This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6D3ADA34E17A11F0B68119A5DAE4EC9C.roa
File:                     6D3ADA34E17A11F0B68119A5DAE4EC9C.roa (raw, json)
Hash identifier:          n7ZwiWUXLUWfBM9YTb0+GUJFl5kJwPyo5slJJaf+jq0=
Subject key identifier:   DC:EF:56:AA:80:36:FC:A6:4C:78:30:96:41:29:5B:74:34:C6:93:0D
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0871
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6D3ADA34E17A11F0B68119A5DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 10:13:59 +0000
ROA not before:           Thu 25 Dec 2025 10:13:54 +0000
ROA not after:            Fri 30 Jan 2026 10:13:54 +0000
asID:                     22724
IP address blocks:        102.177.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Dec 25 10:13:54 2025 GMT
            Not After : Jan 30 10:13:54 2026 GMT
        Subject: CN=694d0e67-e17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:48:aa:1e:08:8b:74:b1:01:45:c8:f0:20:
                    f0:09:03:1a:89:25:74:44:fc:6b:8e:4c:c8:4b:bc:
                    42:43:1f:b8:5c:ec:cb:e5:28:f7:c7:43:ae:66:41:
                    dd:f7:bf:82:f8:4f:0f:45:42:ca:2a:71:8a:5f:9b:
                    94:da:52:e8:8e:2d:19:62:f9:09:30:b0:38:24:c1:
                    97:bd:af:63:36:bd:5f:db:7f:c8:71:5b:e0:fc:9d:
                    7d:90:6c:63:bf:9f:8d:e4:35:00:9d:16:66:62:7f:
                    e7:cb:75:94:11:9e:83:be:f0:27:a4:46:70:e0:0a:
                    b7:e5:a8:37:fa:28:2c:3f:e3:79:98:40:d1:a6:13:
                    74:5c:20:80:37:fc:76:d6:b4:fb:1b:51:06:d3:e9:
                    ea:93:8b:b3:79:eb:7a:6b:56:ae:c2:3f:08:e7:b0:
                    35:32:01:cc:cd:e9:6d:b4:08:1f:22:37:94:f2:cd:
                    82:76:44:df:69:dd:cb:3e:87:83:00:4a:23:f4:ed:
                    c8:d7:88:17:3d:5b:a8:3f:3a:35:e2:9e:5f:6f:f0:
                    9a:f0:a9:47:e9:0e:20:81:86:d2:67:6a:4b:59:a7:
                    f4:c3:76:96:e2:f8:cf:51:1f:f8:bb:11:8e:08:86:
                    c4:aa:b5:47:9c:4a:ba:0d:30:28:e7:5c:2d:51:dc:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:56:AA:80:36:FC:A6:4C:78:30:96:41:29:5B:74:34:C6:93:0D
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/6D3ADA34E17A11F0B68119A5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:fd:4b:a4:ad:f0:b5:9f:6e:5b:8a:3e:00:45:50:ef:e4:
         23:2a:77:d5:cf:06:7a:48:0a:69:fa:92:2f:db:d1:16:2c:6f:
         c5:8b:9a:bd:b7:e7:dd:79:95:6f:c3:2b:01:3c:c2:50:ec:59:
         6e:1b:c9:d4:3c:37:6e:f2:32:08:83:64:18:d3:6b:f4:b6:4f:
         8f:ce:07:9f:38:18:eb:b0:d6:42:36:67:9d:b5:23:56:a4:fc:
         a6:bc:28:bb:56:3d:cc:d9:d7:2b:68:51:f8:61:80:94:3e:3e:
         ed:a7:b5:0f:7e:3c:41:c0:00:c2:2f:2f:d5:1f:6e:a0:5c:60:
         b2:c1:8a:94:9c:fc:1f:7b:8e:91:34:49:e3:bf:d3:2a:4d:9c:
         e9:8b:a2:6a:7f:de:8e:4f:5b:3e:4e:dc:ac:cb:a0:1a:2c:14:
         87:6f:73:ad:c8:bc:20:00:7e:da:42:5e:f2:40:a9:b2:6f:da:
         dc:8b:36:33:c3:91:f3:a7:74:ca:38:12:7f:eb:0a:3b:30:ab:
         0f:e3:29:13:1e:0e:02:be:19:98:33:7c:6d:41:52:8f:9f:ba:
         b0:bd:d4:45:ef:9b:2d:d2:89:22:d1:d8:85:6a:a8:fc:d4:87:
         b2:b5:6d:9b:56:ea:21:c3:f2:a3:89:de:10:4c:ef:85:ef:67:
         03:17:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:13 2026 by rpki-client