This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/A7699538CFE111F0831786B0DAE4EC9C.roa
File:                     A7699538CFE111F0831786B0DAE4EC9C.roa (raw, json)
Hash identifier:          rGEU7wb15ljnefLRJ9OZgSMtwFY9/ZN9iJIKv7H8jX4=
Subject key identifier:   D4:9F:2E:61:50:9C:C1:CF:B9:43:99:92:E7:E6:FE:64:F3:4D:42:2A
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       3B
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/A7699538CFE111F0831786B0DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 00:47:34 +0000
ROA not before:           Wed 03 Dec 2025 00:00:29 +0000
ROA not after:            Mon 31 Dec 2035 00:00:29 +0000
asID:                     24835
IP address blocks:        105.199.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  3 00:00:29 2025 GMT
            Not After : Dec 31 00:00:29 2035 GMT
        Subject: CN=692f88a5-7351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:d5:c1:1e:40:a9:a5:96:3d:9e:74:c2:d0:
                    15:34:bd:69:de:84:93:f4:f8:cf:03:cc:dd:e2:c5:
                    a2:00:4c:a5:3c:6e:04:b6:b4:13:98:d6:86:4c:a3:
                    d0:65:f8:67:6b:a7:b7:b2:19:08:27:08:a1:4a:84:
                    79:1e:86:05:c4:dc:52:a3:cd:9e:90:46:e4:7e:c7:
                    15:3a:cc:7e:1a:e8:9c:ae:d4:bb:ac:58:9a:95:86:
                    d1:71:52:96:65:a0:23:a7:49:55:31:b5:fd:b5:98:
                    07:ac:25:d0:b6:22:b4:90:f1:85:00:d1:66:01:50:
                    89:3a:03:23:aa:3d:88:f7:9c:34:d8:c0:25:2d:0e:
                    1c:44:ff:96:c9:ca:be:fc:d2:7f:58:cf:3e:6c:00:
                    f1:9d:88:e0:ff:43:66:f0:06:14:44:00:f7:f4:3e:
                    2c:a9:17:13:88:4c:81:8c:ac:9e:a7:ec:f8:95:e6:
                    76:74:9a:a3:3c:07:62:2d:2e:f4:73:c1:e8:56:0d:
                    d3:3e:62:fa:c7:9e:87:36:c3:15:9b:d2:6b:aa:f6:
                    a4:e2:40:16:e1:c3:52:83:1a:68:b1:a2:37:46:b1:
                    31:28:9b:ee:c6:8c:79:ad:93:fc:84:d4:99:d1:27:
                    44:52:47:6a:09:33:58:fa:9e:07:cb:1e:33:ab:45:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:2E:61:50:9C:C1:CF:B9:43:99:92:E7:E6:FE:64:F3:4D:42:2A
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/A7699538CFE111F0831786B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.199.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:39:e3:eb:a0:5b:73:f6:8b:13:42:27:99:41:ad:22:cc:23:
         11:90:e1:28:1c:60:d7:dd:88:11:4a:ab:d4:1f:b2:7d:fd:ce:
         88:8c:1c:20:bc:30:79:5f:7b:1f:6d:b8:a1:c2:ae:6e:93:32:
         0f:76:ad:13:d8:0e:38:d1:5e:26:50:07:36:55:d3:75:c1:ce:
         18:5e:3f:bd:1d:3b:9b:7f:c3:c4:59:e1:d4:4d:59:ad:1e:11:
         00:05:1a:d6:c5:95:3e:4f:c3:47:dd:40:1b:5e:17:83:02:78:
         02:10:79:a5:ad:1d:f9:36:db:c3:e2:6e:bb:16:1d:45:12:83:
         a2:53:45:95:07:93:bd:50:0a:25:8b:e2:5e:41:1e:e0:72:39:
         46:71:31:51:d4:ca:9b:f8:5d:f4:b0:76:d2:54:89:c0:fa:83:
         28:f8:2a:c5:01:a2:23:d1:c1:e9:ae:ec:16:84:7c:ff:8a:25:
         b9:79:a6:30:c0:1b:15:bd:ad:d7:c1:cf:a4:86:90:1b:f1:ae:
         e2:33:52:85:28:9c:16:9d:bd:3a:52:0a:49:60:13:f4:aa:db:
         f0:2b:71:db:65:73:07:f0:c5:dc:97:43:e9:f3:0a:70:54:b8:
         8c:1c:ad:ce:a8:fb:12:dd:9d:ee:f7:ef:60:18:05:86:6a:aa:
         d7:c9:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:47 2025 by rpki-client