This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C22722EAD09611F08F0173A5DAE4EC9C.roa
File:                     C22722EAD09611F08F0173A5DAE4EC9C.roa (raw, json)
Hash identifier:          Vd4logFKEAqGSkCSMd7ENRCEMCfjdHrlqVTzEEfgnHc=
Subject key identifier:   99:66:9B:E9:D8:FF:17:89:12:94:95:7E:D2:68:A8:C4:EC:1F:E3:90
Certificate issuer:       /CN=F3624EB2AF/serialNumber=0B4E57B46BD78092C3FA50E548BD6EDCB3349F5B
Certificate serial:       02
Authority key identifier: 0B:4E:57:B4:6B:D7:80:92:C3:FA:50:E5:48:BD:6E:DC:B3:34:9F:5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C22722EAD09611F08F0173A5DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 22:23:57 +0000
ROA not before:           Wed 03 Dec 2025 22:23:53 +0000
ROA not after:            Thu 03 Dec 2026 22:23:53 +0000
asID:                     329258
IP address blocks:        102.213.76.0/24 maxlen: 24
                          102.213.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624EB2AF, serialNumber=0B4E57B46BD78092C3FA50E548BD6EDCB3349F5B
        Validity
            Not Before: Dec  3 22:23:53 2025 GMT
            Not After : Dec  3 22:23:53 2026 GMT
        Subject: CN=6930b87d-dbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:8c:a6:2e:20:56:24:4b:10:77:90:a7:41:
                    3a:65:68:24:86:72:66:49:80:e1:b9:1b:1e:1a:5d:
                    c2:6f:ac:60:2e:7b:0f:6f:06:d7:0e:b9:93:9f:9f:
                    eb:ca:ec:c6:e5:6a:dc:a4:0b:bc:22:67:64:96:f4:
                    de:36:ea:3b:ad:a2:2e:78:4d:7e:2d:12:57:67:09:
                    03:9d:1d:73:36:31:4b:38:8c:c2:24:a4:13:a6:14:
                    64:e5:d4:52:9f:89:4c:89:8b:30:d0:86:fc:d8:00:
                    06:42:56:80:ff:05:16:b9:45:61:a4:40:81:fe:28:
                    d7:02:1a:ad:90:29:fc:85:a0:b6:65:1a:ea:af:83:
                    f4:eb:ea:1a:b6:2e:05:9a:16:b8:58:73:7c:eb:24:
                    79:9a:c1:5a:f7:16:54:01:c3:fd:92:00:b0:7b:e3:
                    4f:19:a1:cb:18:01:99:71:1d:f5:b0:80:8b:97:e3:
                    e6:4c:e9:79:31:13:90:a6:95:09:d5:0c:0e:f5:2b:
                    17:41:0c:1f:da:20:02:ef:da:65:26:0a:ce:db:b4:
                    aa:b9:e9:4c:55:58:1b:b9:37:12:e4:79:2d:d8:3b:
                    b2:08:58:2f:72:82:9c:4d:6d:1f:a7:bc:b1:10:9a:
                    25:7e:7f:b6:7c:00:c6:a0:bc:e3:87:d6:e8:00:19:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:9B:E9:D8:FF:17:89:12:94:95:7E:D2:68:A8:C4:EC:1F:E3:90
            X509v3 Authority Key Identifier:
                keyid:0B:4E:57:B4:6B:D7:80:92:C3:FA:50:E5:48:BD:6E:DC:B3:34:9F:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C05XtGvXgJLD-lDlSL1u3LM0n1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C05XtGvXgJLD-lDlSL1u3LM0n1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624EB2/54E13262D09511F0BF630C9DDAE4EC9C/C22722EAD09611F08F0173A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.213.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:12:e7:c8:4f:0e:2c:3a:dc:73:5c:5f:77:83:19:4c:95:
         a6:25:e1:b2:4d:6c:fc:6b:8d:99:e0:1b:33:0c:16:53:53:48:
         e5:5c:7a:e0:ea:bf:37:a8:a5:b2:85:75:59:8c:31:ef:10:f3:
         c6:91:24:61:5b:77:13:db:02:85:76:9a:c0:27:15:82:08:17:
         86:7f:32:db:e7:43:93:39:22:53:ba:ec:db:ae:7a:c4:a4:07:
         20:68:f7:4c:0f:af:c0:cf:a4:35:c3:b0:18:53:8d:6a:86:56:
         80:3f:39:1e:74:f9:d3:f6:5a:a0:4f:a8:04:98:31:0e:3d:86:
         12:ff:8c:31:18:ce:22:78:09:60:e7:3d:a2:bf:b8:d9:d4:c7:
         fe:62:2f:e7:43:bd:a3:4a:03:7f:75:10:6e:45:b6:af:2c:72:
         5f:40:89:9d:63:21:63:67:57:6a:fb:fd:ee:c7:9b:87:cc:61:
         c6:d8:cd:3f:ce:9c:f1:f3:a1:cf:4e:57:73:1b:d9:b9:85:39:
         20:5c:ac:ff:1d:d8:49:4b:cb:b6:80:e7:1d:f2:d1:18:da:1a:
         d8:a5:42:73:e4:c8:28:56:3d:1e:48:c8:de:92:df:a5:33:a8:
         6a:c7:4e:25:7f:27:a7:72:d1:94:a2:32:05:01:15:51:3d:93:
         bb:47:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client