This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
File:                     C43CA8C6CFB411F0A80C339CDAE4EC9C.roa (raw, json)
Hash identifier:          YU0Mz0+xBwbICuOKhPlbTNIIJa5T3xaQhk9igOv4NOo=
Subject key identifier:   82:E4:E1:F2:65:5D:C0:D6:04:52:3F:0E:4F:8D:2E:02:86:EC:3D:69
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       23
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:26:14 +0000
ROA not before:           Tue 02 Dec 2025 19:26:10 +0000
ROA not after:            Mon 31 Dec 2035 19:26:10 +0000
asID:                     36935
IP address blocks:        41.223.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:26:10 2025 GMT
            Not After : Dec 31 19:26:10 2035 GMT
        Subject: CN=692f3d56-22c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:e1:b3:00:8d:fa:1b:85:4b:a3:7d:20:94:
                    e8:54:3d:85:3a:8a:e9:6a:8c:f3:17:56:d8:a7:07:
                    e9:e3:f8:f4:f6:74:bd:9d:5f:54:8d:7d:73:d8:ae:
                    de:9c:7f:49:45:14:8d:0a:61:8d:30:6d:ee:03:09:
                    40:0b:a5:63:61:54:3f:4d:8d:b4:ef:ff:65:46:cb:
                    4a:e7:7c:1a:2c:6e:e0:07:21:12:a0:cd:ae:7f:3b:
                    4a:03:44:78:bb:25:ff:c9:d2:63:9a:6a:01:04:8e:
                    86:bb:00:6e:36:a1:9c:7d:f7:84:7d:f8:e5:e8:3b:
                    a8:bc:01:1f:c0:df:46:c3:99:c4:16:24:61:45:f1:
                    e0:ab:42:99:ef:b8:cc:1b:69:bd:16:bd:cf:dd:4e:
                    76:ca:17:97:3d:49:5b:e8:22:38:2b:2e:95:05:67:
                    0f:ec:39:f1:7b:88:ce:c5:3f:e0:5a:08:1c:7c:4e:
                    96:ad:54:62:d5:2c:76:3a:e3:15:45:52:c2:8f:7b:
                    b5:bc:90:89:c2:7a:cf:6b:62:ba:9d:39:0a:0e:ea:
                    df:ea:de:f3:a6:af:b2:16:ae:ef:2e:3a:df:d8:2d:
                    3d:19:16:e6:85:7d:64:af:aa:90:9c:29:ad:8f:c0:
                    f2:61:0b:0e:17:d8:3d:c2:94:17:5b:3a:44:f6:c4:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:E1:F2:65:5D:C0:D6:04:52:3F:0E:4F:8D:2E:02:86:EC:3D:69
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:7b:cf:5b:e2:8b:7b:fa:be:d4:9e:54:07:71:dc:2d:94:2e:
         23:04:ae:f3:c2:b4:03:60:6a:ec:03:37:5a:73:3d:1d:07:81:
         db:67:ff:60:a7:03:03:b5:7c:b6:9a:2d:33:ab:05:56:48:01:
         bc:c9:76:01:43:ef:ec:4b:37:64:29:93:df:1b:86:3a:c7:52:
         f7:67:58:0e:4c:ad:e7:f7:d2:c0:c5:0c:a3:b3:b9:e0:73:26:
         90:fc:ec:bf:6a:ba:ba:35:df:7b:ea:50:78:e4:ce:49:a1:be:
         e9:38:d6:31:de:e8:14:50:4c:b3:1f:51:53:22:1e:48:54:e4:
         f7:1d:8a:cb:fb:1f:aa:de:75:e4:61:36:92:a9:fb:78:25:73:
         b8:89:f1:16:4b:cb:e5:6b:2d:ef:93:d9:5c:04:3a:ac:f2:ac:
         d4:d9:ca:4f:90:dd:1d:e9:cf:87:34:6c:b1:cd:36:99:67:bc:
         58:92:91:68:50:a2:4f:83:e4:d2:59:c2:ba:6a:37:9e:4f:cc:
         63:be:83:ba:c1:28:af:2a:5f:4d:c1:0a:2f:ec:98:cd:4b:01:
         03:3c:06:13:23:58:e2:27:f2:82:c5:6e:a4:87:83:66:0c:ab:
         2b:07:d7:81:4b:e2:fe:19:d3:40:d0:ac:2e:4c:dd:94:7d:a5:
         fb:08:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client