This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa
File:                     B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (raw, json)
Hash identifier:          EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=
Subject key identifier:   8E:2A:D3:BB:D1:B1:97:B8:27:4C:86:59:F9:1C:55:7B:89:9D:12:7A
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       09
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa
Signing time:             Sun 07 Dec 2025 09:11:31 +0000
ROA not before:           Sun 07 Dec 2025 09:11:26 +0000
ROA not after:            Wed 04 Dec 2030 09:11:26 +0000
asID:                     24863
IP address blocks:        197.160.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 09:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Dec  7 09:11:26 2025 GMT
            Not After : Dec  4 09:11:26 2030 GMT
        Subject: CN=693544c3-1a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:46:ba:f2:0f:52:a0:4c:e4:86:a9:64:21:
                    7c:67:20:62:4d:59:a5:90:6e:9c:4a:09:9d:ad:52:
                    8c:6a:20:6a:35:4d:3f:46:f5:a2:f2:10:5e:02:a3:
                    10:e0:b0:d5:1a:da:e3:81:5b:a1:8f:2e:79:c0:fd:
                    bd:2d:fd:60:d1:39:6e:d3:78:ef:6c:c8:2e:fb:7d:
                    06:6e:f1:d9:75:c9:25:a3:21:5a:50:e5:f7:39:24:
                    60:aa:2a:19:07:a5:2e:75:23:72:ee:b4:3b:eb:0f:
                    56:df:20:98:54:8d:d4:24:d9:3a:07:ab:37:f1:7d:
                    25:4a:df:93:2f:0e:47:9f:1c:56:7b:fe:e1:d7:7c:
                    c8:81:7e:a7:7e:c0:7e:48:a3:a0:ac:75:22:a8:1d:
                    c3:03:f2:da:69:6e:7e:46:28:e7:54:29:b7:09:77:
                    9c:06:5a:c9:53:90:45:c8:58:b8:95:3e:16:55:ac:
                    d3:05:8f:ca:97:cc:ca:b9:00:65:b3:d0:97:d5:e2:
                    ce:0e:1c:3f:56:13:fc:e4:0c:07:1c:67:0b:df:eb:
                    34:38:ea:1a:4a:a4:bf:d1:86:e9:cb:a2:56:8c:96:
                    59:59:70:0b:3c:9d:a4:1a:c0:8c:44:b7:d8:06:60:
                    d2:2d:8f:59:e7:1a:cc:6d:91:aa:7d:1a:34:be:7e:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:D3:BB:D1:B1:97:B8:27:4C:86:59:F9:1C:55:7B:89:9D:12:7A
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:cc:2c:ce:0c:f3:af:b9:06:72:4b:fa:c2:da:84:c5:f8:
         64:48:bb:03:d1:49:9c:a7:d6:fd:dc:01:81:f6:dc:50:8e:57:
         27:92:e7:d0:c5:7d:a7:60:23:78:35:bd:55:78:12:20:38:cb:
         b9:e4:a6:32:e9:d6:ae:25:b3:c5:aa:f7:7c:80:ad:71:ef:cf:
         45:00:56:ab:02:a1:69:12:00:3e:59:32:46:10:93:86:15:f0:
         24:96:36:42:30:3c:db:c7:5b:d0:7e:0e:28:f8:ab:cb:eb:53:
         d1:91:94:20:72:a1:0e:06:cf:3c:83:72:d9:0a:34:6e:1e:63:
         c5:4e:51:cb:da:a7:17:53:cb:2c:80:df:5d:20:eb:28:d5:8e:
         51:7b:5e:ed:10:36:69:8a:06:79:d1:51:b5:93:53:62:50:00:
         c0:89:a8:ad:71:30:d5:9d:93:e6:64:72:26:52:89:5a:b8:d1:
         0c:da:dc:c2:0e:34:96:8f:31:f4:ad:a9:8f:ff:42:3f:da:e4:
         c0:9e:a2:de:4e:d4:59:8d:f6:85:a4:4f:1a:ae:65:03:a8:6c:
         29:1c:ea:f2:0d:84:6a:e4:ee:2a:3c:27:a9:5c:06:36:d0:77:
         ea:87:fe:48:5c:e2:2d:1f:11:38:89:cb:b6:5f:c6:69:d6:08:
         8e:6e:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:38:21 2025 by rpki-client