This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/23722C36E03511F0B6921B99DAE4EC9C.roa
File:                     23722C36E03511F0B6921B99DAE4EC9C.roa (raw, json)
Hash identifier:          WRAjjrpZYpNcF9po1aGn/Ii+2cKmFEDJ+A9Q0pdBqR0=
Subject key identifier:   F2:DD:5D:0C:A1:7E:EB:C5:D5:63:24:69:C8:DE:35:8E:52:D3:A6:06
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       75
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/23722C36E03511F0B6921B99DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:25:28 +0000
ROA not before:           Tue 23 Dec 2025 19:25:24 +0000
ROA not after:            Mon 31 Dec 2035 19:25:24 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:25:24 2025 GMT
            Not After : Dec 31 19:25:24 2035 GMT
        Subject: CN=694aeca8-b994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:d5:77:84:79:82:77:b0:bd:7e:08:5f:b5:
                    a7:4c:79:56:e6:62:a5:6b:83:da:e8:17:b5:e0:c1:
                    bc:a1:26:08:a2:7b:d5:ec:de:81:8d:f2:a2:4e:60:
                    98:49:b1:32:8a:9d:69:b9:e5:bd:cb:94:46:4a:96:
                    8c:97:88:3a:df:04:91:55:df:0e:ea:bb:f9:7a:3a:
                    4d:34:ff:f5:9b:21:b5:d6:aa:27:44:2c:78:ac:e6:
                    0b:af:3d:7a:7a:9e:1a:39:4c:cc:a8:7a:03:08:08:
                    1e:59:a0:f8:0c:86:89:58:7e:81:f2:39:d4:64:61:
                    3a:78:5b:e5:1c:ca:fe:7b:24:e2:75:ad:43:f9:b9:
                    9d:2d:67:ba:77:d4:b4:f7:0e:98:46:f8:7e:ed:23:
                    b7:11:88:21:14:e7:07:33:8d:6d:d1:39:56:1b:08:
                    2e:0b:61:5b:8f:c6:3d:77:9d:17:32:b7:7c:25:c4:
                    6e:07:ed:8f:cb:59:75:ad:4c:fc:21:68:18:9e:c7:
                    64:d2:49:d8:0a:fb:f0:2b:9a:a0:3a:ef:44:57:b9:
                    3c:94:8a:b8:b0:fa:3d:cc:99:b0:35:4f:b0:5c:18:
                    bf:7d:0a:36:e0:64:3f:a8:a0:08:e4:dc:df:f3:42:
                    f5:5d:0a:f8:11:c2:bd:ee:47:4d:ec:46:75:7d:23:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:5D:0C:A1:7E:EB:C5:D5:63:24:69:C8:DE:35:8E:52:D3:A6:06
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/23722C36E03511F0B6921B99DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a4:16:cc:38:a4:61:02:65:7e:b7:b0:68:71:0f:8b:80:e1:ec:
         c6:f5:15:2d:7d:e4:35:4b:ef:90:ba:cc:52:be:d3:de:65:c6:
         1c:0e:e0:6b:c7:83:3a:aa:01:29:82:95:3b:1e:21:02:4e:ca:
         97:46:ec:a0:02:fc:f3:69:d9:4c:37:de:d7:6e:12:6a:3a:19:
         15:e7:03:1f:fc:da:cb:09:6f:e4:4c:98:b9:bc:e7:c9:4e:6a:
         e2:c9:73:6d:68:b4:64:1f:2f:06:a3:61:a0:bb:a9:83:86:73:
         5c:48:cd:ad:91:3f:a5:f3:d1:ff:1a:82:61:58:0e:3d:8b:94:
         84:5e:6c:76:ce:2e:41:48:31:dd:af:9e:ae:ff:04:e8:44:3d:
         05:f4:87:95:b6:1e:4d:17:b1:cb:0d:46:bd:00:c6:9a:4e:fc:
         54:f4:c7:ce:e2:4c:9f:9e:76:5f:61:5b:90:d6:62:f2:73:5f:
         3d:f7:e6:b5:c3:2d:a9:71:e6:2a:8e:37:18:59:86:23:07:f8:
         5d:d7:c6:37:c8:4b:f7:86:5d:9f:e5:9e:52:e7:70:1d:03:b4:
         49:91:07:4d:1f:33:58:8d:35:24:85:c7:94:16:c3:2c:5e:c7:
         85:ce:e6:56:6a:00:68:a2:7c:4e:e0:ab:66:0a:b5:19:1d:42:
         72:79:39:55
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBdTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QkFGMTEwLwYDVQQFEyhFMkZFNTZBRkU2NkFCMERGM0UzOTVFRERCNDE4OTNF
MDBERjZBRUY3MB4XDTI1MTIyMzE5MjUyNFoXDTM1MTIzMTE5MjUyNFowGDEWMBQG
A1UEAxMNNjk0YWVjYTgtYjk5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANUp1XeEeYJ3sL1+CF+1p0x5VuZipWuD2ugXteDBvKEmCKJ71ezegY3yok5g
mEmxMoqdabnlvcuURkqWjJeIOt8EkVXfDuq7+Xo6TTT/9ZshtdaqJ0QseKzmC689
enqeGjlMzKh6AwgIHlmg+AyGiVh+gfI51GRhOnhb5RzK/nsk4nWtQ/m5nS1nunfU
tPcOmEb4fu0jtxGIIRTnBzONbdE5VhsILgthW4/GPXedFzK3fCXEbgftj8tZda1M
/CFoGJ7HZNJJ2Ar78CuaoDrvRFe5PJSKuLD6PcyZsDVPsFwYv30KNuBkP6igCOTc
3/NC9V0K+BHCve5HTexGdX0jCd0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBTy3V0M
oX7rxdVjJGnI3jWOUtOmBjAfBgNVHSMEGDAWgBTi/lav5mqw3z45Xt20GJPgDfau
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It
WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFF
NEVDOUMvMjM3MjJDMzZFMDM1MTFGMEI2OTIxQjk5REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAWnGMA0GCSqGSIb3DQEBCwUA
A4IBAQCkFsw4pGECZX63sGhxD4uA4ezG9RUtfeQ1S++QusxSvtPeZcYcDuBrx4M6
qgEpgpU7HiECTsqXRuygAvzzadlMN97XbhJqOhkV5wMf/NrLCW/kTJi5vOfJTmri
yXNtaLRkHy8Go2Ggu6mDhnNcSM2tkT+l89H/GoJhWA49i5SEXmx2zi5BSDHdr56u
/wToRD0F9IeVth5NF7HLDUa9AMaaTvxU9MfO4kyfnnZfYVuQ1mLyc1899+a1wy2p
ceYqjjcYWYYjB/hd18Y3yEv3hl2f5Z5S53AdA7RJkQdNHzNYjTUkhceUFsMsXseF
zuZWagBoonxO4KtmCrUZHUJyeTlV
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:23 2026 by rpki-client