This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/69476336CAEE11F0ABCE7AB4DAE4EC9C.roa
File:                     69476336CAEE11F0ABCE7AB4DAE4EC9C.roa (raw, json)
Hash identifier:          5BUw9Og015RzSDd9hS2lT+zZA0Db6TzIJBBeE7d3i/g=
Subject key identifier:   55:B6:3D:86:2F:A2:39:68:E9:DF:F2:F5:DC:74:4B:5E:32:9F:0A:B4
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       06D0
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/69476336CAEE11F0ABCE7AB4DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 17:36:17 +0000
ROA not before:           Wed 26 Nov 2025 17:36:12 +0000
ROA not after:            Mon 26 Nov 2035 17:36:12 +0000
asID:                     37645
IP address blocks:        102.203.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1744 (0x6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Nov 26 17:36:12 2025 GMT
            Not After : Nov 26 17:36:12 2035 GMT
        Subject: CN=69273a91-94cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:f0:6d:3b:40:74:28:81:9c:f7:05:be:56:
                    d8:cb:39:62:8f:37:96:1b:c9:fa:22:b8:be:df:84:
                    88:cf:8d:91:42:aa:83:04:44:63:38:fc:57:48:90:
                    ca:de:50:25:44:9b:ca:9d:f1:5e:b8:f8:d0:fe:28:
                    87:b9:8d:b9:1a:47:29:25:01:75:a3:52:ef:c1:11:
                    b4:c6:52:36:50:03:b8:88:89:d2:de:74:7d:ae:bb:
                    ee:eb:e4:3d:b2:61:33:d3:6f:8e:c8:d2:88:a3:15:
                    3d:91:7d:fc:f6:a0:fb:25:a4:6f:f4:47:22:72:f0:
                    6c:4a:db:94:6e:54:97:c7:44:46:1f:b0:24:1c:a7:
                    50:71:e0:8c:0e:66:ee:c0:63:99:ae:ab:09:37:34:
                    b1:13:89:98:ba:2b:8b:a7:0f:c1:d4:bb:19:34:aa:
                    9c:60:9b:e7:26:e9:2c:19:55:25:0a:de:0e:fc:2e:
                    5f:2b:50:db:7f:9d:27:47:ca:e0:fb:dc:a2:d1:b0:
                    6b:b4:0a:2e:1c:6e:86:93:5d:3d:ae:e2:c7:d0:f1:
                    78:45:d8:f1:a4:b0:31:71:e9:ef:fc:2a:2d:7e:75:
                    03:31:b9:69:3e:95:0c:f1:a9:ae:49:48:50:c4:84:
                    12:0b:c1:1e:eb:ac:2f:c0:0e:21:c9:53:8a:5a:44:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:3D:86:2F:A2:39:68:E9:DF:F2:F5:DC:74:4B:5E:32:9F:0A:B4
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/69476336CAEE11F0ABCE7AB4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:d6:15:d3:99:bf:78:de:ac:6a:f1:58:df:d2:89:92:4f:
         9f:73:3c:aa:41:39:32:4c:fb:a4:c8:cf:e4:df:d7:69:f9:e3:
         55:cc:7b:2e:11:0a:fb:4c:9c:21:03:c5:01:3a:e0:06:44:ef:
         c5:28:62:01:80:f3:28:a5:dd:02:e0:75:05:0e:34:8a:0e:af:
         25:56:f4:e9:eb:28:7c:e3:94:b7:b5:ff:fb:49:85:dd:d6:7c:
         d5:3c:70:dc:2a:bc:34:bf:a9:c6:f3:59:18:58:7e:f5:6f:22:
         5a:20:46:c8:f0:d0:de:ea:ac:6c:c1:a3:35:e1:33:f6:cb:c3:
         6a:f6:f3:22:56:c4:18:bb:1c:5b:04:60:77:cc:03:9c:58:ee:
         76:0b:8b:a2:fb:2c:2e:38:7a:38:c3:2b:25:b8:29:69:48:f4:
         bb:b8:2d:be:7f:1d:e6:23:d7:a7:31:fd:de:f4:c4:d7:15:b4:
         a6:66:2b:a8:78:cd:00:19:24:6c:c8:7c:7c:aa:99:61:4a:c8:
         59:fa:39:70:57:49:d2:27:05:36:9b:43:a3:77:8b:cb:b9:0c:
         47:d7:b2:b2:f6:b0:af:0a:a5:aa:ac:fb:fe:06:b1:61:91:12:
         03:0d:5a:3f:f8:56:f5:f5:ee:1e:0c:08:21:1c:c9:61:d8:19:
         cb:56:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:12:07 2025 by rpki-client