This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/3BE483FCC9CB11F0B7DA919CDAE4EC9C.roa
File:                     3BE483FCC9CB11F0B7DA919CDAE4EC9C.roa (raw, json)
Hash identifier:          U5p7GVkiTLgBfS2Dy057TgsUbEwcfLUfcyp7wT5j5n4=
Subject key identifier:   AD:8C:1D:CE:6E:E2:4E:9A:E9:CA:9C:6E:C2:12:52:EF:9B:E2:63:3F
Certificate issuer:       /CN=F3673434AF/serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
Certificate serial:       97
Authority key identifier: CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/3BE483FCC9CB11F0B7DA919CDAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 06:51:57 +0000
ROA not before:           Tue 25 Nov 2025 06:51:52 +0000
ROA not after:            Thu 25 Nov 2027 06:51:52 +0000
asID:                     329558
IP address blocks:        2001:43fc:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3673434AF, serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
        Validity
            Not Before: Nov 25 06:51:52 2025 GMT
            Not After : Nov 25 06:51:52 2027 GMT
        Subject: CN=6925520d-2d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:dc:1c:31:71:d4:f5:9b:1b:40:4c:98:e4:
                    a2:19:9b:95:33:e6:14:02:83:53:63:19:8c:0f:35:
                    48:df:14:6e:7d:84:0f:73:04:c7:d9:58:40:63:4c:
                    b6:84:2a:9a:06:82:6e:5c:b3:9a:db:d7:6b:88:2b:
                    39:61:0b:b9:91:71:2e:f3:df:93:61:45:de:ab:b2:
                    c4:2a:a5:d2:3b:ab:20:9b:98:3f:ad:0e:65:23:13:
                    23:fc:a3:a9:20:9f:b9:a8:e8:2d:4d:1e:d2:94:f1:
                    06:0d:da:b7:a7:d3:d0:2e:fd:94:45:ec:0e:bd:2f:
                    dc:b8:52:6f:cc:2a:2e:97:7a:31:62:d5:34:5b:65:
                    62:5d:09:8a:7e:42:94:54:94:53:09:07:2b:86:c7:
                    5b:a7:a9:4d:08:94:c4:10:bd:50:73:e3:58:d7:9c:
                    60:07:15:0d:2a:f9:4c:bd:c4:b4:a6:94:b5:65:0a:
                    a3:1f:36:81:11:fe:a9:1e:40:1d:a0:ac:c1:15:b3:
                    47:a3:f5:79:d5:79:a9:04:4d:af:d5:10:5d:a6:9b:
                    04:c3:16:a8:55:80:dc:15:45:6d:3b:71:5f:61:48:
                    2f:f6:ec:8b:63:d3:6e:c3:4f:ed:04:00:51:40:f7:
                    9c:65:67:95:e8:15:16:93:33:58:d1:55:1d:ad:42:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8C:1D:CE:6E:E2:4E:9A:E9:CA:9C:6E:C2:12:52:EF:9B:E2:63:3F
            X509v3 Authority Key Identifier:
                keyid:CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/3BE483FCC9CB11F0B7DA919CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43fc:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:82:ce:a0:f6:fa:f1:40:6f:c4:fa:2b:de:ee:8d:e4:2b:78:
         32:70:6a:8c:fc:64:0f:ad:be:44:3a:99:10:2a:2f:9b:43:27:
         07:66:11:4b:3f:90:29:02:b4:4e:b8:c0:9c:7b:2d:03:20:d1:
         fc:16:6b:45:c5:0c:f4:7f:89:3e:8c:71:d3:d1:8c:05:f3:de:
         0b:6b:71:a5:d8:0f:04:86:f9:b4:3a:e5:0e:b5:60:49:f4:59:
         6c:92:c3:c1:e1:5e:97:a0:cb:5e:99:6b:5b:85:80:7b:89:9a:
         b3:0a:c3:1f:58:ea:3e:47:e7:e0:9c:10:e0:b9:3a:e6:3e:2e:
         3c:90:36:76:4a:a8:03:ea:c5:ae:1c:96:80:46:49:33:cb:4a:
         07:f3:b8:8e:c6:8e:01:67:10:7a:da:13:c4:e0:29:39:13:16:
         5f:dd:6a:76:61:84:1c:e2:ae:50:3c:72:4b:2d:99:d5:60:a5:
         60:ec:e9:b7:5a:13:bb:e5:ca:41:89:2c:80:ef:bb:6d:22:f4:
         8b:30:e1:b4:7a:2d:93:3d:ad:0d:3c:4c:a8:bb:a5:b0:93:3c:
         d7:53:8f:ac:90:39:50:96:e1:07:00:4d:d0:06:b2:bd:08:ff:
         5d:48:7b:2b:db:87:e1:bf:dd:56:50:4f:d4:b8:ac:b4:0f:54:
         ea:f9:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client