This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
File:                     2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (raw, json)
Hash identifier:          czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=
Subject key identifier:   F8:15:C2:37:03:12:5D:96:E4:82:9E:63:C1:47:4A:AB:B0:E1:43:A4
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       5C
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 18:35:38 +0000
ROA not before:           Tue 23 Dec 2025 18:35:33 +0000
ROA not after:            Mon 31 Dec 2035 18:35:33 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 18:35:33 2025 GMT
            Not After : Dec 31 18:35:33 2035 GMT
        Subject: CN=694ae0fa-4e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:a6:96:5e:ac:ba:f3:98:f4:e3:79:d3:99:
                    1c:01:6d:94:53:6b:be:1d:76:55:94:47:a0:4d:a2:
                    af:13:b7:e4:f0:90:f8:08:b6:e4:fd:0d:95:ad:94:
                    ee:db:99:c7:22:4c:ed:3e:3f:44:9e:1e:57:46:29:
                    81:ab:3d:dd:8f:86:6e:bf:1c:51:43:2e:78:50:f9:
                    31:e7:4b:37:82:fb:e9:71:9a:0b:59:a3:b2:8b:ee:
                    27:ac:93:57:64:cc:c7:17:7b:d9:41:df:7c:9f:8f:
                    1d:14:7a:2d:de:87:b6:8c:3a:1d:1c:69:f6:ed:20:
                    ce:4f:f3:02:de:53:ac:4d:c0:ef:2e:99:9f:9c:b7:
                    47:12:bc:95:86:1c:f3:09:76:50:60:c8:59:76:c5:
                    4b:88:73:14:cc:df:70:6a:b5:5f:7d:96:f6:7b:76:
                    5f:ca:74:f7:4a:25:63:a4:30:ca:69:f5:8f:40:52:
                    28:5c:d2:59:39:92:d4:13:c5:86:cd:3b:4b:37:09:
                    b9:6b:38:79:b4:1b:f2:7e:64:3b:39:c6:a4:8a:eb:
                    ab:84:e7:14:71:21:d8:1d:cb:94:45:50:91:87:b5:
                    b8:d3:62:fd:b6:e8:c1:14:1a:97:e1:c1:e5:cd:3c:
                    5e:b7:f6:aa:f6:99:6f:75:2b:36:9e:f6:7f:5b:43:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:C2:37:03:12:5D:96:E4:82:9E:63:C1:47:4A:AB:B0:E1:43:A4
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a8:16:57:df:71:8e:9a:9b:65:ae:2f:17:e8:7a:9b:24:d5:00:
         2a:f1:77:77:92:c3:3d:cc:b6:aa:b2:fc:d8:e4:32:ba:c6:5a:
         f3:e0:26:d3:09:4a:eb:30:55:7c:94:97:d3:32:1d:e6:46:ff:
         8a:a3:41:27:31:b4:da:4d:ea:98:cf:14:64:8c:d9:16:e1:53:
         13:a8:76:89:58:a7:84:96:23:bc:2f:9a:87:67:4a:e9:f7:c9:
         65:35:73:25:bb:76:50:58:cb:9a:68:2b:8b:48:ae:4f:ef:0f:
         b3:0e:e1:e4:b0:5d:c8:a8:b1:e5:5e:5e:d1:72:69:05:52:56:
         8f:c3:04:7f:f8:e1:61:16:b6:26:91:3a:fb:ee:18:d1:33:16:
         cc:84:f4:bb:88:cf:1d:58:9a:e7:e1:58:9b:25:e1:c0:f2:a9:
         4e:f1:45:be:5e:49:c6:ad:19:f8:52:40:fc:fd:c1:b3:d4:65:
         e8:15:9c:ce:22:bb:97:48:17:8b:6a:2d:47:dd:71:29:0f:ee:
         90:ae:64:d1:38:f0:8e:29:5f:dd:11:89:24:5d:95:c8:02:fe:
         ed:9b:18:8a:08:7d:45:69:61:df:93:58:26:61:25:04:7d:26:
         2e:60:fd:1c:cd:c5:22:a1:34:6d:c4:53:a2:64:eb:b0:f4:13:
         ad:10:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:18 2026 by rpki-client