This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/ABBD988ACB6F11F0953A42E6DAE4EC9C.roa
File:                     ABBD988ACB6F11F0953A42E6DAE4EC9C.roa (raw, json)
Hash identifier:          b45RZ2QFQBxIFsJ6jLClIbEaKZfOFnfn9gSsLgljeTk=
Subject key identifier:   3C:A8:91:49:57:BE:F8:EB:1F:75:65:82:01:6E:35:C1:31:A2:37:E0
Certificate issuer:       /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial:       03
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/ABBD988ACB6F11F0953A42E6DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 09:01:34 +0000
ROA not before:           Thu 27 Nov 2025 09:01:29 +0000
ROA not after:            Sat 27 Nov 2027 09:01:29 +0000
asID:                     329557
IP address blocks:        102.205.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
        Validity
            Not Before: Nov 27 09:01:29 2025 GMT
            Not After : Nov 27 09:01:29 2027 GMT
        Subject: CN=6928136d-40f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:b0:bf:9b:9b:d7:df:46:5d:be:c4:e6:1d:
                    ac:fe:49:a0:fe:cc:87:f4:98:3b:c8:2a:f6:e1:da:
                    7c:3f:0d:38:6e:ce:78:a2:cf:72:fd:3c:10:ca:98:
                    e0:5d:6b:26:6a:c6:f4:ad:01:a7:b9:f0:e3:e0:32:
                    92:ee:ef:c6:7d:5a:67:85:e8:80:34:3c:86:21:c2:
                    69:d1:2f:32:b9:10:d2:65:dc:98:24:ca:1f:de:83:
                    f5:fa:30:a2:f3:fd:f8:42:91:c7:15:a0:41:40:51:
                    52:06:04:f2:b3:4a:c9:a3:df:0e:54:02:b4:09:41:
                    b9:95:ee:da:1a:d9:fd:e9:c0:cc:da:ab:98:ac:6d:
                    1a:b0:fd:1a:d8:29:74:d5:53:34:af:d6:69:d0:7d:
                    9c:9d:37:ff:95:a0:18:77:35:1f:f8:9f:80:8c:fe:
                    2f:5b:91:f6:12:d2:cd:c7:ab:54:f0:aa:d6:10:49:
                    5c:8b:1d:fb:45:45:51:96:19:cb:01:ec:c7:f4:83:
                    c5:48:40:08:80:59:e7:34:f7:61:31:2e:46:f8:6e:
                    a4:a7:6a:e9:de:c0:bc:e3:56:47:84:2e:f9:c6:ec:
                    fa:27:a2:67:05:ef:53:a2:9b:03:8b:62:a5:97:e8:
                    c3:b5:5c:33:df:54:3c:ec:e1:92:21:5c:c8:ce:81:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:91:49:57:BE:F8:EB:1F:75:65:82:01:6E:35:C1:31:A2:37:E0
            X509v3 Authority Key Identifier:
                keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/ABBD988ACB6F11F0953A42E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:00:c0:5e:05:19:49:bb:91:13:31:86:37:df:16:6e:f6:
         00:00:a3:19:46:87:51:f0:d2:14:6d:32:ae:58:a5:b2:9e:8f:
         37:96:b6:43:82:d8:97:d2:c8:07:bf:b7:66:4c:af:60:d4:1e:
         d5:aa:27:e1:43:69:09:84:19:bf:58:72:36:82:db:77:9a:3d:
         ed:da:11:96:2f:21:af:c8:2d:4a:e1:42:31:9d:76:73:a2:d5:
         fc:22:34:02:d0:ac:f8:d0:00:bb:8f:ae:70:eb:2c:55:e4:9f:
         f6:33:be:96:07:9f:89:99:e1:eb:f2:c2:91:4f:20:ba:04:29:
         6d:55:a4:09:ac:21:dc:a9:52:1c:ef:20:c4:34:a6:d0:75:14:
         8d:ad:ba:12:a0:c5:5a:87:b3:19:83:3c:3f:93:38:db:1f:02:
         e7:4f:02:66:ca:f7:06:d9:dc:8f:95:c4:a4:38:47:c0:22:44:
         40:29:d9:2b:67:ab:02:5c:f5:12:e3:c2:e9:cb:d3:c6:9d:58:
         4b:92:92:05:a7:d0:ec:ff:7a:a9:56:2d:09:6c:31:42:9b:ea:
         61:76:43:80:92:ca:5d:f1:5c:60:36:5f:e9:12:a8:c3:e7:f1:
         a6:60:81:01:8f:91:60:d8:6e:e2:0d:0d:94:1b:e4:67:fa:81:
         37:26:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:45 2025 by rpki-client