This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A243589CCEA511F0A9A6717FDAE4EC9C.roa
File:                     A243589CCEA511F0A9A6717FDAE4EC9C.roa (raw, json)
Hash identifier:          se4NLR2Fjlwez96RWSdKsixJOP3Wb7l4DrdFMr3ePxk=
Subject key identifier:   4B:0D:69:2C:3B:D5:10:54:81:F8:A7:74:5E:A6:ED:00:D0:1F:9C:44
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       077D
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A243589CCEA511F0A9A6717FDAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 11:05:24 +0000
ROA not before:           Mon 01 Dec 2025 11:05:18 +0000
ROA not after:            Sun 01 Dec 2030 11:05:18 +0000
asID:                     63199
IP address blocks:        102.215.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Dec  1 11:05:18 2025 GMT
            Not After : Dec  1 11:05:18 2030 GMT
        Subject: CN=692d7674-997f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:02:54:1b:81:aa:9d:4f:38:42:fd:da:3c:
                    9e:cf:8d:57:2d:3e:0d:60:77:6b:b1:3e:c4:c3:ce:
                    c9:7d:0a:0f:d8:4d:b0:f1:dc:65:85:9c:04:b4:60:
                    13:a2:12:ba:15:84:d4:3b:5e:c9:ec:e6:2b:65:9e:
                    59:6a:28:da:db:83:09:4e:18:60:53:76:00:95:81:
                    d5:61:37:b4:cd:25:95:19:70:92:09:ac:51:f4:12:
                    2e:1b:2a:72:2e:cd:4d:a0:4c:5d:7e:9c:a2:1e:5b:
                    08:d7:b8:08:69:4d:01:32:fc:0a:3e:7d:8d:44:e3:
                    ef:f9:f9:5f:b4:0c:e6:01:a7:71:c7:ff:b4:80:2d:
                    c7:ce:67:df:7c:d2:81:9a:4c:c1:ff:a4:4d:a5:7b:
                    bc:9b:74:2c:ae:86:9c:16:43:9d:2f:fb:ab:7c:f7:
                    e2:36:03:fe:ff:ee:91:7b:5f:6e:e1:69:b2:19:98:
                    da:ba:e6:a5:16:62:f3:b5:68:9b:0f:5c:39:12:b1:
                    e7:09:12:63:1e:0c:9a:ae:43:51:ae:01:94:ea:85:
                    b9:19:94:a7:71:4d:88:4a:c6:0c:c2:20:8b:02:7e:
                    58:51:c3:0c:27:89:cf:a3:01:be:a8:20:6e:6e:ef:
                    12:4e:71:9a:56:ee:48:c5:2c:60:65:05:15:97:8c:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:69:2C:3B:D5:10:54:81:F8:A7:74:5E:A6:ED:00:D0:1F:9C:44
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/A243589CCEA511F0A9A6717FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.215.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:84:62:0a:a8:99:58:fa:a0:b9:8d:f0:f2:0d:5c:6a:af:c0:
         10:6c:d3:72:3f:30:7a:9a:d2:7d:5b:d3:5f:75:93:8b:1a:1d:
         f0:1f:60:66:79:27:ec:dc:a1:93:38:a7:59:a0:63:26:76:5f:
         9f:53:84:b7:8a:87:03:96:c9:96:6b:be:f2:3e:71:8c:1f:df:
         c0:bf:c8:06:9b:7f:88:2d:8d:62:e9:ac:49:48:85:81:09:b7:
         e1:14:15:1a:72:ad:5f:f6:22:bf:51:9e:d0:e4:bf:94:44:02:
         19:b9:11:60:3c:59:ee:39:d6:d4:e5:d1:e6:e8:eb:72:16:bc:
         b6:67:8a:41:7e:63:63:8a:14:e7:b5:56:eb:9c:b7:d9:3a:e1:
         c7:cc:ee:05:0f:f0:f2:4c:12:69:9b:99:08:34:23:2f:c5:68:
         75:13:b0:25:47:25:f7:c8:a3:79:e5:9e:57:6d:3a:fc:ac:6d:
         fb:1a:1d:a0:13:11:ca:04:e5:4b:ba:d0:4c:e1:bd:ef:16:3e:
         a3:18:80:64:d7:b1:eb:e5:b9:64:14:b6:72:77:53:f9:67:5c:
         40:fa:bf:d8:95:d1:3b:99:5f:5c:7a:c3:a4:6f:d5:7c:e6:f2:
         e5:e9:ee:8c:88:70:25:fc:ae:c3:b1:35:c6:d4:af:de:c0:4a:
         d4:44:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:24:22 2025 by rpki-client