This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37683106C51711F0831FC779DAE4EC9C.roa
File:                     37683106C51711F0831FC779DAE4EC9C.roa (raw, json)
Hash identifier:          X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=
Subject key identifier:   C4:14:ED:4D:E7:F3:D8:5B:3C:52:3D:7B:81:DE:E6:11:02:C4:B0:7E
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0822
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37683106C51711F0831FC779DAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 07:13:16 +0000
ROA not before:           Wed 19 Nov 2025 07:13:10 +0000
ROA not after:            Mon 30 Nov 2026 07:13:10 +0000
asID:                     60171
IP address blocks:        102.177.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 11:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 19 07:13:10 2025 GMT
            Not After : Nov 30 07:13:10 2026 GMT
        Subject: CN=691d6e0b-44f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:99:85:a4:fe:84:af:ea:6d:02:eb:88:24:
                    6b:92:b2:c2:8e:63:0a:0d:81:21:a7:39:f4:b7:26:
                    4a:03:1d:69:88:79:43:48:48:9b:90:ee:3a:da:a8:
                    e2:93:02:24:fd:bd:6e:13:9c:a1:1f:72:0c:40:30:
                    fd:b2:a6:f6:38:a8:a4:bc:97:d7:5c:db:89:9e:de:
                    b0:52:fb:42:45:04:44:3b:7c:dc:e1:5b:5d:ce:80:
                    1b:0d:37:5e:0c:6e:97:8a:15:a6:42:46:4d:00:5a:
                    02:34:19:c4:b8:55:31:01:96:c1:37:99:b7:77:3e:
                    5d:02:30:2e:09:2a:24:bb:96:44:93:c4:fe:81:ce:
                    b0:09:a9:67:f7:88:63:9c:e9:b0:c2:09:87:8f:62:
                    f4:f1:35:9e:41:01:09:88:93:f9:de:85:e4:be:69:
                    4b:f2:4d:16:0f:bc:53:0a:54:97:79:b5:21:1e:af:
                    33:9e:fd:b4:b8:4f:d4:d6:b9:e8:2b:94:a1:dc:b1:
                    f4:f4:8b:37:6c:9a:d9:81:7b:16:c1:8b:0b:31:bd:
                    70:9b:32:f0:62:e0:31:58:fb:4f:d1:08:50:19:37:
                    5f:8a:9d:5d:f5:14:1e:93:1e:e4:3a:9c:1a:1a:81:
                    08:96:1a:d7:2a:5b:c1:de:2b:92:66:5a:c3:1c:95:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:ED:4D:E7:F3:D8:5B:3C:52:3D:7B:81:DE:E6:11:02:C4:B0:7E
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/37683106C51711F0831FC779DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:10:92:52:ef:14:3d:c6:95:ee:32:d5:8f:d0:06:07:1a:83:
         b0:0a:3e:be:b6:26:d1:d2:05:7e:22:94:1a:71:41:39:ca:d1:
         c4:ae:eb:b3:19:23:25:f0:ad:8b:04:ae:f1:02:fa:b7:19:39:
         3d:fb:16:2c:38:db:d1:70:d8:50:ca:b3:36:93:eb:11:3a:2f:
         62:84:33:32:df:02:3a:d7:f1:be:b1:e4:92:65:8c:9e:1e:5f:
         2d:26:88:37:7b:0f:06:66:2d:fe:64:68:c7:29:ad:36:74:0f:
         6b:39:78:4a:ad:19:66:41:fc:dd:90:3e:5b:5a:97:dc:70:fb:
         82:0b:e5:b8:d5:3c:d7:6c:3a:e7:c5:f7:d2:6c:28:01:27:c5:
         d5:a8:63:35:f0:2d:7c:da:28:00:44:d3:ea:3e:e3:61:c1:82:
         96:c8:ff:3e:18:69:25:cb:9f:a9:51:4b:ad:0c:ac:af:33:04:
         5b:08:bd:19:d6:c1:77:a8:ba:63:40:e1:3e:58:d1:c6:d8:56:
         03:58:dd:f6:34:d5:22:49:97:57:1d:21:99:e1:87:c1:9b:b9:
         ba:11:cc:aa:bb:c6:87:97:ca:ce:76:f3:1a:f9:59:55:e2:a5:
         54:b3:2a:8d:15:58:3d:69:a7:7b:5d:51:43:20:e1:47:1d:85:
         5c:d2:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:05:27 2025 by rpki-client