This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/B48F3596CFE711F0828DCFD7DAE4EC9C.roa
File:                     B48F3596CFE711F0828DCFD7DAE4EC9C.roa (raw, json)
Hash identifier:          Wr1t59nNOd6ISD5g7N+kDQohsibxPi8uS73t8uqyDbA=
Subject key identifier:   C8:DC:E9:41:AA:C0:F1:F6:A4:A2:DF:17:F7:8C:E3:E3:D3:84:1B:34
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       3F
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/B48F3596CFE711F0828DCFD7DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 01:30:53 +0000
ROA not before:           Wed 03 Dec 2025 01:30:48 +0000
ROA not after:            Mon 31 Dec 2035 01:30:48 +0000
asID:                     36935
IP address blocks:        105.198.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  3 01:30:48 2025 GMT
            Not After : Dec 31 01:30:48 2035 GMT
        Subject: CN=692f92cc-699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:66:1e:39:18:a1:c6:fc:f4:21:a6:8b:da:
                    b6:95:fe:51:26:82:7e:94:06:00:91:64:b4:f5:e7:
                    3a:94:15:7b:7c:8a:d2:a8:ba:19:67:f8:cb:2f:47:
                    b9:d5:7c:ac:fc:e3:1a:85:67:0f:33:ab:2e:d1:51:
                    0a:81:24:bb:7b:b7:c6:42:57:7d:8f:ec:e4:c3:b1:
                    dd:45:b4:c7:24:ff:18:6b:6a:3a:66:15:bd:4a:b2:
                    5f:ec:da:04:5a:53:c9:0d:36:3a:4e:cd:e4:fc:97:
                    e2:d8:36:c1:26:a6:aa:47:25:a1:e6:e3:d0:18:ff:
                    49:50:54:4b:d1:b4:7a:72:df:bd:bf:b2:fc:6e:aa:
                    bc:5d:8b:1f:b4:83:09:f0:13:6e:dc:2d:a9:42:57:
                    34:bb:0d:cb:8d:1f:5a:81:2b:30:6d:14:b0:55:b1:
                    e6:3b:1c:15:ba:87:0a:e6:1b:a4:97:1b:fa:36:21:
                    ab:e8:13:c6:b4:18:7d:6f:41:7c:fb:5a:aa:54:91:
                    95:3a:d1:49:2d:44:96:6b:e8:b5:a3:9c:f2:10:23:
                    ea:fb:e9:46:f6:00:38:35:0e:06:ed:d1:20:db:df:
                    f1:bb:d3:35:1a:d8:af:ed:73:c1:aa:0e:88:df:ce:
                    fe:de:bf:f8:9e:ab:72:56:a6:ad:73:3f:9f:11:9f:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:E9:41:AA:C0:F1:F6:A4:A2:DF:17:F7:8C:E3:E3:D3:84:1B:34
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/B48F3596CFE711F0828DCFD7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:9c:a0:d4:26:7a:12:eb:d1:6d:e0:15:e0:2b:67:fa:e3:
         d9:06:ce:3e:7a:a4:cf:60:50:1a:b9:3b:7b:f6:2d:ce:98:7d:
         ba:27:91:53:4b:ce:c4:01:f6:64:9f:81:d4:4f:12:88:73:21:
         e0:80:c9:a2:ab:18:52:e2:f9:28:58:09:c9:d2:d2:88:3b:06:
         13:68:19:85:93:20:e1:58:a6:b1:72:57:dc:8a:78:09:ae:b6:
         5a:ca:ae:b8:9c:9b:72:fe:c7:7c:5d:6d:11:f2:49:e2:2a:3c:
         64:08:6a:2d:2a:28:0d:ca:d1:0a:1f:b2:25:50:b4:a4:f7:b4:
         59:8c:19:9e:9f:cf:dd:2c:12:0a:56:50:f0:8c:e8:57:b3:c7:
         bc:7a:fc:46:22:e5:ad:7a:5c:86:7e:d9:36:91:34:c3:b5:16:
         8a:b5:3d:72:77:87:02:0c:16:79:b8:12:92:c9:b4:6a:95:ab:
         e2:f4:df:36:43:9d:3d:b7:0a:d4:9c:ff:2a:4e:a5:1a:16:20:
         3c:8a:4e:80:17:a9:91:47:19:5f:d9:39:3e:f1:cb:a2:7d:1f:
         8a:c0:cb:69:f1:b2:98:b3:2f:72:f5:bc:24:fe:ac:10:0c:ca:
         bd:33:37:fa:12:ee:d6:df:09:a5:a4:4f:99:99:fe:c9:f6:f7:
         6d:d2:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:48 2025 by rpki-client