This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
File:                     678DD4CECFE111F0BD278CAEDAE4EC9C.roa (raw, json)
Hash identifier:          +RuqPven+NHEM2Si5h21IV25PaXZhNuO+WJIWyUztcI=
Subject key identifier:   CE:4C:F7:95:06:29:FC:BB:FD:8F:D3:E7:34:6E:15:49:DA:EF:CF:37
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       39
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 00:45:46 +0000
ROA not before:           Wed 03 Dec 2025 00:00:41 +0000
ROA not after:            Mon 31 Dec 2035 00:00:41 +0000
asID:                     24835
IP address blocks:        105.199.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  3 00:00:41 2025 GMT
            Not After : Dec 31 00:00:41 2035 GMT
        Subject: CN=692f883a-8eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:95:57:af:6f:04:63:0d:5a:ef:55:a3:c1:
                    ba:c7:af:22:c5:b9:e2:b0:a0:9f:4d:4f:ef:b8:9f:
                    05:16:5a:4d:23:24:93:2c:34:a9:66:32:c0:9d:42:
                    66:ab:9f:73:79:6b:d1:9d:f8:20:9e:a6:6c:7b:d9:
                    de:01:0c:b2:87:4c:5c:86:c8:17:5c:55:a9:27:04:
                    97:75:07:e4:45:25:c3:e0:cf:26:3e:c0:3a:d1:82:
                    11:01:95:d4:7b:e7:11:8e:d5:50:e0:19:32:99:a6:
                    f7:75:d8:32:0b:17:d7:76:96:1b:af:94:5d:e7:35:
                    fd:0f:ac:ed:a7:56:a3:9f:b9:38:61:be:c1:21:86:
                    46:84:9d:14:c7:94:50:cb:bf:ac:8f:c6:9b:34:83:
                    57:15:f3:78:28:03:1b:42:fb:7f:aa:4f:cf:2c:43:
                    58:40:d6:ab:bf:3d:86:eb:10:15:ca:ba:02:5e:aa:
                    07:0e:0f:3e:97:cc:87:e2:cc:54:82:98:cd:b0:ed:
                    b7:93:cf:bd:6a:16:c9:6d:f7:7f:69:18:87:08:cd:
                    78:ac:7e:a8:82:ba:5d:95:71:79:0e:41:fe:bf:7a:
                    72:fc:af:f4:b6:d7:6d:54:14:b3:07:b0:72:5b:30:
                    9d:99:21:7d:6f:cd:dd:25:7b:74:ab:3b:36:46:fd:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:F7:95:06:29:FC:BB:FD:8F:D3:E7:34:6E:15:49:DA:EF:CF:37
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.199.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c7:68:4e:50:85:ae:c4:11:37:95:28:3c:a6:58:7e:c1:bb:
         fb:4b:a0:74:9d:80:5a:17:d9:77:2d:d9:1a:14:08:db:4b:e2:
         e5:2e:d8:9f:6e:5f:2a:1a:98:09:71:a5:bb:91:86:eb:82:01:
         80:e1:14:fa:d8:ff:56:e2:52:a3:c8:fd:1c:99:0a:32:61:80:
         3a:8b:8a:19:b6:16:36:53:fd:f0:2e:55:4d:05:88:86:12:ba:
         bd:bc:0c:a6:4d:d1:13:02:da:71:77:0a:24:64:ec:50:0c:cf:
         0c:b5:bb:b2:41:4b:2c:66:68:f3:2a:c3:0e:8b:2d:d8:c2:98:
         f1:0c:fe:da:d9:90:85:3f:7f:19:09:03:93:95:f9:e2:64:5b:
         b2:36:0f:cc:47:eb:6d:0f:69:91:81:78:a7:e8:dd:46:b8:32:
         6b:1c:0f:9e:79:1a:87:49:1e:0e:14:e1:c0:0b:75:03:9d:8c:
         e1:2e:67:25:08:55:21:fe:a0:23:0a:7a:8b:6c:53:e1:c2:02:
         cc:1c:4e:68:fb:25:e5:a0:7d:a5:9e:a3:fb:47:99:93:b1:d2:
         7b:86:74:de:94:40:85:b1:e2:c4:14:d3:9b:3c:92:15:83:a7:
         ef:d1:35:3f:96:a8:a0:22:ff:e8:39:b1:a0:ee:76:e9:32:1d:
         63:42:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:47 2025 by rpki-client