This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/27D2C2D4E03211F08A7EC587DAE4EC9C.roa
File:                     27D2C2D4E03211F08A7EC587DAE4EC9C.roa (raw, json)
Hash identifier:          Y+oQ/SVDi7ToYkC/R8JaxmCr/Q9OiGSwt61GPykd+rg=
Subject key identifier:   1C:E8:E0:BA:CA:13:EF:43:52:13:07:25:0A:35:6D:EF:08:C1:36:8B
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       66
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/27D2C2D4E03211F08A7EC587DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:04:07 +0000
ROA not before:           Tue 23 Dec 2025 19:04:02 +0000
ROA not after:            Mon 31 Dec 2035 19:04:02 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:04:02 2025 GMT
            Not After : Dec 31 19:04:02 2035 GMT
        Subject: CN=694ae7a7-cb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:8e:0e:3a:45:35:57:5a:5d:f0:4e:fc:f9:
                    63:70:cf:2f:2c:23:24:e2:f5:91:e9:05:74:b1:3f:
                    8b:29:05:b9:f2:cf:f0:42:11:20:e6:42:e8:48:31:
                    8a:97:7f:b5:0a:52:f2:44:6a:74:06:2e:cb:74:b5:
                    c8:f9:12:8f:c4:06:80:34:84:c8:2d:aa:97:41:40:
                    7c:30:d1:9f:39:dd:c2:98:63:7b:72:7c:f5:f9:f1:
                    61:13:a8:ed:c9:9d:99:be:ce:ca:b8:a0:10:1a:e3:
                    e8:8d:20:4a:2c:77:50:05:3a:41:02:77:e8:82:7e:
                    95:9f:f1:a4:1f:f5:a2:b9:5a:b2:19:20:57:ec:ea:
                    6d:1c:18:04:ed:7e:98:cc:36:df:c0:0d:31:d5:2a:
                    de:a1:72:88:f6:48:cd:30:b2:7e:94:3d:a3:86:2c:
                    45:33:1c:ce:cc:89:44:b9:b9:78:94:a2:8a:cb:c5:
                    c6:b2:43:65:57:3f:44:30:a5:74:cc:d2:14:09:e0:
                    be:5f:c3:9a:b1:3a:36:a2:ea:0e:09:6f:c0:85:be:
                    97:ec:b6:56:b8:84:22:01:b7:c8:85:b4:0e:6b:5a:
                    4d:1d:ab:e3:7c:8f:f2:fe:25:c2:0d:d8:69:4f:34:
                    a1:4c:67:98:55:6b:12:89:e5:95:88:db:b9:7b:06:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E8:E0:BA:CA:13:EF:43:52:13:07:25:0A:35:6D:EF:08:C1:36:8B
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/27D2C2D4E03211F08A7EC587DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a5:ca:f2:55:bf:02:6d:91:0d:0c:9c:80:a6:dc:01:22:b3:aa:
         eb:58:12:1c:ec:3f:64:93:ef:0e:33:6b:1e:fb:d8:3f:82:a1:
         33:fd:30:0f:e6:9e:4b:69:1a:eb:03:a2:ef:cb:38:45:ca:c0:
         56:d2:27:b2:45:67:b2:a5:c6:98:55:47:4f:9b:63:53:28:de:
         8d:1b:04:11:81:58:15:c8:3a:4f:0b:22:fb:e9:b9:74:5f:e2:
         b7:b2:78:91:0b:02:bd:27:5e:74:7b:23:97:62:36:c6:67:3f:
         56:c1:ee:08:b4:75:11:67:95:02:aa:ea:16:94:cd:d9:f4:ce:
         ef:90:87:d7:a8:97:ba:ab:85:8f:b6:28:f9:dc:3b:52:49:b9:
         cc:bc:1b:ff:21:f9:41:69:5b:b2:21:93:77:be:5a:36:5f:a8:
         7a:8b:44:d2:5c:dc:0b:f6:44:2d:37:fd:be:1d:cc:ef:03:60:
         11:4e:ed:e1:aa:51:ae:b0:d5:49:55:14:fb:0b:f5:77:13:69:
         ef:82:25:7b:a9:d9:3a:8c:4c:f4:61:dc:ff:f5:f5:d2:62:07:
         79:e0:83:a3:eb:8a:86:1f:83:2c:e5:b6:95:d7:2a:23:c4:8d:
         9d:54:44:15:97:c5:8c:06:85:13:e3:0a:8e:6e:a3:00:cb:99:
         fb:c6:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:31:24 2026 by rpki-client