This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/EA178B88CFB411F0B28F1D9EDAE4EC9C.roa
File:                     EA178B88CFB411F0B28F1D9EDAE4EC9C.roa (raw, json)
Hash identifier:          ZwYrxXtAM9XzzHF/9hbViIMZsHfzBZbOHuyEVywDODY=
Subject key identifier:   79:0C:86:9D:3B:D0:CC:ED:95:65:BD:1B:CC:5B:0C:4A:57:11:C5:DD
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       25
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/EA178B88CFB411F0B28F1D9EDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:27:18 +0000
ROA not before:           Tue 02 Dec 2025 19:27:13 +0000
ROA not after:            Mon 31 Dec 2035 19:27:13 +0000
asID:                     36935
IP address blocks:        102.219.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec  2 19:27:13 2025 GMT
            Not After : Dec 31 19:27:13 2035 GMT
        Subject: CN=692f3d96-7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:14:f1:4d:b3:f1:2d:32:16:65:d8:47:2b:
                    66:50:db:e6:12:29:c3:e1:26:37:ab:b2:24:c7:43:
                    60:a3:dd:83:a4:38:59:c2:11:d5:74:83:b8:73:ba:
                    7d:1a:bc:7f:78:a5:bd:7a:16:39:a5:9c:27:c1:b8:
                    52:86:f5:75:94:9b:bc:dd:63:2b:d6:31:aa:47:80:
                    98:fd:5f:82:f1:4c:17:18:f8:39:0b:9f:32:43:1f:
                    0f:b4:ed:e6:2a:cd:0c:6f:bd:dd:fd:27:96:44:15:
                    72:d0:9e:95:af:80:22:8f:8c:09:1a:7c:6f:10:b8:
                    40:d1:de:c8:1e:9a:79:ed:66:10:24:08:fe:c6:95:
                    7c:79:ad:46:58:9d:c0:3b:67:2b:09:cd:63:d2:c1:
                    67:07:d0:06:69:db:e5:6e:2a:78:d5:37:ba:48:96:
                    66:e9:de:a9:82:ba:a9:3c:ae:77:a6:64:04:8f:59:
                    39:27:2a:10:9f:53:8a:8f:44:f2:a8:8d:02:3b:7d:
                    44:5b:2a:90:2a:ab:f3:5b:88:1f:0f:6c:84:a2:4f:
                    fb:eb:f9:f9:71:60:19:c2:bc:d1:4d:2d:ea:37:c9:
                    f5:f9:da:10:da:1a:ee:aa:dc:b6:04:11:44:f5:a9:
                    fc:d5:79:11:58:c9:68:26:93:32:8b:11:13:df:90:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:86:9D:3B:D0:CC:ED:95:65:BD:1B:CC:5B:0C:4A:57:11:C5:DD
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/EA178B88CFB411F0B28F1D9EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:ad:e6:32:79:a3:52:ab:49:10:76:14:03:78:03:2e:e7:
         43:7a:df:ef:33:7b:9b:b7:8c:f4:70:e6:73:ab:c7:83:2d:aa:
         9d:cf:42:08:a0:76:d4:fa:51:88:94:67:48:6e:d9:63:c7:35:
         fe:02:e3:fc:4e:06:82:5d:ff:4d:f7:ff:43:04:af:b4:cd:67:
         4b:d9:a9:33:fd:05:9b:a0:63:d6:97:34:1a:5d:f6:c5:07:60:
         bd:56:1a:45:69:8c:8f:1d:93:cb:45:57:2b:90:c7:cf:df:41:
         5c:c8:27:e5:62:38:35:6a:a1:94:03:e9:2b:c6:37:7b:9f:27:
         eb:32:a1:cc:4c:50:e4:82:a1:cd:53:cc:9e:70:62:87:d3:db:
         19:d1:68:df:f9:d0:f9:34:9f:b1:a3:13:5f:48:a7:15:46:50:
         38:1c:5c:7c:7d:c0:f0:fc:c2:3f:7f:a0:8c:5e:33:27:01:dc:
         48:c5:cd:e8:fc:51:43:fb:45:fb:be:a8:ed:3e:8b:aa:a2:4c:
         16:c5:1c:b3:68:71:58:8b:bb:d0:5a:1d:5c:b3:e4:d0:12:ff:
         99:ca:6b:17:ce:fc:84:f5:fb:8d:cb:5d:0a:24:89:08:5a:a4:
         4f:cf:00:04:f6:f2:1a:7e:1d:61:f0:f3:b2:42:8b:c7:7c:3b:
         11:fb:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:43 2025 by rpki-client