This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4AB7FB10E03311F09521888EDAE4EC9C.roa
File:                     4AB7FB10E03311F09521888EDAE4EC9C.roa (raw, json)
Hash identifier:          irh6AQCCs0+wQOoQ6OfFdE3/Slfmb4g/hhWQX1yIJJo=
Subject key identifier:   0A:48:A8:5F:ED:11:1E:2C:54:99:22:B6:A9:2B:D5:CF:E8:3C:7E:75
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       6C
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4AB7FB10E03311F09521888EDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:12:15 +0000
ROA not before:           Tue 23 Dec 2025 19:12:10 +0000
ROA not after:            Mon 31 Dec 2035 19:12:10 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:12:10 2025 GMT
            Not After : Dec 31 19:12:10 2035 GMT
        Subject: CN=694ae98f-c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:fc:a7:f4:0f:67:e6:0a:b7:82:66:06:c0:
                    84:4e:c0:d7:41:7c:e0:80:87:62:0a:53:2c:b0:82:
                    61:24:b8:dc:d6:b3:2a:28:c1:ae:05:09:67:1b:d1:
                    f7:05:a8:99:ca:fa:01:be:15:0b:77:89:d7:35:2f:
                    25:77:61:5c:27:5b:7e:59:3b:16:a6:a4:e0:8f:3c:
                    80:82:ad:1a:4a:0c:f9:94:08:70:ec:58:83:e0:17:
                    5b:43:30:71:0e:b9:34:fd:db:cf:c0:58:8b:96:12:
                    ed:78:af:40:01:68:62:c8:3a:42:64:9b:b5:b8:19:
                    2d:40:34:6d:45:61:09:d2:b5:d1:40:86:95:03:0d:
                    3f:73:bb:43:82:92:ca:33:38:41:66:3b:8c:6c:3f:
                    8a:b5:ba:6e:f7:f2:35:20:d4:dc:3a:ab:5a:67:cd:
                    5d:15:27:81:ae:d0:6b:c1:ea:af:81:e6:89:cd:e7:
                    08:5a:bf:bd:e9:9e:24:09:fa:ba:b7:e9:c4:83:74:
                    61:23:c9:10:97:27:bd:20:b6:e3:ea:9d:4a:80:b4:
                    1a:93:cc:7a:8a:0b:13:87:cb:ff:9c:1c:35:7c:e6:
                    f3:25:3c:f7:e1:9b:e6:92:0e:5e:81:df:e7:da:af:
                    8c:e3:70:e5:94:5e:f2:80:7b:78:51:46:ae:3d:90:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:A8:5F:ED:11:1E:2C:54:99:22:B6:A9:2B:D5:CF:E8:3C:7E:75
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4AB7FB10E03311F09521888EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:7b:4c:ea:56:2c:59:f8:d9:42:27:ed:6b:b8:ad:da:0b:
         70:05:ee:33:78:1c:01:83:ff:a9:79:d1:32:6c:51:87:ca:8b:
         5c:45:c4:84:ac:93:0f:79:7e:45:31:5c:3b:0d:44:93:40:6d:
         72:a7:87:73:f0:ba:99:95:61:bd:9b:c1:49:28:04:2b:7d:13:
         87:a6:c5:9f:22:b4:cf:a4:83:cf:38:a1:b0:54:b8:11:2a:e7:
         d5:1d:d5:99:7d:5b:b8:c0:cb:ca:cd:ea:62:55:1a:2e:04:4e:
         de:20:63:87:61:60:bf:9e:21:6f:17:da:6b:5f:aa:9e:89:ed:
         74:74:ed:47:22:52:ec:ee:e4:a2:c2:76:27:bb:f6:ac:58:21:
         fb:77:cf:76:c1:b6:87:95:ab:ba:57:87:cb:9e:6c:56:69:16:
         36:79:12:48:86:a3:35:36:a5:85:c9:51:37:f8:e7:57:30:85:
         5d:fc:26:53:69:7a:98:86:19:fb:20:b9:7d:1b:77:67:49:ad:
         b4:0e:cb:d9:79:1c:60:ff:3e:6f:46:ec:99:5e:8b:93:59:cb:
         e6:95:f7:a9:e5:d8:42:b3:f9:38:9e:2d:39:4f:3d:84:4a:4c:
         1f:47:53:6d:87:a5:55:f5:56:d2:db:7e:8b:00:f2:4a:91:26:
         c4:25:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:02:08 2026 by rpki-client