This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED533020E03211F0ACC31F8CDAE4EC9C.roa
File:                     ED533020E03211F0ACC31F8CDAE4EC9C.roa (raw, json)
Hash identifier:          fCuvOeeua2UEWc+GJAZ1o37pU/fgiocR0PlJYdUski4=
Subject key identifier:   B3:F9:63:5E:8F:68:AE:F8:8F:BF:BF:3F:5A:34:A8:CA:D1:BD:AD:D9
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       6A
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED533020E03211F0ACC31F8CDAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:09:39 +0000
ROA not before:           Tue 23 Dec 2025 19:09:34 +0000
ROA not after:            Mon 31 Dec 2035 19:09:34 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:09:34 2025 GMT
            Not After : Dec 31 19:09:34 2035 GMT
        Subject: CN=694ae8f2-2e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:cf:ea:a6:74:1b:9e:5b:75:a1:f0:c3:98:
                    19:71:b2:df:34:8e:eb:ec:c0:d3:1c:58:12:f5:ac:
                    29:72:11:fc:18:77:48:0b:f2:33:78:05:3e:0a:81:
                    4f:1b:29:43:ee:a1:c4:27:6e:d0:45:ec:cc:28:5e:
                    9f:32:1d:3b:d9:7e:27:c2:29:f9:44:23:93:e1:08:
                    97:58:e8:a7:42:ec:75:c4:31:a3:0f:76:b1:99:a1:
                    14:c4:7b:9e:99:01:83:b6:e0:7b:df:2a:a7:93:02:
                    00:b9:58:b0:0f:8c:ab:bc:f8:be:7f:f8:90:26:88:
                    5e:73:ed:49:29:a6:db:1b:a8:9f:a4:cf:4c:61:63:
                    3b:fc:58:0c:34:72:bd:58:a4:93:b1:e5:72:1a:e8:
                    65:65:5e:66:ff:54:aa:58:17:cc:28:6a:b5:b6:5f:
                    c7:1f:a5:81:a3:51:a1:63:a0:bf:12:d0:02:05:86:
                    3a:c4:32:76:02:b2:9f:01:bf:d5:c5:e9:5c:2d:76:
                    1f:e1:55:35:5b:72:6a:1c:8a:d8:c9:a5:50:b7:b8:
                    6e:60:c5:6e:4d:64:4a:0b:e1:18:48:60:d1:0f:08:
                    e8:c9:c1:e9:19:31:32:57:2c:42:e4:e0:db:2e:6b:
                    90:da:fe:f8:2c:50:67:30:a7:0a:2a:86:c1:88:da:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:63:5E:8F:68:AE:F8:8F:BF:BF:3F:5A:34:A8:CA:D1:BD:AD:D9
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/ED533020E03211F0ACC31F8CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5c:40:ba:49:79:80:ef:02:de:66:eb:da:e8:25:a6:45:cb:8e:
         98:e2:ae:41:46:f1:d8:eb:e1:bf:06:d3:1a:91:74:09:4f:d4:
         66:8b:be:08:5b:44:a4:91:b2:1b:a4:61:d5:5c:3d:63:cf:65:
         6a:89:0b:e5:3e:61:b0:22:70:a1:08:10:ef:2b:a2:d6:e7:6a:
         66:fe:d2:cc:e4:87:d1:1a:d6:26:29:00:36:38:93:83:11:c8:
         f6:c0:60:f9:ed:4e:e4:d4:ad:35:6d:26:68:77:3c:84:28:e0:
         71:10:a5:99:8c:3b:77:00:eb:41:c9:10:74:9f:db:39:11:bb:
         2b:b0:b3:43:42:1a:7c:7e:33:0d:c3:e4:99:80:1b:f2:ec:47:
         27:0b:54:7c:0f:8e:60:19:c7:1e:74:39:e8:b3:b6:76:1b:87:
         fd:60:42:4e:8d:89:18:6d:e4:53:bd:d7:ff:1f:7a:60:ce:9d:
         e1:02:35:d3:00:0a:b2:0c:92:b0:d1:88:e2:b1:7c:91:cf:0a:
         c9:82:d0:ca:03:5f:0d:3a:51:f4:8f:9e:5b:28:d3:3d:07:47:
         d2:47:42:02:c4:b0:a5:73:cc:31:0e:84:88:63:aa:a5:d0:b0:
         8f:a6:9e:38:d8:4e:fb:9f:40:df:fd:3f:af:99:d4:7d:eb:1f:
         b8:9a:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:03 2026 by rpki-client