This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
File:                     21633E18E64711F09267137EDAE4EC9C.roa (raw, json)
Hash identifier:          eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=
Subject key identifier:   ED:0F:16:C8:CC:CC:05:B9:36:74:07:7C:DA:E1:EF:0F:7E:6C:6B:1A
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       A9
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:49:23 +0000
ROA not before:           Wed 31 Dec 2025 12:49:18 +0000
ROA not after:            Mon 31 Dec 2035 12:49:18 +0000
asID:                     36935
IP address blocks:        196.204.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:49:18 2025 GMT
            Not After : Dec 31 12:49:18 2035 GMT
        Subject: CN=69551bd3-9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b9:ed:8f:e6:ea:d8:f9:72:06:ad:31:7c:42:
                    73:2e:60:ec:3e:fa:02:5c:7d:df:09:7a:d2:68:03:
                    f6:eb:4d:bb:dc:84:71:24:13:5c:df:e1:74:85:f5:
                    f9:64:4a:5c:42:c2:e5:5d:9c:2c:aa:14:7a:61:79:
                    29:f5:52:d3:f9:6e:27:90:09:f6:85:30:60:ab:6b:
                    ce:33:1e:e4:93:50:9b:99:f5:76:d3:69:60:e4:db:
                    b4:fd:a1:b8:2b:59:c1:7d:0b:cf:b7:18:27:9a:1a:
                    cd:28:4b:dc:26:52:0f:bf:d3:0d:0d:8a:75:69:e5:
                    03:32:1b:82:e2:79:59:23:71:30:32:0a:99:05:87:
                    a8:55:a7:b1:59:c1:06:2c:45:aa:97:98:45:2d:9c:
                    29:00:f6:c4:09:21:28:34:1a:d2:99:d6:03:bd:e1:
                    52:28:2f:c7:97:66:39:1c:0e:c8:94:98:df:c7:34:
                    87:41:e7:cb:df:fa:2b:64:69:33:41:76:95:58:77:
                    cf:2c:13:f3:a9:cf:87:e1:10:19:72:fb:5f:46:27:
                    cf:a7:12:e9:0a:17:89:92:b7:38:49:6d:81:d0:1a:
                    d0:ed:3e:65:e1:53:57:84:70:fc:54:27:36:c3:b9:
                    42:91:d1:fe:0b:77:66:33:d1:ee:c2:59:66:19:d0:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:16:C8:CC:CC:05:B9:36:74:07:7C:DA:E1:EF:0F:7E:6C:6B:1A
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:93:2a:05:ae:cd:98:d0:61:74:a7:98:0e:4f:a6:b4:1c:
         8f:8d:83:68:a2:71:f1:f2:a9:e9:ce:aa:0c:d1:15:c5:fb:06:
         b0:8a:ee:1a:d2:37:28:47:94:48:b8:7a:60:cd:e2:4a:eb:14:
         51:65:8a:5e:49:3a:43:34:d0:1f:24:61:99:4f:67:47:54:3d:
         2c:48:f1:44:0a:9a:b6:87:7e:b2:53:1f:a4:bc:46:8a:92:8d:
         b8:1a:d8:93:2b:f2:2c:d2:3a:e0:27:39:b0:f6:d0:6c:d9:ab:
         96:e8:2c:46:9d:9a:68:73:01:ea:e2:3c:a8:1e:c4:14:67:a0:
         1d:e6:47:3c:63:9d:1c:33:74:c7:12:cd:a9:87:92:76:b9:e3:
         aa:44:88:f2:3a:2d:ec:8a:19:95:ca:ec:7f:0f:18:c3:61:c7:
         ef:13:1c:26:ea:f9:db:cc:2d:55:71:c0:e9:0f:9b:d7:6a:ca:
         9e:ab:ec:67:56:e9:f0:54:28:a1:15:20:77:20:d5:62:55:72:
         0f:d7:04:09:f5:b7:fc:aa:c7:b4:96:ac:dd:6e:12:48:c4:dc:
         be:6b:88:4f:62:57:7e:23:46:c7:7c:31:dd:d7:c4:6c:98:17:
         6b:f4:81:9f:ce:5b:ee:3c:1e:40:44:ee:c6:1c:21:fe:ae:4e:
         05:6d:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:59 2026 by rpki-client