This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/548EDFBAD41611F09F8A6C9FDAE4EC9C.roa
File:                     548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (raw, json)
Hash identifier:          k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=
Subject key identifier:   67:97:58:F3:1D:D8:BB:DB:6C:AC:62:9E:40:CB:23:77:62:AE:3A:E7
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       04E5
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/548EDFBAD41611F09F8A6C9FDAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 09:14:42 +0000
ROA not before:           Mon 08 Dec 2025 09:14:37 +0000
ROA not after:            Sun 20 Dec 2026 09:14:37 +0000
asID:                     328271
IP address blocks:        102.203.216.0/22 maxlen: 22
                          102.203.216.0/24 maxlen: 24
                          102.203.217.0/24 maxlen: 24
                          102.203.218.0/24 maxlen: 24
                          102.203.219.0/24 maxlen: 24
                          2c0f:ee68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Dec  8 09:14:37 2025 GMT
            Not After : Dec 20 09:14:37 2026 GMT
        Subject: CN=69369702-9cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:12:12:b7:c6:1c:7d:04:7a:f5:50:3a:1b:
                    55:5a:2d:58:b8:13:85:fd:71:6d:b1:db:d6:2a:b5:
                    89:35:36:07:cc:5a:00:4d:73:80:9f:9c:24:00:99:
                    68:9f:b4:09:96:19:f8:57:04:14:36:ff:8a:5d:cd:
                    fb:b1:28:b3:11:d9:13:32:fa:81:2f:21:83:ce:78:
                    c9:b0:99:f7:6a:e8:bf:e4:8e:54:88:b6:41:0e:09:
                    52:37:0c:12:69:5d:58:ad:32:e1:b5:2a:11:18:d1:
                    44:f3:9e:f6:8a:09:65:b4:d0:c6:b4:09:e8:49:43:
                    01:5f:a6:4b:94:30:cb:92:77:41:fb:29:da:cf:4c:
                    56:24:49:a1:c9:c8:de:18:54:1c:5f:f4:13:f0:27:
                    ec:62:75:5e:df:34:21:fc:5e:71:74:a1:29:cc:4c:
                    f0:90:4b:6a:0d:cf:a8:c0:e6:ec:f3:c1:c3:ba:8e:
                    d5:a0:a6:2f:b5:12:f1:f4:ae:5d:c7:05:ea:6f:c7:
                    55:ea:89:49:c5:14:d8:dd:04:a9:45:ca:27:62:f1:
                    08:d0:9b:88:66:af:fe:08:3e:e8:43:30:ad:e5:b4:
                    d8:52:08:a1:aa:04:45:66:79:44:90:4d:bc:2c:79:
                    31:ca:f4:1e:b2:73:86:34:93:aa:c9:58:4c:25:7f:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:97:58:F3:1D:D8:BB:DB:6C:AC:62:9E:40:CB:23:77:62:AE:3A:E7
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/548EDFBAD41611F09F8A6C9FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.216.0/22
                IPv6:
                  2c0f:ee68::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:17:3b:69:30:88:0c:7b:21:48:6f:ac:e9:41:80:df:d6:0f:
         5e:e9:02:c5:d4:d0:2c:bc:86:b3:d3:d0:f7:6b:9e:1a:e2:79:
         68:23:50:6a:64:f1:28:a4:6c:5d:22:7e:eb:21:19:4f:7d:63:
         5f:3b:68:04:4e:27:ae:fb:17:29:04:48:5f:af:3e:68:ab:53:
         3e:3d:26:03:0c:d7:81:91:0a:b1:02:4b:0b:ec:09:72:0e:2b:
         ff:0b:9f:ab:f1:96:6d:82:fb:e2:e7:73:59:f9:03:d9:ab:27:
         f8:80:6a:a1:b8:9d:51:80:8e:4a:55:9f:ee:5c:1d:52:62:73:
         ca:11:79:12:27:5c:0e:c2:a2:11:17:9b:f4:e5:01:2a:52:95:
         c0:e3:09:6e:c8:5e:c2:97:98:1d:a4:e3:48:6f:14:2b:cc:49:
         61:ba:f4:ab:47:e4:94:4a:15:ea:48:dd:7e:c2:8b:d7:b3:05:
         33:23:e8:e5:cf:5e:4c:5f:16:d7:14:f9:f9:e0:a9:5c:b5:7f:
         77:c7:c7:0b:06:f9:fe:92:95:15:40:b2:8a:3e:f4:21:25:d9:
         8b:63:30:59:c7:93:73:0e:3b:6f:17:eb:02:48:bb:1c:a5:4f:
         aa:17:10:f9:10:6d:f7:5c:59:85:3f:c5:59:45:1e:9b:1b:72:
         bb:5a:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:42 2025 by rpki-client