This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED024972E64411F09005C0EFDAE4EC9C.roa
File:                     ED024972E64411F09005C0EFDAE4EC9C.roa (raw, json)
Hash identifier:          XoWr8DFFLHUUI1hS2Hcc+slXh5tzxzat68HJvhpcBCU=
Subject key identifier:   C2:CD:9E:E2:A5:DE:7B:59:EE:28:C3:DF:70:1C:E0:55:D5:13:D9:51
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       97
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED024972E64411F09005C0EFDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 12:33:36 +0000
ROA not before:           Wed 31 Dec 2025 12:33:31 +0000
ROA not after:            Mon 31 Dec 2035 12:33:31 +0000
asID:                     24835
IP address blocks:        41.206.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 31 12:33:31 2025 GMT
            Not After : Dec 31 12:33:31 2035 GMT
        Subject: CN=69551820-2455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:77:95:9b:5a:2f:25:0c:7a:a2:7e:fa:4d:
                    fd:bf:ed:ff:dc:3a:e9:6a:c5:b5:bd:b9:b5:5b:95:
                    9f:14:97:a4:22:59:ff:f7:98:44:0f:cd:1d:5f:6f:
                    3f:a5:ae:d0:12:2f:90:17:d9:5e:61:d3:70:c2:b2:
                    24:f8:67:40:4a:19:cc:38:c1:97:0c:41:fd:7f:2a:
                    b4:9b:b3:7b:0a:55:98:94:35:79:49:ce:fd:e3:fd:
                    69:85:a2:58:3f:dc:db:78:cf:3f:b5:74:df:8e:66:
                    b7:4d:cb:7e:17:44:5a:16:4d:1a:22:db:27:e2:49:
                    12:eb:f9:4d:0a:84:64:e9:63:62:f4:33:2f:ba:03:
                    32:7d:76:f9:bd:df:c8:9e:64:81:9a:f9:aa:5e:09:
                    24:e6:c0:ec:28:8b:dd:b3:65:fc:8e:d0:29:3f:a1:
                    fe:0f:62:dc:c8:96:e9:b1:75:c5:ce:5a:ee:28:3c:
                    20:2a:cd:2f:7e:c2:5b:1c:ec:90:ea:f4:51:15:95:
                    2b:46:9a:8d:5b:80:28:3c:d8:86:bb:de:1e:0f:23:
                    a9:74:75:cb:59:aa:57:18:3b:63:e7:e8:cc:35:35:
                    60:71:8e:31:e2:2e:b9:36:67:0c:2d:32:ea:4b:e2:
                    d0:fa:1b:0f:6c:8c:56:26:f6:96:b0:40:37:65:7a:
                    50:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:9E:E2:A5:DE:7B:59:EE:28:C3:DF:70:1C:E0:55:D5:13:D9:51
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED024972E64411F09005C0EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.206.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:87:41:02:90:99:77:1f:56:9a:df:52:70:22:07:41:98:f7:
         e2:78:75:88:be:5e:9d:b4:08:75:30:f4:ca:4e:4d:b2:ab:df:
         d0:5e:52:8a:04:5b:aa:2f:df:6e:65:ba:12:e4:e2:8f:9a:3c:
         96:a5:af:a2:39:a0:44:c4:7b:29:ba:09:c2:ea:24:89:92:91:
         b4:52:5b:cf:6a:bd:3e:f3:1f:a5:68:8e:ec:74:67:3e:9c:19:
         d5:c3:40:8b:75:9a:5f:7c:ec:45:a7:59:06:0d:05:4c:9b:01:
         43:78:a3:d0:68:63:4b:ca:72:df:9b:c9:87:bf:65:1f:c8:9a:
         7e:88:50:39:d5:67:76:db:8d:86:9f:90:bf:ab:43:82:d0:7a:
         59:19:cb:2b:20:b4:76:62:5b:84:66:b2:7c:56:7f:59:b5:5e:
         96:dd:c7:55:6c:6a:5b:15:ea:00:0c:0f:e0:36:75:ba:9d:1f:
         30:6e:a3:da:e5:f0:db:46:cb:f0:22:b5:ee:39:27:1a:73:03:
         6c:45:5c:fd:c5:e6:0e:7c:0d:c7:b9:74:a3:58:98:32:0a:b3:
         3b:83:ef:ce:f1:df:5a:16:f3:8d:77:10:c2:3c:34:d6:96:b4:
         0a:96:ef:b2:d1:ab:81:bb:a8:87:a6:80:e5:e2:26:7e:b2:74:
         67:87:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:28:08 2026 by rpki-client