This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa
File:                     BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa (raw, json)
Hash identifier:          aBMgrxCb/6HvnfERUlNb4dZkjtc9w7jnD9/Dl4m4NtQ=
Subject key identifier:   E8:46:8E:DF:53:C4:71:5F:88:79:2D:D2:1B:87:2E:D2:39:D3:02:93
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       2B
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:33:15 +0000
ROA not before:           Tue 02 Dec 2025 19:33:09 +0000
ROA not after:            Mon 31 Dec 2035 19:33:09 +0000
asID:                     24835
IP address blocks:        102.184.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:33:09 2025 GMT
            Not After : Dec 31 19:33:09 2035 GMT
        Subject: CN=692f3efb-4e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bc:26:4f:a1:f9:4c:64:d9:2c:c1:8a:55:be:
                    34:93:25:09:6f:5a:d4:6a:78:8c:81:a4:c7:3a:39:
                    b7:00:39:01:95:6a:32:f7:41:76:4e:c0:e2:15:10:
                    9c:7a:dc:af:e9:f3:f6:49:3f:8d:87:e2:2d:a7:9e:
                    84:9e:60:2a:c7:1b:d9:14:d4:a7:bd:0f:8b:d6:68:
                    06:17:8a:0d:12:b0:35:5a:14:3b:f0:77:f0:ff:10:
                    3b:12:b2:ab:c9:8c:5b:0f:2f:ab:37:66:a0:10:eb:
                    a6:dd:4a:f3:c6:07:df:1e:11:7a:9e:e9:a4:97:8d:
                    85:39:30:fb:d6:ac:48:48:73:02:3f:a3:f2:19:36:
                    11:87:38:93:45:a9:9b:54:7c:21:b8:a9:3a:8e:29:
                    7e:d9:20:0a:cc:39:26:3d:5c:a4:64:41:6a:2e:8d:
                    72:71:c1:42:a9:d9:04:dc:ec:cc:4d:11:f3:ad:ed:
                    83:f9:93:f4:b8:b3:36:6a:a9:e4:bb:b9:ab:60:6b:
                    06:1b:86:ef:ac:de:97:a3:43:7f:f6:5a:17:70:e5:
                    6b:f4:bf:fc:e7:4d:cc:09:4a:25:d4:f9:69:bd:07:
                    41:98:2a:ca:c0:a6:1a:ac:e0:08:7c:ad:b4:63:6a:
                    bf:5e:e4:44:92:2c:4d:45:f8:60:62:e0:7d:9d:8b:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:46:8E:DF:53:C4:71:5F:88:79:2D:D2:1B:87:2E:D2:39:D3:02:93
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BE77F3A4CFB511F0A7895EA2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.184.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         81:a1:35:55:db:64:23:6d:b5:5c:25:d9:76:44:6f:4b:01:d2:
         a7:b0:2f:f3:36:61:9d:39:5e:02:9a:00:43:e6:72:a0:54:90:
         5c:eb:84:eb:a9:86:8b:03:9b:e6:1a:60:0d:38:df:87:16:b8:
         59:4e:30:c9:18:2e:08:4b:10:03:df:3f:fa:6f:95:93:8c:81:
         34:2f:2f:8c:8c:64:45:1d:3b:42:25:8e:d3:f9:da:9c:54:21:
         90:b6:db:44:a2:11:2f:77:d2:f8:8c:b2:61:6f:f2:37:23:7c:
         cf:e7:f8:b5:e4:42:d8:74:46:78:25:32:80:72:09:77:74:27:
         ed:18:31:28:c3:15:63:77:4d:1e:96:21:87:47:c3:63:65:f5:
         b5:ad:7e:97:2b:24:2b:9e:d2:9d:26:9a:75:ba:5b:7c:3c:3c:
         f4:21:43:17:d8:da:51:24:5f:10:84:27:f0:4c:9b:e7:34:f2:
         ef:0a:64:b7:21:8b:05:ff:c7:96:29:3a:ee:ae:d4:f3:47:67:
         8a:ca:e3:90:78:53:b5:11:7b:75:56:9f:f2:a9:9e:65:7d:4d:
         95:89:9b:ad:68:a3:e2:05:b5:37:a8:c5:a0:1c:3f:69:b4:ce:
         73:39:6d:7d:be:a3:e2:14:57:c9:45:82:45:18:a7:19:5b:71:
         5d:85:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:44 2025 by rpki-client