This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
File:                     C4940406C51711F0B575887EDAE4EC9C.roa (raw, json)
Hash identifier:          4RugfSiJesfYSypFZBITfNgFCsRewIA3FsvOJEUwpec=
Subject key identifier:   7B:AC:EA:EF:7D:24:77:76:0A:70:FA:93:8C:82:20:93:B2:7D:54:A9
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0824
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 07:17:12 +0000
ROA not before:           Wed 19 Nov 2025 07:17:08 +0000
ROA not after:            Sun 28 Dec 2025 07:17:08 +0000
asID:                     211826
IP address blocks:        102.177.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 19 07:17:08 2025 GMT
            Not After : Dec 28 07:17:08 2025 GMT
        Subject: CN=691d6ef8-6f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:fc:e8:aa:dd:8b:a9:65:32:27:c3:bf:8a:
                    57:53:df:29:7b:aa:19:30:1b:c6:0d:b2:88:c2:06:
                    7a:da:d4:d5:f7:b0:87:19:2e:ac:67:df:1b:24:3f:
                    d8:ec:5e:10:b6:3f:ae:e8:cb:55:71:c1:db:70:d7:
                    c1:28:36:e2:f0:0b:cf:0f:93:ec:30:57:c3:fa:31:
                    16:d1:1d:03:78:1d:c1:8d:ba:0b:e0:ee:c5:33:b1:
                    91:a5:d5:73:e3:d6:6a:13:f4:0b:31:6d:2d:4f:ef:
                    2d:50:0c:73:7c:69:1d:47:14:72:c9:fb:c3:29:66:
                    0d:90:27:cb:5e:20:5c:f5:eb:7e:03:53:6f:05:f9:
                    68:0f:0e:14:02:15:b6:ac:92:c7:b7:a2:fa:5e:23:
                    dc:df:f8:4f:ff:3d:ab:b7:5f:21:a7:d3:fd:10:db:
                    ed:ee:75:a8:80:c5:ad:2b:23:ae:94:3f:1f:a2:68:
                    8a:d1:47:a6:8b:20:71:61:3f:e1:da:61:1d:a0:a2:
                    8d:b5:af:91:61:c6:f4:d2:be:73:d5:00:89:a2:f6:
                    8f:a3:13:54:2e:24:e0:43:57:07:2b:2f:c9:a2:b1:
                    fc:3b:a9:ab:38:20:89:aa:25:a3:8d:29:d3:8a:d3:
                    a8:d8:55:7f:42:19:41:a9:d1:7e:77:df:de:f1:c4:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AC:EA:EF:7D:24:77:76:0A:70:FA:93:8C:82:20:93:B2:7D:54:A9
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/C4940406C51711F0B575887EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:27:74:1a:6a:75:f4:b0:ae:d8:98:30:62:f6:2f:61:39:
         3b:44:02:f6:59:c8:11:dc:7d:7e:a2:27:7d:e7:6b:ee:65:34:
         28:b0:1e:22:b4:1a:ea:2a:4c:07:47:f7:28:b1:97:70:99:42:
         8d:ea:52:7c:ad:57:8d:09:f2:bd:11:d4:40:d3:82:e1:9e:f0:
         16:a3:36:1c:b4:46:bd:8a:5a:41:20:af:44:af:9a:c2:1e:7c:
         5f:b3:02:e6:1b:29:c6:26:49:d9:1e:5c:60:64:b2:f6:07:5b:
         4c:5e:85:f7:ea:f8:e0:0d:54:46:08:c9:63:b7:42:8a:99:7b:
         f4:c3:75:44:a0:3e:b5:b2:a4:31:87:07:5b:98:71:10:cb:f5:
         b8:0a:b9:f5:e3:c6:d2:49:18:e4:d7:8b:5d:4f:a7:06:dc:d4:
         1f:cd:61:a7:95:12:fb:5e:ae:28:9c:de:b7:b6:77:5c:76:57:
         87:b3:42:30:62:9a:ae:03:58:46:67:8b:b6:c8:d2:8f:94:34:
         64:7f:5f:08:b8:87:f1:8d:31:d0:ae:4b:1e:80:95:48:47:c6:
         df:97:79:09:43:62:af:44:13:24:fd:48:5a:33:4f:22:74:0e:
         de:0e:fc:c9:5c:94:0c:2b:4f:ce:a0:dc:f0:e3:ae:6e:1a:25:
         1a:a7:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:01 2025 by rpki-client