This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9617586EE65311F09345B1CADAE4EC9C.roa
File:                     9617586EE65311F09345B1CADAE4EC9C.roa (raw, json)
Hash identifier:          YTKfsfc+uNFPFqXmbc4tutzypg97/WagZDG/Snyx9nc=
Subject key identifier:   F2:2A:75:58:3B:65:BE:A9:E2:9B:CF:1A:DD:E0:7B:30:B2:63:AA:40
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       BE
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9617586EE65311F09345B1CADAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 14:18:33 +0000
ROA not before:           Wed 31 Dec 2025 14:18:28 +0000
ROA not after:            Mon 31 Dec 2035 14:18:28 +0000
asID:                     24835
IP address blocks:        2001:4220::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 14:18:28 2025 GMT
            Not After : Dec 31 14:18:28 2035 GMT
        Subject: CN=695530b8-b9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:f8:a1:67:a7:5f:d8:0d:c0:bd:3a:d4:b0:
                    2d:48:25:d1:95:dc:70:01:9c:7a:1c:af:57:61:2e:
                    be:86:7a:21:88:31:d5:22:93:31:85:85:50:bc:a6:
                    e6:12:84:da:1f:e7:6a:45:d3:18:d5:a8:34:49:a2:
                    27:42:56:60:84:94:b8:40:77:12:95:68:14:e3:ff:
                    8d:50:93:97:96:50:f5:ef:92:fe:4c:2b:e3:d5:db:
                    67:14:f1:18:15:26:28:f6:16:51:db:ea:fb:33:1e:
                    ac:3f:a9:e2:c7:9d:7f:b2:0a:e6:f6:d3:b1:ba:c6:
                    bd:12:52:cb:ab:3e:41:3a:ea:af:f6:1d:e4:3d:40:
                    b0:db:b8:c5:8c:d0:b5:7b:85:d9:67:6e:a0:07:e6:
                    44:27:ed:13:e8:b9:07:76:c5:d4:2a:2e:ad:41:00:
                    66:ae:bd:9d:c1:67:42:f0:57:3b:75:28:a3:9e:c9:
                    f0:9a:ae:71:b7:08:ac:7c:07:c0:f4:5a:a0:20:e9:
                    78:1c:33:03:82:60:9d:7b:04:78:ca:c5:8b:5c:01:
                    b5:9c:7f:84:ac:b5:a8:93:6f:94:ce:d0:e2:af:06:
                    0a:3f:ac:71:ec:ed:f6:da:1f:38:29:60:83:cc:51:
                    da:22:33:69:0f:27:5e:e4:86:ec:07:a9:76:7a:74:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:75:58:3B:65:BE:A9:E2:9B:CF:1A:DD:E0:7B:30:B2:63:AA:40
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9617586EE65311F09345B1CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4220::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:8b:90:2e:af:66:90:8a:cc:60:25:f5:22:76:33:74:85:
         45:28:bc:d0:77:b9:a5:42:22:a8:58:12:18:02:51:01:52:be:
         f2:0b:b4:b6:cb:4b:15:43:b7:fb:b0:f8:8d:1c:ca:e1:45:51:
         4c:57:eb:51:4f:29:87:f0:26:ca:7e:8d:98:37:a7:df:c6:95:
         f9:26:68:f3:87:8c:f7:5d:e6:d5:7e:7d:d0:2c:5e:fd:11:51:
         b6:61:66:4c:98:dd:36:c5:63:0d:f1:b0:b5:c7:c1:f7:0a:c2:
         a7:d9:74:92:ad:32:28:49:fd:2c:56:d2:72:f7:d9:f5:d0:ca:
         8a:d7:e0:8c:05:1c:c1:58:5d:ec:dd:d3:08:04:a1:c5:e2:2e:
         28:97:59:be:04:10:4a:38:71:ed:32:72:fa:4e:68:be:cd:e3:
         83:76:60:56:f1:70:72:3d:68:e8:32:ed:92:36:c6:46:b1:c9:
         34:c2:2c:96:30:47:e7:f5:30:7b:ba:fb:07:fe:70:fd:72:0a:
         25:cf:78:b4:98:03:c7:28:6e:ce:7a:a8:30:dd:fb:73:9b:b8:
         33:99:e6:9d:ef:eb:a9:f9:ee:c1:e6:ca:dc:27:e6:f9:3e:06:
         ae:1c:2b:59:e8:c7:da:a1:97:cc:f2:38:5b:00:a9:c4:7e:fe:
         7c:63:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:40 2026 by rpki-client