This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/FD6A2FC6E03311F09F27C092DAE4EC9C.roa
File:                     FD6A2FC6E03311F09F27C092DAE4EC9C.roa (raw, json)
Hash identifier:          X+2ma4rUdX20xim7i8E3RdkGIOC6nD+e2aVzXB4FFDo=
Subject key identifier:   16:C7:84:42:D2:D5:EA:1C:A0:A1:83:23:7A:70:29:51:C3:C1:55:D2
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       70
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/FD6A2FC6E03311F09F27C092DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 19:17:15 +0000
ROA not before:           Tue 23 Dec 2025 19:17:10 +0000
ROA not after:            Mon 31 Dec 2035 19:17:10 +0000
asID:                     24835
IP address blocks:        105.198.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Dec 23 19:17:10 2025 GMT
            Not After : Dec 31 19:17:10 2035 GMT
        Subject: CN=694aeabb-3f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:5d:e6:8f:1b:e9:a2:3d:a1:1d:51:73:c7:
                    0f:e2:c4:3e:3e:22:4c:ee:ba:57:8d:e8:cf:40:a3:
                    9b:c5:d9:6d:c9:55:0a:55:b4:98:e8:ef:67:5f:71:
                    a9:ed:d1:92:fe:93:56:80:af:04:b6:d1:ac:89:64:
                    3b:69:9d:74:ff:0f:ba:cf:31:37:47:97:1c:3a:f0:
                    d8:79:9e:44:7c:fa:c4:71:c1:60:6f:fb:56:03:7c:
                    9a:b5:58:0f:fb:af:45:2d:d3:4c:c5:28:1d:d8:ac:
                    a2:81:90:fd:f7:a5:47:c9:a7:28:24:1e:8d:9a:49:
                    3c:6b:51:5f:26:67:01:51:aa:b7:52:18:82:19:27:
                    46:fe:0a:01:c3:f5:0c:5c:31:f4:13:eb:a8:e1:bb:
                    dc:e2:5f:6d:b3:43:cc:c4:c9:27:df:38:58:80:b2:
                    07:9b:64:9e:fc:60:cb:ba:78:53:2c:f2:63:21:1e:
                    dc:8e:ae:00:8d:55:04:1c:25:2d:5d:34:18:2e:42:
                    b4:53:4c:b5:47:fc:85:51:40:c5:04:fb:5b:80:87:
                    80:70:fd:e1:5b:f8:9b:4e:3f:7f:9e:5c:de:49:62:
                    6c:19:10:d7:04:87:26:d7:55:fc:e7:56:ac:79:e5:
                    a7:a5:c0:8c:11:dc:af:f9:ba:1f:ba:7c:ad:9d:47:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:84:42:D2:D5:EA:1C:A0:A1:83:23:7A:70:29:51:C3:C1:55:D2
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/FD6A2FC6E03311F09F27C092DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         67:42:25:55:1d:82:e7:5c:2d:bd:60:5d:3c:bb:8e:d2:d6:83:
         3a:0b:17:43:9f:32:bd:9d:96:b3:b0:36:e4:e5:e8:b0:93:55:
         fa:34:9c:ff:4a:c3:91:66:42:3b:fa:6e:6e:79:5b:ea:f1:69:
         6d:d6:64:45:d2:39:02:84:73:bd:3c:4f:69:54:51:15:28:9d:
         6a:98:6f:67:83:76:c8:f7:cd:9f:3e:2c:09:a3:9f:15:43:98:
         ac:cc:2e:fc:3d:3a:b0:d0:01:72:50:f6:19:1e:92:0b:57:cc:
         c0:89:f1:26:19:af:32:68:4a:43:76:c4:36:6f:e7:28:b6:33:
         76:d7:90:73:1c:3a:60:6d:05:c6:50:7b:ff:9a:8c:71:01:53:
         9d:4d:06:8a:5b:37:a6:65:d6:04:80:fe:13:45:f7:eb:4a:6e:
         f1:60:13:94:65:28:f1:82:85:1e:29:89:14:35:51:be:7a:c9:
         63:27:45:0d:d8:bb:64:df:da:0e:31:03:45:62:77:f5:81:61:
         0b:e4:c3:8d:d9:fb:75:71:f1:33:42:5e:ff:27:cb:b5:3b:3c:
         88:84:83:68:17:bd:47:a4:18:1c:08:d6:69:c9:f6:80:99:80:
         41:b2:b7:83:4e:3c:c2:16:a4:21:f1:6c:54:50:e7:94:45:78:
         99:f5:49:d9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QkFGMTEwLwYDVQQFEyhFMkZFNTZBRkU2NkFCMERGM0UzOTVFRERCNDE4OTNF
MDBERjZBRUY3MB4XDTI1MTIyMzE5MTcxMFoXDTM1MTIzMTE5MTcxMFowGDEWMBQG
A1UEAxMNNjk0YWVhYmItM2Y0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJMdXeaPG+miPaEdUXPHD+LEPj4iTO66V43oz0Cjm8XZbclVClW0mOjvZ19x
qe3Rkv6TVoCvBLbRrIlkO2mddP8Pus8xN0eXHDrw2HmeRHz6xHHBYG/7VgN8mrVY
D/uvRS3TTMUoHdisooGQ/felR8mnKCQejZpJPGtRXyZnAVGqt1IYghknRv4KAcP1
DFwx9BPrqOG73OJfbbNDzMTJJ984WICyB5tknvxgy7p4UyzyYyEe3I6uAI1VBBwl
LV00GC5CtFNMtUf8hVFAxQT7W4CHgHD94Vv4m04/f55c3klibBkQ1wSHJtdV/OdW
rHnlp6XAjBHcr/m6H7p8rZ1Hvr0CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQWx4RC
0tXqHKChgyN6cClRw8FV0jAfBgNVHSMEGDAWgBTi/lav5mqw3z45Xt20GJPgDfau
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It
WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFF
NEVDOUMvRkQ2QTJGQzZFMDMzMTFGMDlGMjdDMDkyREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAWnGMA0GCSqGSIb3DQEBCwUA
A4IBAQBnQiVVHYLnXC29YF08u47S1oM6CxdDnzK9nZazsDbk5eiwk1X6NJz/SsOR
ZkI7+m5ueVvq8Wlt1mRF0jkChHO9PE9pVFEVKJ1qmG9ng3bI982fPiwJo58VQ5is
zC78PTqw0AFyUPYZHpILV8zAifEmGa8yaEpDdsQ2b+cotjN215BzHDpgbQXGUHv/
moxxAVOdTQaKWzemZdYEgP4TRffrSm7xYBOUZSjxgoUeKYkUNVG+esljJ0UN2Ltk
39oOMQNFYnf1gWEL5MON2ft1cfEzQl7/J8u1OzyIhINoF71HpBgcCNZpyfaAmYBB
sreDTjzCFqQh8WxUUOeURXiZ9UnZ
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:59:31 2026 by rpki-client