This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6D9EDE72E64211F099CA79DFDAE4EC9C.roa
File:                     6D9EDE72E64211F099CA79DFDAE4EC9C.roa (raw, json)
Hash identifier:          LFsqBA4grm6BGuu+IAtbdpdGd09wU0OI5vP1TJGKJGQ=
Subject key identifier:   AB:09:E7:43:32:AF:C7:27:85:86:39:A7:44:26:D1:A9:21:00:9E:E0
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       87
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6D9EDE72E64211F099CA79DFDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:15:43 +0000
ROA not before:           Wed 31 Dec 2025 12:15:39 +0000
ROA not after:            Wed 31 Jan 2035 12:15:39 +0000
asID:                     24835
IP address blocks:        102.184.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:15:39 2025 GMT
            Not After : Jan 31 12:15:39 2035 GMT
        Subject: CN=695513ef-2c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:88:ae:53:f9:c0:7c:7e:b6:8a:8e:92:80:
                    ec:f0:85:6e:eb:d7:59:56:23:51:e3:21:65:27:3d:
                    5e:5c:b9:fd:5a:7c:51:58:32:80:98:47:13:4d:2a:
                    94:e4:47:ff:c2:59:54:cc:0b:5a:c0:f4:f7:75:81:
                    c8:2e:5d:7b:3c:5a:9f:76:4f:52:25:3e:8a:65:13:
                    ac:75:69:9b:76:d4:d7:c6:8d:3d:de:0a:68:53:80:
                    e9:a4:a8:b3:38:7d:3f:0e:2c:1f:26:a3:e7:ce:44:
                    42:8d:e3:88:e0:00:c6:51:be:44:b3:a3:1a:56:a3:
                    e2:d3:20:c7:25:8a:e0:19:dc:ba:3b:38:e9:25:64:
                    e0:ca:15:05:9c:04:87:51:fa:37:76:d1:88:c6:9c:
                    e0:cc:72:d7:e7:50:04:22:8f:a0:72:6f:d3:38:2a:
                    0c:6e:ca:55:e0:ad:3d:ad:6c:de:68:3c:28:17:05:
                    df:1d:ab:4a:be:c4:0d:c0:63:02:fd:04:45:e1:76:
                    2d:14:4b:c5:a2:44:8a:f1:be:83:27:27:82:f2:a0:
                    d9:cb:37:04:b9:33:49:12:8e:b7:a5:e9:ec:90:ea:
                    74:75:0e:81:a6:42:10:84:dc:f2:b9:39:e9:a3:48:
                    eb:1f:6f:b0:e1:52:e4:e7:fc:b7:7b:d7:50:73:eb:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:E7:43:32:AF:C7:27:85:86:39:A7:44:26:D1:A9:21:00:9E:E0
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/6D9EDE72E64211F099CA79DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         4c:12:d3:4d:c2:96:af:c1:ad:fc:15:dd:26:1c:01:07:db:74:
         03:d7:e0:12:b5:cc:69:20:4e:2e:e3:c2:68:ca:85:f8:5a:9c:
         9d:b0:f4:aa:8a:d4:a6:7b:cd:58:3f:00:c0:27:d2:1a:03:5b:
         ca:b1:f7:dd:8a:03:d4:3a:2f:aa:31:97:f7:c6:50:68:bb:de:
         39:75:43:e9:29:84:99:67:5c:46:55:91:f1:eb:05:53:fc:71:
         94:9d:06:45:8e:4d:96:77:43:b8:10:5f:87:05:56:4b:1f:1b:
         19:44:b3:44:fc:4d:6e:c3:dc:02:f8:1f:79:74:55:1f:d0:9b:
         82:03:59:a1:5c:3e:51:75:3b:c3:1a:e8:30:ee:5d:f8:df:b2:
         cd:a1:59:d1:c1:e2:0a:da:9c:77:42:f7:6d:d1:32:ff:09:25:
         43:ba:69:5c:8f:09:68:9b:81:c9:29:4f:3e:ac:01:82:e0:9b:
         8e:b9:59:88:49:83:e2:8a:a9:2b:3f:a3:14:b4:d1:e4:eb:97:
         e1:4f:c4:9e:1b:e5:da:29:b5:ba:dc:f4:e8:63:e0:ce:4f:7f:
         28:36:8b:54:b5:20:61:71:e9:de:07:20:0d:50:d6:52:6b:52:
         5f:de:85:a4:98:0d:eb:d5:ea:b9:32:8a:fc:bb:03:69:98:bb:
         bf:49:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:25 2026 by rpki-client