This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa
File:                     AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa (raw, json)
Hash identifier:          2tRGD2oLj/HLCtH3fXvt5xrNupgPKXIIViu9/t9+M/E=
Subject key identifier:   E4:98:18:2F:70:F5:90:87:F9:A7:6C:9F:B2:82:84:B0:B9:6B:B6:1F
Certificate issuer:       /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial:       0558
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 18:37:44 +0000
ROA not before:           Tue 18 Nov 2025 18:37:39 +0000
ROA not after:            Fri 30 Nov 2035 18:37:39 +0000
asID:                     36877
IP address blocks:        196.43.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Validity
            Not Before: Nov 18 18:37:39 2025 GMT
            Not After : Nov 30 18:37:39 2035 GMT
        Subject: CN=691cbcf8-ef00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:63:cb:29:da:dd:91:bf:9c:2e:b3:08:22:
                    1f:b2:8d:6d:78:b5:e9:90:44:61:7a:dc:40:9e:1d:
                    fd:f2:74:79:f0:a7:ee:ad:5b:40:1a:da:33:bc:9e:
                    a1:9a:96:7b:10:0b:a9:46:21:13:82:87:f8:98:80:
                    b0:bc:3e:8b:86:fb:e6:80:92:e2:f7:77:86:fd:99:
                    02:b5:c6:80:57:e7:93:bc:79:f0:1d:00:c8:53:8b:
                    c6:8e:30:90:3d:bb:8f:c0:aa:aa:92:ca:ae:4f:12:
                    83:19:90:fe:45:c4:2b:b6:2a:48:0f:28:65:fd:97:
                    05:8a:88:20:a5:6a:47:b3:63:4d:f5:b6:cc:2d:8e:
                    0a:6f:22:50:da:8b:f3:26:e5:0d:8c:4b:45:e0:b0:
                    87:3f:59:45:6a:49:43:4b:1a:70:51:97:5a:74:b2:
                    5f:c5:bc:c7:6f:5f:04:ee:dd:eb:94:04:40:76:ca:
                    5d:e6:93:34:ce:98:6d:1e:df:4a:5c:ca:98:76:27:
                    72:35:28:c8:a4:89:3d:a7:fd:ce:fb:20:96:5e:42:
                    ab:7a:26:4e:bc:5f:55:b9:c3:e6:fc:68:15:75:e4:
                    f3:88:96:bc:95:c0:11:2d:8d:3e:5f:7e:95:f1:dd:
                    60:8d:f4:a7:bc:40:ba:85:04:17:e8:9b:b6:66:88:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:98:18:2F:70:F5:90:87:F9:A7:6C:9F:B2:82:84:B0:B9:6B:B6:1F
            X509v3 Authority Key Identifier:
                keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.43.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:23:14:f8:45:6f:55:05:59:5d:6f:59:bd:a0:d8:ea:a5:
         37:e8:89:06:3c:40:64:28:08:2e:fb:f3:9f:b7:3b:99:00:83:
         48:9b:91:2f:61:92:7d:6d:b0:21:e5:ff:d9:94:6e:60:b8:3f:
         ae:96:a4:4b:9b:57:60:09:6d:ad:31:e5:e7:92:92:12:ee:78:
         fb:a6:b0:51:e5:b5:8b:82:d4:74:61:76:b7:83:44:29:20:8f:
         3e:74:ca:f2:32:78:00:75:31:ad:23:ee:ae:2a:74:b1:74:70:
         ba:7a:88:c8:0d:2c:87:ee:af:05:7f:fb:57:fa:c7:41:ef:80:
         84:8e:01:bf:7c:d9:48:b4:32:21:52:c8:88:07:3a:b1:da:47:
         da:d0:00:c5:05:96:08:15:ed:84:b8:86:fe:47:e0:96:c7:0a:
         b9:3a:66:7e:37:0c:aa:88:ce:f2:73:2d:b8:0b:c8:d1:a9:57:
         fb:1c:89:18:b1:1b:bd:1a:b5:45:55:e6:9f:71:42:ac:5d:9b:
         e9:92:99:45:e9:d1:03:a6:01:ed:ef:80:c3:20:65:2d:34:99:
         ac:8c:9a:7c:bd:57:39:6b:89:0c:83:60:b8:98:dd:02:25:97:
         e5:15:14:6c:c2:b4:18:66:8e:4c:e8:c5:3e:ba:59:46:a2:fc:
         f3:04:62:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYzQzJBRjExMC8GA1UEBRMoRTAyMTlENUE0Q0Q4NTgyQzRGMzdFMkQwRERENzA2
Qjc3RUJEOUY2QzAeFw0yNTExMTgxODM3MzlaFw0zNTExMzAxODM3MzlaMBgxFjAU
BgNVBAMTDTY5MWNiY2Y4LWVmMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+2mPLKdrdkb+cLrMIIh+yjW14temQRGF63ECeHf3ydHnwp+6tW0Aa2jO8
nqGalnsQC6lGIROCh/iYgLC8PouG++aAkuL3d4b9mQK1xoBX55O8efAdAMhTi8aO
MJA9u4/AqqqSyq5PEoMZkP5FxCu2KkgPKGX9lwWKiCClakezY031tswtjgpvIlDa
i/Mm5Q2MS0XgsIc/WUVqSUNLGnBRl1p0sl/FvMdvXwTu3euUBEB2yl3mkzTOmG0e
30pcyph2J3I1KMikiT2n/c77IJZeQqt6Jk68X1W5w+b8aBV15POIlryVwBEtjT5f
fpXx3WCN9Ke8QLqFBBfom7ZmiBfHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5JgY
L3D1kIf5p2yfsoKEsLlrth8wHwYDVR0jBBgwFoAU4CGdWkzYWCxPN+LQ3dcGt369
n2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYxMjIyNDY4LzRDR2RX
a3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRDR2RXa3pZV0N4UE4tTFEzZGNHdDM2OW4ydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY2M0MyL0IzOTBFOUU4Qzc4MzExRUNCMTk4Mjg5NEYx
MjIyNDY4L0FCOEIzRDIyQzRBRDExRjBBRUU5MEJEN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHEK3gwDQYJKoZIhvcNAQEL
BQADggEBADx0IxT4RW9VBVldb1m9oNjqpTfoiQY8QGQoCC7785+3O5kAg0ibkS9h
kn1tsCHl/9mUbmC4P66WpEubV2AJba0x5eeSkhLuePumsFHltYuC1HRhdreDRCkg
jz50yvIyeAB1Ma0j7q4qdLF0cLp6iMgNLIfurwV/+1f6x0HvgISOAb982Ui0MiFS
yIgHOrHaR9rQAMUFlggV7YS4hv5H4JbHCrk6Zn43DKqIzvJzLbgLyNGpV/sciRix
G70atUVV5p9xQqxdm+mSmUXp0QOmAe3vgMMgZS00mayMmny9VzlriQyDYLiY3QIl
l+UVFGzCtBhmjkzoxT66WUai/PMEYt8=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:35:13 2025 by rpki-client