:d4:a5:92:84:2b:71:25:87:29:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:14:6A:B1:65:12:87:2A:82:F7:1D:76:E8:C1:5F:7D:B8:AE:74
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:23:cd:1b:28:d2:ad:b2:33:e5:4d:a1:23:44:1b:31:5a:
         8e:1b:f1:4a:8f:aa:32:74:0e:6b:24:95:0e:22:8a:d3:f5:f2:
         70:4c:f9:b3:51:37:85:67:66:18:c2:67:a1:91:96:ae:9e:60:
         62:75:82:d1:b2:a4:db:74:26:ab:5d:d1:11:d1:a1:b4:5c:23:
         6b:9e:19:87:dd:a4:e4:d4:f4:4e:32:3e:d8:42:bc:17:b2:6f:
         99:45:3b:14:fd:1c:d3:d4:f9:09:da:1f:27:31:db:8e:0a:54:
         e0:f2:82:fb:88:38:be:f8:f6:55:29:28:aa:db:6c:c6:dd:fa:
         71:77:6f:d5:26:b9:e3:11:e3:c7:66:75:76:6b:89:67:2a:85:
         f5:3d:2f:27:19:3b:0f:32:ef:5f:05:f0:4e:dc:54:ae:2e:ae:
         5e:cb:51:31:e6:06:d7:60:3c:fb:71:d9:89:15:a5:d3:05:1a:
         6f:f1:0e:53:ce:50:5b:db:39:31:5a:8f:40:b4:8d:1b:b1:48:
         98:57:3e:80:43:f3:44:ff:c1:db:35:cf:b8:99:d2:86:82:7c:
         dd:e4:3a:12:1b:a6:c9:0a:df:f1:ee:fe:19:0a:bb:ed:5c:bb:
         23:65:87:10:3e:20:88:57:3e:0c:0c:98:65:78:f2:95:f2:be:
         44:1a:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client