This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/AE7281A4CB7311F0A2BADC80DAE4EC9C.roa
File:                     AE7281A4CB7311F0A2BADC80DAE4EC9C.roa (raw, json)
Hash identifier:          hY70D/eGofbELgRzLaQTYAUGWjRXYyTAqpTOnSRS100=
Subject key identifier:   17:01:AA:B2:AE:A2:71:B6:A7:92:53:54:75:09:E9:FF:48:E4:88:24
Certificate issuer:       /CN=F36927B4AF/serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
Certificate serial:       05
Authority key identifier: E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/AE7281A4CB7311F0A2BADC80DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 09:30:16 +0000
ROA not before:           Thu 27 Nov 2025 09:30:07 +0000
ROA not after:            Sat 27 Nov 2027 09:30:07 +0000
asID:                     329557
IP address blocks:        102.205.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36927B4AF, serialNumber=E71B2F7B25720846D3D26E50128DCDDD2A165F9E
        Validity
            Not Before: Nov 27 09:30:07 2025 GMT
            Not After : Nov 27 09:30:07 2027 GMT
        Subject: CN=69281a28-09c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:a3:b1:72:4c:4b:ee:17:81:36:d2:42:d7:
                    4b:99:31:cd:9f:97:c8:5f:6f:c2:d5:d9:df:d4:51:
                    a6:e3:15:a5:3a:69:c5:25:2c:48:ea:ad:a9:be:18:
                    0c:be:df:55:3c:d8:13:bc:7a:80:40:fb:9b:a6:51:
                    6c:43:2e:3e:06:69:41:ad:ff:da:fe:0d:51:58:dd:
                    52:02:15:98:0a:40:43:44:9e:19:47:fa:a5:12:02:
                    2f:02:4d:cd:b5:76:a3:1c:ca:41:91:d5:f5:14:82:
                    9c:0a:fb:64:da:2d:8f:1e:26:cf:9a:5c:5d:74:0b:
                    45:74:3b:2f:6a:dc:50:2a:a7:46:5d:91:1f:70:1f:
                    48:a6:eb:59:ab:d0:42:eb:48:be:ac:34:75:c9:36:
                    14:9e:bc:11:37:0e:fb:8e:e2:c1:f3:ec:24:fd:c0:
                    60:e6:32:1f:7a:e3:6e:55:01:5e:7d:19:15:a5:67:
                    f5:31:9e:7c:93:5d:21:1b:9d:16:3d:77:17:81:ec:
                    af:c8:7d:50:4a:2c:a3:b5:4a:7f:91:76:c8:82:95:
                    e9:c5:9d:25:4f:ea:f0:c2:cc:2c:87:1a:1c:00:02:
                    89:34:8c:09:e4:4f:02:1b:bb:7b:7d:d1:ca:9f:61:
                    f2:c3:92:82:64:64:1f:a4:83:50:c9:00:84:93:12:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:01:AA:B2:AE:A2:71:B6:A7:92:53:54:75:09:E9:FF:48:E4:88:24
            X509v3 Authority Key Identifier:
                keyid:E7:1B:2F:7B:25:72:08:46:D3:D2:6E:50:12:8D:CD:DD:2A:16:5F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/5xsveyVyCEbT0m5QEo3N3SoWX54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5xsveyVyCEbT0m5QEo3N3SoWX54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36927B4/24A6A76ECABC11F08798D681DAE4EC9C/AE7281A4CB7311F0A2BADC80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:24:e0:53:17:10:be:3a:0d:81:29:3c:1d:c5:b8:22:41:
         6e:92:4a:3c:3a:73:96:b9:c0:3c:15:e5:61:e9:05:e8:4c:e9:
         94:59:2a:26:a6:b3:62:13:ed:21:41:90:a3:34:79:24:b9:d4:
         4d:b3:b2:0e:98:2a:70:d5:17:fd:c8:3c:f0:20:9f:21:06:b4:
         3c:17:3b:f3:9d:7f:d1:a9:00:71:95:cc:21:ee:30:54:cf:89:
         ef:9a:eb:19:87:40:bb:af:19:aa:f2:e6:60:e9:82:f9:ef:32:
         f2:37:c6:f7:c8:05:da:3f:54:d6:4f:00:96:9e:85:ec:3c:b4:
         5c:99:0c:d5:df:18:34:8b:6d:ba:1c:44:cd:85:a7:7a:4d:a9:
         25:06:0b:82:43:c2:2b:eb:0a:67:f2:83:d0:a3:bd:6f:97:24:
         3c:45:18:47:99:00:07:eb:a1:c0:b2:d2:14:90:50:75:0d:82:
         b8:1c:5d:48:ca:a9:98:8f:c2:8e:b8:50:d5:67:79:3b:81:79:
         cd:5e:37:dd:6b:78:d0:33:c7:36:d0:07:d2:18:be:82:77:92:
         99:c6:48:e6:23:7f:ce:a8:2f:9d:91:52:48:df:2d:bd:96:2b:
         c7:57:92:4f:69:80:1f:f9:84:29:b8:9b:a4:30:da:d2:a2:29:
         a4:ad:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:45 2025 by rpki-client