This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa
File:                     9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa (raw, json)
Hash identifier:          9fFA5F6vS2Uzoj6zR6HF3FdhmSp+E3nknPXSOdym9E8=
Subject key identifier:   69:1B:94:A6:B7:76:3A:2C:E5:C4:EA:61:A7:BD:FD:07:F1:1C:B4:44
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       6E
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:14:38 +0000
ROA not before:           Tue 23 Dec 2025 19:14:33 +0000
ROA not after:            Mon 31 Dec 2035 19:14:33 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:14:33 2025 GMT
            Not After : Dec 31 19:14:33 2035 GMT
        Subject: CN=694aea1e-769b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:70:cf:7f:a9:3e:54:72:41:32:7b:f1:4d:
                    0a:7b:1a:ad:cb:d3:1b:9b:18:e0:ea:e6:e0:24:56:
                    83:a1:11:6c:4b:a3:f2:1e:7c:35:61:a4:60:ad:be:
                    4a:ce:6a:7c:3c:36:a5:e3:4e:87:e0:8a:26:97:a4:
                    6a:6a:9e:24:ea:5e:f6:04:68:36:43:c7:5b:4d:d6:
                    e6:83:ab:9b:b7:3f:60:f9:9b:05:a4:df:fd:36:f3:
                    1f:36:18:e9:81:b5:40:0b:51:b5:63:df:61:41:3f:
                    2e:f9:ec:02:2e:cc:15:1f:43:89:42:4e:b2:e3:04:
                    6f:b0:a3:cf:24:19:b0:10:12:03:b5:9b:c4:99:e4:
                    26:b9:80:a8:a0:d5:ae:bd:ca:39:ce:17:f8:e2:f9:
                    41:31:5e:f2:b5:3a:d5:d5:fc:c6:70:be:71:12:c0:
                    eb:c4:60:df:48:4b:71:2b:4b:f4:ad:a3:3e:a2:7c:
                    7f:29:32:dd:df:9a:e1:cd:ad:cc:7b:8d:2e:b9:54:
                    30:63:91:5d:21:96:f0:36:2a:b7:11:d1:7b:1d:c4:
                    89:e1:ae:bf:87:c8:fc:dd:6d:cf:db:48:f6:9e:49:
                    00:be:1d:81:62:31:15:92:7b:4f:3f:ac:5b:09:3f:
                    62:e7:b9:b2:3a:52:93:bb:9b:ca:3a:bb:80:a9:f3:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:94:A6:B7:76:3A:2C:E5:C4:EA:61:A7:BD:FD:07:F1:1C:B4:44
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         78:86:41:1a:6a:47:53:02:e5:83:d8:32:5a:5b:e5:d9:76:78:
         9d:25:e1:a2:4d:2b:17:21:77:41:96:6e:9f:64:94:74:14:b5:
         92:7a:b5:c7:a1:1e:cf:80:7b:15:49:b9:2f:7a:c1:ce:b5:48:
         0e:52:de:8c:ee:b3:97:ed:85:53:bc:06:16:a9:b0:3a:36:0f:
         79:29:c6:c5:d3:6d:2e:12:08:be:52:83:20:df:7a:6d:94:68:
         e1:ac:54:7f:e1:4b:b1:9e:8a:09:9c:0a:28:b0:9c:5c:73:06:
         75:c3:dc:6e:e9:a2:52:91:a6:b5:96:04:55:2a:b7:d2:3f:a5:
         9c:e7:3f:61:ce:2c:53:24:dc:a0:4a:13:b4:18:4e:f8:ea:a2:
         26:e6:d0:36:38:a7:fa:f8:fe:9a:5b:39:57:1b:35:9a:6c:82:
         9c:d9:dd:d3:a3:8f:5c:12:96:07:54:72:37:3c:1e:d3:1f:73:
         fc:bd:5f:ba:4b:a7:ee:a7:a6:80:c3:36:ff:b4:44:66:60:d4:
         c4:bb:3a:42:d9:71:15:2f:1b:b9:8e:eb:8b:66:09:ea:63:2c:
         8a:47:4c:e9:94:17:1f:08:c8:b3:51:b2:73:5b:4f:0c:e5:34:
         23:9b:9f:92:07:a4:83:09:d2:37:31:7a:ec:c4:60:0d:99:b5:
         35:9a:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:22 2026 by rpki-client