This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/58302BAACFB711F0A097A8ACDAE4EC9C.roa
File:                     58302BAACFB711F0A097A8ACDAE4EC9C.roa (raw, json)
Hash identifier:          CkHt7rAtBCp/QPk/zm1djDgp2QmYdp2PKLNfVgYviqY=
Subject key identifier:   0C:BF:DD:26:25:BE:F8:F0:BB:26:2E:B1:29:F2:FB:78:88:26:7D:45
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       33
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/58302BAACFB711F0A097A8ACDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:44:42 +0000
ROA not before:           Tue 02 Dec 2025 19:44:37 +0000
ROA not after:            Mon 31 Dec 2035 19:44:37 +0000
asID:                     24835
IP address blocks:        196.130.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:44:37 2025 GMT
            Not After : Dec 31 19:44:37 2035 GMT
        Subject: CN=692f41aa-119f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:92:a3:a8:c8:05:93:81:80:d8:3d:43:ff:
                    0b:08:dd:a8:8b:8e:15:a3:d9:2a:e3:7c:95:05:1e:
                    b2:2e:42:68:70:08:8c:1d:c3:8d:38:5b:1b:35:b7:
                    48:3d:18:d2:7a:9e:09:ac:bd:fa:32:1a:bb:dc:76:
                    c2:79:c9:f8:13:29:dd:ff:42:f1:88:61:74:f7:9c:
                    45:31:30:31:58:e5:4f:ec:1f:21:c3:c4:fd:26:02:
                    fc:bf:3c:01:94:d5:26:a3:da:09:4e:5c:0d:23:2f:
                    39:72:69:01:79:a4:11:0f:e2:12:94:ab:4c:d5:99:
                    17:db:f6:89:4e:bf:3b:68:b0:a9:3c:69:41:9c:77:
                    83:e5:1e:ce:4e:42:6f:e8:e1:8a:2a:1a:d9:80:56:
                    bf:4c:e1:b9:07:7d:81:fa:a1:38:4d:ac:5f:77:34:
                    9a:48:fa:fc:59:11:78:fe:41:a0:a6:c5:60:20:dd:
                    00:a5:df:50:8b:91:13:c8:c7:a5:cd:2c:4a:ef:75:
                    10:39:cb:8c:97:da:c8:89:f1:5a:09:fe:be:43:bd:
                    98:dd:26:f2:b2:8c:8c:67:3a:5c:42:ed:9f:ae:1d:
                    87:1c:c0:e1:0f:44:67:cd:a9:41:31:38:56:6a:5a:
                    0b:b4:85:2f:11:c0:18:4b:d1:fb:13:63:e8:95:a5:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:DD:26:25:BE:F8:F0:BB:26:2E:B1:29:F2:FB:78:88:26:7D:45
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/58302BAACFB711F0A097A8ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.130.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:3c:9a:1b:ad:27:9d:ca:b3:17:f8:8a:49:94:70:e4:8c:
         2f:9e:a0:3b:d0:e7:af:b5:6d:ce:d1:11:8b:a5:72:98:00:f2:
         a4:64:2b:76:a5:f7:e0:d1:91:7b:a3:3b:34:32:6e:1c:16:d6:
         20:b8:3f:80:29:da:6a:61:80:7a:8a:5d:1c:73:ed:b9:4d:fc:
         64:00:8d:04:cb:22:60:c3:40:8e:56:11:d6:9d:96:e4:92:24:
         bd:37:13:c9:34:d9:57:83:0c:58:ce:4f:5b:ed:f1:18:40:d7:
         52:14:7c:13:78:ee:39:48:53:c3:4d:6d:9c:5a:1f:f1:3b:6f:
         40:77:89:a1:92:cd:78:ec:12:33:13:d5:d3:16:b7:18:2e:1a:
         28:f2:51:d8:44:d8:24:a3:8a:61:6d:46:87:9f:97:48:89:55:
         09:3f:ab:ad:27:ab:71:1d:a1:9b:f1:3e:f5:da:19:af:02:87:
         64:00:f8:0c:d3:d6:45:ff:4e:6a:15:83:91:ae:54:0b:8d:8c:
         e8:55:a5:e8:2c:ac:85:9a:3d:ba:a6:de:39:9e:4b:ef:06:bb:
         33:b5:ce:6a:69:9c:a2:7e:03:5d:62:64:fe:b0:47:74:f0:6a:
         71:a2:6b:a6:81:46:7e:da:74:9a:be:27:e9:1c:a2:f0:d5:c8:
         08:17:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:47 2025 by rpki-client