This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/86AD3B68C39511F0A59F00F2DAE4EC9C.roa
File:                     86AD3B68C39511F0A59F00F2DAE4EC9C.roa (raw, json)
Hash identifier:          HAj/QCJbUqOlCpJTAgH7nxk05+9O2sEd5ZgoEE+jkL0=
Subject key identifier:   A3:41:47:84:7F:EA:A9:AA:30:2F:76:26:53:17:71:A5:84:4D:62:36
Certificate issuer:       /CN=F3679532AF/serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
Certificate serial:       04
Authority key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/86AD3B68C39511F0A59F00F2DAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 09:12:23 +0000
ROA not before:           Mon 17 Nov 2025 09:12:16 +0000
ROA not after:            Fri 30 Nov 2035 09:12:16 +0000
asID:                     328479
IP address blocks:        102.69.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
        Validity
            Not Before: Nov 17 09:12:16 2025 GMT
            Not After : Nov 30 09:12:16 2035 GMT
        Subject: CN=691ae6f7-4c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:f7:4e:15:05:f0:24:e7:c4:cc:86:e6:87:
                    7e:81:32:a8:5b:55:af:6b:8d:60:00:68:88:38:6b:
                    07:2a:2b:b5:94:90:0a:f1:15:dc:a4:dd:d2:9b:a5:
                    5f:b2:2f:6c:64:93:31:e3:a2:8f:f7:b0:45:25:b9:
                    08:42:bb:02:3c:65:16:f1:db:98:cf:c4:b2:56:da:
                    26:bc:ba:4a:14:1a:51:39:6e:75:17:37:95:ac:9c:
                    77:1d:ae:04:85:e6:01:8d:2a:c4:12:76:e4:64:2a:
                    f0:82:c0:68:7f:58:28:82:a2:6d:86:f2:5f:fd:26:
                    8d:b6:b4:b9:d8:52:8f:ca:27:ad:11:21:9e:ed:e9:
                    ac:72:00:0d:88:64:0c:07:8a:db:eb:d3:32:14:48:
                    39:86:35:7c:53:c7:9c:f1:9c:84:f9:ec:13:6b:ed:
                    5c:0a:74:1d:d9:d9:93:81:63:7b:1e:43:c0:b3:5b:
                    18:64:09:a1:f1:02:04:ba:40:3a:8b:40:f8:15:53:
                    55:fc:10:a3:b2:ad:cf:79:b5:4b:3b:9d:67:a8:45:
                    52:5b:56:99:f7:28:8d:1b:8a:ca:3e:c6:6b:3d:43:
                    bb:04:60:d7:c0:09:60:81:f2:d2:38:77:96:f8:fe:
                    ee:84:d3:01:59:61:10:5c:63:62:df:11:67:17:e3:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:47:84:7F:EA:A9:AA:30:2F:76:26:53:17:71:A5:84:4D:62:36
            X509v3 Authority Key Identifier:
                keyid:CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/86AD3B68C39511F0A59F00F2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.69.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:de:91:50:88:12:06:ba:f0:ba:4b:7e:52:14:fd:22:a8:cb:
         0e:e5:5a:34:b3:ed:15:40:f3:fa:b0:55:4c:ee:57:7a:3b:88:
         65:f4:ca:f5:59:18:15:4c:b6:1d:47:79:39:56:17:7b:51:73:
         50:77:70:33:73:7f:af:59:15:a8:93:f1:98:d7:b2:28:7b:db:
         5a:a0:e9:22:37:34:22:f5:0b:2f:ec:59:11:62:6b:6e:00:e9:
         69:ea:91:84:50:9e:e8:71:91:ac:ef:89:b5:25:86:35:45:d8:
         13:ea:fc:31:ae:9f:db:1f:93:23:19:98:c3:11:a1:e9:1e:ae:
         f5:65:7c:de:ce:62:b3:4a:7f:53:37:74:48:96:9e:c5:ab:67:
         bc:87:61:4e:bc:3f:c1:77:26:00:82:89:85:ce:1a:f1:87:8a:
         13:f7:f7:c1:47:7b:ef:f4:5b:bf:49:eb:8a:d9:b2:03:1e:bf:
         08:f1:c8:17:73:da:9f:29:2a:ad:af:f7:52:31:ad:37:55:98:
         54:b0:8f:e1:25:d9:f6:b4:01:c4:11:ac:4a:11:51:97:22:19:
         a3:56:45:be:8b:ca:e9:29:94:6f:89:d9:0a:ec:8b:8c:af:ba:
         7e:27:07:77:b3:cc:aa:6b:aa:45:29:ba:86:0f:ce:ee:93:42:
         95:f9:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:43 2025 by rpki-client