This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6A5EB832E64611F0BA498779DAE4EC9C.roa
File:                     6A5EB832E64611F0BA498779DAE4EC9C.roa (raw, json)
Hash identifier:          /Ja9NZA3PT3nMROcxNf0Cf+BLQcwrkhjsgvSsjw/GNo=
Subject key identifier:   7A:76:8C:8F:82:C9:9C:8A:6C:ED:C4:E9:F7:21:54:DA:17:EB:99:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       A5
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6A5EB832E64611F0BA498779DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:44:16 +0000
ROA not before:           Wed 31 Dec 2025 12:44:11 +0000
ROA not after:            Mon 31 Dec 2035 12:44:11 +0000
asID:                     36935
IP address blocks:        102.219.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:44:11 2025 GMT
            Not After : Dec 31 12:44:11 2035 GMT
        Subject: CN=69551aa0-a615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:e6:ac:66:93:c6:56:55:d9:13:6c:2c:cd:
                    97:88:8b:e1:22:62:3e:a3:e9:b0:3c:63:2b:10:16:
                    81:8f:1c:1a:f5:eb:16:6e:be:5f:45:98:ce:ce:4c:
                    ab:d5:55:20:ff:8a:bf:fc:02:4b:53:48:12:7e:60:
                    00:7f:c2:0e:ac:72:36:21:6d:88:78:13:af:36:24:
                    eb:80:06:a4:d9:a5:9a:87:c2:15:57:35:10:8c:90:
                    a3:18:f9:35:43:af:4a:df:2f:40:72:fa:6c:06:98:
                    52:26:ae:a8:8b:ea:e6:9b:4f:e8:50:27:b5:45:38:
                    28:e3:b3:8f:2f:97:af:94:8b:3c:f7:d9:2b:d7:82:
                    17:ac:44:44:0e:83:6f:0c:32:5f:63:cb:79:6f:1d:
                    e1:db:a8:74:08:ec:4a:87:9f:26:a0:a5:62:04:72:
                    4d:2a:4e:d0:be:92:72:99:ee:8c:42:7a:07:d9:e8:
                    16:a9:2d:a3:bd:04:45:27:91:29:bf:3b:ac:9c:9a:
                    5b:c9:3e:02:2e:53:89:4c:bc:60:6b:2b:4c:71:12:
                    0e:f4:48:3f:cd:6e:8f:ec:b9:87:63:d9:ee:b9:78:
                    70:d3:7d:c6:49:bc:a8:8d:25:5a:f5:58:e3:c5:12:
                    0e:c4:8a:4e:f6:71:9a:48:f2:98:39:53:46:ca:d3:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:8C:8F:82:C9:9C:8A:6C:ED:C4:E9:F7:21:54:DA:17:EB:99:F7
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6A5EB832E64611F0BA498779DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:90:df:92:58:9d:29:d7:9d:ce:3a:91:9d:6a:04:58:13:
         ad:d3:3f:d0:f6:38:83:8b:80:81:24:e7:13:ae:ff:4f:b1:b1:
         ee:8b:ef:26:0f:81:75:d7:1b:21:40:1f:0d:17:cd:89:d7:88:
         83:10:96:92:e8:17:f1:6f:20:cd:6f:cb:9f:1f:06:d5:5a:95:
         ed:68:af:15:bb:73:8b:05:26:d9:54:d0:39:18:41:de:bc:d7:
         89:82:23:10:39:bd:18:0b:f9:97:7d:88:63:e8:0b:02:b6:39:
         52:6c:49:4c:2b:b2:4f:d9:8d:b3:24:55:84:85:3f:d4:fd:37:
         b0:7e:24:50:db:35:74:d7:82:70:ea:a9:2e:20:ca:08:36:62:
         95:ce:a3:46:dd:24:c3:4a:33:62:c8:bd:f2:1f:82:cd:e2:49:
         dc:0d:9a:f5:f4:50:e1:af:00:5d:69:22:6c:1f:73:dd:a2:9a:
         15:8a:b1:fe:96:88:d2:ec:0d:ae:0e:be:78:ab:e2:67:a1:15:
         f5:1f:39:96:85:d6:9d:b6:ee:7c:93:ac:e1:90:5b:0d:34:2e:
         90:18:a1:b9:62:27:bf:53:9f:91:7b:d4:43:11:07:86:8e:39:
         d9:63:c5:94:96:ad:21:f3:67:74:b7:59:18:eb:68:cd:2f:c8:
         1c:5a:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:00:51 2026 by rpki-client