This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/8F4481FAE03211F0AA022B8ADAE4EC9C.roa
File:                     8F4481FAE03211F0AA022B8ADAE4EC9C.roa (raw, json)
Hash identifier:          Ausb+q37534pYlI8/IZKaw5119dV1q+N5AujavUroYE=
Subject key identifier:   50:21:FE:41:43:77:B8:3E:F8:74:8D:E5:AE:C8:93:AB:6A:7E:A4:82
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       68
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/8F4481FAE03211F0AA022B8ADAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:07:01 +0000
ROA not before:           Tue 23 Dec 2025 19:06:56 +0000
ROA not after:            Mon 31 Dec 2035 19:06:56 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:06:56 2025 GMT
            Not After : Dec 31 19:06:56 2035 GMT
        Subject: CN=694ae855-8569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:34:e4:b6:a9:78:0c:68:18:26:4f:e0:25:
                    1e:bc:28:c7:e4:e6:cf:81:9f:8a:21:79:4b:e2:5d:
                    fa:67:62:b6:7c:4c:cc:48:58:9a:f7:a7:37:3e:17:
                    aa:3a:24:0a:6f:29:86:de:f9:e7:8f:d8:a6:63:42:
                    6b:16:2e:94:ac:04:df:59:b3:ff:6a:65:88:91:c0:
                    bc:e6:09:d5:79:0a:39:1c:4e:d2:8c:82:ff:4b:60:
                    a1:40:cb:57:13:84:75:6d:99:0d:7c:5e:f1:bb:c4:
                    f5:e4:58:0d:a9:b7:76:00:25:36:1a:36:71:f7:78:
                    9c:b6:5d:60:bb:7f:ce:90:f9:03:95:4a:a3:57:00:
                    15:06:43:5b:ff:c5:d1:76:d8:55:68:82:7d:30:a7:
                    64:37:de:94:50:70:9c:e7:7c:ac:97:10:1d:2c:4c:
                    dd:2c:c2:b9:27:bc:3b:4f:df:a9:7c:65:65:03:ae:
                    cf:b0:c4:a5:0a:1c:08:02:41:fa:f9:6b:09:e5:37:
                    44:e0:d4:a5:bc:70:47:05:83:da:95:62:91:68:aa:
                    07:74:55:16:13:3f:06:c6:3e:c4:76:e0:0a:8e:d5:
                    e2:20:7b:b4:48:68:36:d3:b8:3d:4a:30:19:8a:65:
                    1a:b4:f6:50:32:84:30:cd:32:b0:63:0b:c5:0f:a9:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:21:FE:41:43:77:B8:3E:F8:74:8D:E5:AE:C8:93:AB:6A:7E:A4:82
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/8F4481FAE03211F0AA022B8ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:f0:5d:53:24:dd:f7:10:49:ac:24:fb:d1:7b:df:cf:67:
         9b:5d:d7:8d:c1:41:99:de:68:ef:01:4b:4b:2e:a5:08:a6:88:
         65:1d:25:5f:62:35:69:ca:fd:c2:1b:a1:86:b8:c2:6a:25:2d:
         4b:df:29:60:3b:88:c6:f4:50:c0:df:06:10:18:26:2e:cd:c8:
         2c:cf:e2:9d:3a:84:7c:0f:62:43:79:84:af:6f:1f:af:f5:21:
         2c:f1:d7:f4:f6:e0:1b:27:10:3d:32:83:0a:ed:b3:3d:f9:7f:
         e3:ab:df:79:74:23:5e:28:e7:02:cc:52:28:59:55:7d:03:40:
         63:ae:ec:ed:ff:00:9a:d2:6c:f8:ae:e1:aa:7c:23:cb:7d:a4:
         0f:e8:96:27:28:f9:49:23:e9:e0:6b:91:30:03:9f:76:a1:49:
         17:aa:ef:08:58:66:28:18:c9:ac:d3:7d:55:d7:ea:bb:c6:10:
         42:6f:81:f7:ca:e8:01:4d:6c:40:f0:86:44:ed:29:30:16:b6:
         aa:f8:46:9a:03:0d:8a:66:d4:34:84:1c:66:23:e6:8d:f5:35:
         56:98:ad:76:b0:a0:e8:f9:4a:48:b0:a7:f7:6a:6e:34:45:7a:
         77:7f:55:a8:7a:23:56:81:a1:63:0a:e2:96:a4:9e:ea:44:6b:
         ab:96:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:09 2026 by rpki-client