This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A43A0C8C14E11F096DC248FDAE4EC9C.roa
File:                     6A43A0C8C14E11F096DC248FDAE4EC9C.roa (raw, json)
Hash identifier:          sqRGI3qv4ncoLvEEm2EaksIQyKcekb2edaC2J3zEusw=
Subject key identifier:   27:32:E2:3F:77:7A:EB:A8:3D:89:D8:03:DB:5B:6C:A4:67:18:7A:A1
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0817
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A43A0C8C14E11F096DC248FDAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 11:38:19 +0000
ROA not before:           Fri 14 Nov 2025 11:38:14 +0000
ROA not after:            Sat 14 Feb 2026 11:38:14 +0000
asID:                     209242
IP address blocks:        102.177.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 14 11:38:14 2025 GMT
            Not After : Feb 14 11:38:14 2026 GMT
        Subject: CN=691714aa-8fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f9:33:7d:a2:da:63:e0:37:c1:db:27:d7:90:
                    f0:4c:a5:19:a9:33:28:8f:6d:4b:ce:d5:a7:74:b1:
                    fa:85:ad:8e:21:f6:2e:bb:90:ec:03:80:9e:0c:52:
                    e5:cb:7a:cc:d5:2d:74:f3:b2:c1:a6:22:e5:46:ce:
                    ff:6b:56:9a:51:e8:fd:99:6d:24:8e:2d:01:8c:66:
                    9b:ec:ec:05:33:a3:e7:6b:ce:3b:6c:07:20:4b:f2:
                    5f:b3:11:91:ab:c2:7d:ae:11:58:0d:f6:57:fd:b2:
                    80:8d:78:ec:aa:64:b3:d8:19:14:b2:d1:88:f5:a4:
                    38:ef:5e:1e:26:66:44:3a:50:40:2f:11:3e:9c:93:
                    9c:82:97:48:d7:c4:7d:37:46:f9:b2:7c:cd:70:42:
                    06:43:a8:9e:80:10:01:4c:0e:7b:53:df:56:64:21:
                    ed:ce:42:11:bc:4c:dd:55:c7:f3:98:dd:80:85:29:
                    97:07:d2:f9:e8:1e:eb:75:04:e7:92:4c:14:91:a6:
                    97:ef:22:fb:f1:87:d4:c8:9f:93:84:50:7a:87:39:
                    a1:e7:59:ee:89:32:69:c9:f2:84:f1:03:7a:a7:49:
                    68:de:80:80:fc:83:d8:fb:d7:3a:3c:9d:49:76:2f:
                    fa:40:d9:af:fd:ec:db:33:15:15:21:58:80:25:b7:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:32:E2:3F:77:7A:EB:A8:3D:89:D8:03:DB:5B:6C:A4:67:18:7A:A1
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6A43A0C8C14E11F096DC248FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:17:cc:9d:41:a4:94:da:9e:2c:ab:fd:e4:34:31:81:70:1f:
         81:4f:aa:ef:94:e9:b8:62:2f:33:af:30:e8:ed:e5:71:f2:2f:
         9f:18:91:50:04:f4:a1:35:62:d4:5e:49:b3:6a:92:28:af:23:
         1f:ab:dd:bd:7c:95:71:05:9f:f3:2a:74:59:fd:10:65:96:1e:
         5d:df:53:5a:8d:bc:2d:08:fc:18:1a:d4:56:75:d7:8b:5b:50:
         07:06:26:6f:2a:9c:8d:43:de:da:02:32:af:5f:3e:6d:52:f3:
         19:11:81:9e:e0:de:91:b3:20:4f:f3:66:07:c1:5f:f9:54:f0:
         71:ad:59:ee:58:7c:db:81:a3:a1:23:57:d6:f4:75:df:c9:7f:
         05:ca:55:49:70:cd:41:46:1d:8a:66:21:96:e7:2a:65:78:03:
         b5:76:af:6a:67:34:23:90:ba:8e:df:0f:05:76:54:16:6b:6e:
         e9:e1:37:67:20:ff:a1:a9:a2:41:16:a7:c2:ba:8c:34:14:59:
         56:40:67:cd:f1:85:0f:52:96:7e:d2:a4:5e:42:bd:d3:70:4b:
         43:90:cd:d8:89:10:b3:d1:e4:ae:e7:5d:13:45:37:ff:fe:16:
         de:3d:4a:2c:78:ea:7c:6e:58:b3:50:41:a1:bf:e6:28:6f:bd:
         94:be:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:16:32 2025 by rpki-client