This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/A9197C02BE4511F0A56D70D9DAE4EC9C.roa
File:                     A9197C02BE4511F0A56D70D9DAE4EC9C.roa (raw, json)
Hash identifier:          sDj0YyIRtK97M4F56g15Jln7lJ0EnGTXSqsDxsiEbSM=
Subject key identifier:   6F:49:78:48:23:BF:48:2D:C5:F9:E0:07:B5:8D:86:B8:A7:89:E5:C1
Certificate issuer:       /CN=F36593EDAF/serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
Certificate serial:       06
Authority key identifier: FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/A9197C02BE4511F0A56D70D9DAE4EC9C.roa
Signing time:             Mon 10 Nov 2025 14:58:05 +0000
ROA not before:           Mon 10 Nov 2025 14:58:00 +0000
ROA not after:            Fri 30 Nov 2035 14:58:00 +0000
asID:                     32934
IP address blocks:        102.132.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36593EDAF, serialNumber=FDEA0E5389C99490CAED82B17248011CC332EED9
        Validity
            Not Before: Nov 10 14:58:00 2025 GMT
            Not After : Nov 30 14:58:00 2035 GMT
        Subject: CN=6911fd7d-ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:48:e9:43:6f:6e:05:f6:31:0b:40:bc:2f:
                    90:7e:db:f1:ef:1f:aa:9f:3c:f4:8e:14:a4:84:ee:
                    29:fc:65:57:43:de:64:5a:9c:e1:a7:67:73:2b:bd:
                    b7:9a:db:79:ce:30:2d:3f:9c:cc:b9:c7:6f:85:3f:
                    63:41:95:07:ce:b8:a5:a2:a2:aa:bd:91:fe:5a:a9:
                    2b:a6:b2:11:ad:19:6a:66:21:fa:ab:83:c7:34:d5:
                    4b:fb:45:bb:dd:7e:ce:20:e0:42:88:62:c4:61:02:
                    2b:85:dc:f6:4c:28:3c:56:56:86:22:6b:df:3d:35:
                    b0:44:8e:08:4d:16:50:58:3e:4e:2a:38:04:3e:dc:
                    47:dd:bd:49:41:0f:de:75:0d:88:1b:05:d7:a5:10:
                    dc:88:75:38:ac:d8:d1:b1:ff:8b:5f:fb:6f:37:2b:
                    be:1a:46:a7:c1:6a:23:00:e1:e1:d3:a4:91:15:63:
                    b2:22:44:78:8a:aa:1e:5e:2f:3c:a0:73:79:27:ed:
                    78:a2:e8:a1:62:74:f4:e7:2d:44:ce:20:1b:77:9e:
                    54:f8:d4:03:2e:79:5c:c7:33:63:c9:6f:33:26:4f:
                    b9:b0:17:ed:1f:f4:e0:e9:31:61:7b:3b:71:b5:82:
                    b9:7b:28:f5:ee:ec:04:4a:ca:4e:8e:2f:b0:c7:36:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:78:48:23:BF:48:2D:C5:F9:E0:07:B5:8D:86:B8:A7:89:E5:C1
            X509v3 Authority Key Identifier:
                keyid:FD:EA:0E:53:89:C9:94:90:CA:ED:82:B1:72:48:01:1C:C3:32:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/_eoOU4nJlJDK7YKxckgBHMMy7tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_eoOU4nJlJDK7YKxckgBHMMy7tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36593ED/53375FB2BE4411F089EBEFD0DAE4EC9C/A9197C02BE4511F0A56D70D9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.132.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:27:a2:92:5c:9c:3f:13:4d:e5:4c:24:2b:48:d1:eb:b9:
         7b:04:c8:69:73:e9:10:40:cd:ba:07:53:23:54:0c:24:58:46:
         99:bd:9e:77:78:e6:4d:38:97:08:03:6c:93:45:55:c5:7d:13:
         8e:b7:51:78:a2:dc:96:bf:34:cb:a7:20:78:d1:c5:24:8b:1b:
         67:26:c3:56:c1:db:68:7a:2d:94:2a:eb:6d:07:00:cd:b3:97:
         49:cb:dd:62:ed:c6:ed:41:91:b1:34:0d:2a:64:f4:26:05:b1:
         9a:ab:b3:43:a4:a5:7e:e8:0e:15:59:e9:04:01:c3:a8:df:22:
         4b:ce:36:23:5c:66:49:ca:17:47:31:96:24:53:53:b6:07:79:
         b8:97:3e:6c:67:a4:51:65:34:b7:d4:8f:70:3f:66:48:9f:38:
         c4:a6:75:81:37:ed:11:99:49:b5:eb:2e:3e:81:1e:6a:b0:4b:
         a0:8e:06:98:bf:af:6a:36:96:77:f2:88:39:45:2c:81:b3:95:
         f6:80:c6:3b:40:14:cf:d9:f2:5e:c1:08:a5:90:d7:1a:2f:36:
         48:b1:45:91:71:0b:12:10:5f:fb:6f:78:a7:0f:17:c2:a6:b9:
         50:f6:02:0e:54:5a:e8:91:13:e8:97:81:44:49:64:9b:ec:11:
         4a:4b:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:30:17 2025 by rpki-client