This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DD089252CAA511F091CFD578DAE4EC9C.roa
File:                     DD089252CAA511F091CFD578DAE4EC9C.roa (raw, json)
Hash identifier:          k2t6OOsTPUKt++Qd1quDDVVGZdcS1XDNr3r7A+ETwao=
Subject key identifier:   D3:34:9F:19:C6:CB:DC:61:B5:AC:CC:D1:35:4E:22:ED:8A:66:3A:26
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       083E
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DD089252CAA511F091CFD578DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 08:56:58 +0000
ROA not before:           Wed 26 Nov 2025 08:56:53 +0000
ROA not after:            Tue 30 Dec 2025 08:56:53 +0000
asID:                     397423
IP address blocks:        102.177.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 26 08:56:53 2025 GMT
            Not After : Dec 30 08:56:53 2025 GMT
        Subject: CN=6926c0da-b275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:c7:a7:82:54:4d:1d:a2:e5:8e:d8:46:67:
                    6d:2c:24:9d:8e:ce:89:35:b0:33:d4:eb:dd:5a:66:
                    1c:b2:f7:19:7b:4c:b7:79:aa:f1:c2:a0:0d:ea:32:
                    52:e8:66:1f:6a:43:8b:b2:bb:da:67:f2:e8:33:46:
                    9e:f8:33:1b:52:d7:57:b8:fa:17:9f:22:78:6e:55:
                    16:42:b8:9c:87:be:8c:22:19:3c:ab:08:cc:c5:2b:
                    fd:b4:a1:32:ed:c0:78:8a:b6:2c:1d:6c:4e:38:0a:
                    7a:3e:a5:16:4b:91:a2:2f:98:e0:65:70:1e:83:28:
                    67:06:79:50:e3:02:82:11:89:f4:83:c3:52:98:e2:
                    96:3d:c3:fa:42:4c:9f:ba:bc:39:ac:e7:55:30:16:
                    dd:4e:39:5f:cc:25:68:ac:15:eb:96:fc:12:ce:96:
                    5f:d7:7e:58:61:6d:0f:a4:76:8b:68:fc:18:48:75:
                    2d:81:59:e4:c4:b5:e5:41:44:16:ba:7f:37:65:d9:
                    50:ae:1b:a7:b9:ec:29:4f:31:3e:c2:45:86:8e:20:
                    83:62:70:b4:5a:61:b7:f0:76:e7:12:95:03:6a:42:
                    43:42:ba:eb:bb:8f:81:ab:71:e4:dd:5b:9e:7c:a1:
                    1b:d8:9e:b4:10:c1:0b:a4:a9:bd:03:09:82:64:cd:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:34:9F:19:C6:CB:DC:61:B5:AC:CC:D1:35:4E:22:ED:8A:66:3A:26
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/DD089252CAA511F091CFD578DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:55:ec:bb:b3:0b:3d:8f:09:0e:6e:18:9f:bf:58:16:52:
         2c:6a:47:5d:b0:3b:9b:ec:6b:7d:81:25:9c:fc:64:91:e1:a0:
         1d:63:73:17:29:c0:52:b6:3b:ee:ac:44:7b:7c:57:96:aa:24:
         c0:d8:51:f5:33:f9:51:c7:dc:93:c8:1e:96:f8:78:38:03:aa:
         5b:59:45:1b:02:4f:46:9c:42:bf:78:e7:60:3c:cf:5a:10:f2:
         e6:f5:1f:07:ed:64:77:a1:6f:4e:e3:ae:c0:98:68:32:67:0e:
         b3:6c:71:9c:bf:d6:c5:0d:d4:e4:b8:1f:2c:46:a0:1a:cb:59:
         e2:bc:ed:9d:3c:ce:b2:fc:a7:53:dc:3c:0e:ca:1c:6b:df:bc:
         6e:43:d3:3d:22:ae:aa:a5:1c:f3:10:ce:de:de:c3:96:92:75:
         7e:88:96:31:0c:33:e0:13:32:79:69:8c:2d:ad:1a:7e:30:f6:
         24:7c:ba:fb:5d:76:eb:fb:c5:8e:a4:89:89:a7:99:f3:1e:81:
         d3:32:e1:f8:f7:ab:c1:d4:0f:0b:e6:b5:91:c6:f8:f9:d6:03:
         53:84:3e:e0:17:57:ec:08:af:f6:d4:08:e9:79:f3:7a:3d:b5:
         35:4d:e5:48:18:df:bc:cb:77:c0:56:4c:e2:b9:86:94:5a:71:
         e5:dd:09:8d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTExMjYwODU2NTNaFw0yNTEyMzAwODU2NTNaMBgxFjAU
BgNVBAMTDTY5MjZjMGRhLWIyNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHasenglRNHaLljthGZ20sJJ2Ozok1sDPU691aZhyy9xl7TLd5qvHCoA3q
MlLoZh9qQ4uyu9pn8ugzRp74MxtS11e4+hefInhuVRZCuJyHvowiGTyrCMzFK/20
oTLtwHiKtiwdbE44Cno+pRZLkaIvmOBlcB6DKGcGeVDjAoIRifSDw1KY4pY9w/pC
TJ+6vDms51UwFt1OOV/MJWisFeuW/BLOll/XflhhbQ+kdoto/BhIdS2BWeTEteVB
RBa6fzdl2VCuG6e57ClPMT7CRYaOIINicLRaYbfwducSlQNqQkNCuuu7j4GrceTd
W558oRvYnrQQwQukqb0DCYJkzbmDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0zSf
GcbL3GG1rMzRNU4i7YpmOiYwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4L0REMDg5MjUyQ0FBNTExRjA5MUNGRDU3OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbUwDQYJKoZIhvcNAQEL
BQADggEBAD8aVey7sws9jwkObhifv1gWUixqR12wO5vsa32BJZz8ZJHhoB1jcxcp
wFK2O+6sRHt8V5aqJMDYUfUz+VHH3JPIHpb4eDgDqltZRRsCT0acQr9452A8z1oQ
8ub1HwftZHehb07jrsCYaDJnDrNscZy/1sUN1OS4HyxGoBrLWeK87Z08zrL8p1Pc
PA7KHGvfvG5D0z0irqqlHPMQzt7ew5aSdX6IljEMM+ATMnlpjC2tGn4w9iR8uvtd
duv7xY6kiYmnmfMegdMy4fj3q8HUDwvmtZHG+PnWA1OEPuAXV+wIr/bUCOl583o9
tTVN5UgY37zLd8BWTOK5hpRaceXdCY0=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:17:25 2025 by rpki-client