This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa
File:                     F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (raw, json)
Hash identifier:          dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=
Subject key identifier:   1F:4E:20:EE:B2:72:8C:14:8A:5F:F7:1A:4E:BE:AA:00:B6:B7:8A:CF
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       02
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 09:52:32 +0000
ROA not before:           Thu 04 Dec 2025 09:52:25 +0000
ROA not after:            Wed 04 Dec 2030 09:52:25 +0000
asID:                     24863
IP address blocks:        41.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 00:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Dec  4 09:52:25 2025 GMT
            Not After : Dec  4 09:52:25 2030 GMT
        Subject: CN=693159e0-746f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:35:96:96:74:1d:da:31:c7:55:9e:36:a9:
                    38:fb:36:d7:ff:8e:8d:08:14:d3:1a:fc:a4:f4:27:
                    4a:b3:78:af:57:58:f9:54:ed:26:e9:10:2a:ca:d6:
                    f6:b9:41:32:da:7c:7e:a2:8c:12:e9:ec:64:a2:a5:
                    16:f9:2b:79:87:7b:0b:56:1c:a1:88:98:c2:da:b7:
                    d2:c6:2f:13:64:2c:86:78:2e:e3:40:c1:b3:77:4e:
                    33:82:47:19:85:34:09:a8:d5:f8:1b:31:84:54:44:
                    74:33:8b:18:8b:98:85:81:45:bf:a5:2c:b6:b6:6e:
                    fd:f8:6e:da:3f:09:a0:f6:8d:f3:f1:20:c3:50:f5:
                    71:fc:f3:47:45:32:5f:07:6d:0d:ce:59:af:ca:dd:
                    c5:18:01:70:19:ff:90:a2:17:c9:64:e4:5b:90:c2:
                    25:16:76:3e:f3:a5:17:4d:9b:86:78:12:4c:67:02:
                    e0:64:60:e3:e1:62:df:e7:d3:99:04:e6:b4:17:27:
                    ee:89:12:c1:84:50:59:1d:16:c5:ac:53:9b:5a:a2:
                    ac:58:40:83:70:9e:37:68:11:cf:34:a8:91:93:5f:
                    b4:cb:e9:a7:45:7b:d4:dc:7e:fe:29:f6:02:01:bd:
                    a8:d2:2e:cc:61:4e:5c:53:a3:22:67:dc:df:09:ed:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:20:EE:B2:72:8C:14:8A:5F:F7:1A:4E:BE:AA:00:B6:B7:8A:CF
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:74:fe:f7:a4:2b:61:a3:1b:6a:01:56:d6:ec:4d:03:e4:
         6d:a8:22:3e:2c:bb:4d:80:30:52:c3:b0:19:0b:48:11:48:b6:
         5c:b3:03:41:1e:5e:b6:1c:ef:1d:69:d5:ed:d1:94:a4:5e:bf:
         f7:86:c5:4d:48:51:df:c7:3a:5f:27:f2:01:69:81:88:a8:b4:
         95:fb:3f:e3:57:93:26:c4:d1:ff:1c:c5:c4:38:a5:76:bd:6d:
         5e:84:d1:ab:8a:cd:ea:27:74:b3:53:c8:62:7c:6c:e2:e5:cf:
         d2:1a:87:84:3f:10:bd:62:8f:67:dd:a4:8b:45:51:67:d9:cb:
         b9:4f:e8:9a:31:67:a8:3e:a8:a4:f7:fc:64:2d:b1:4b:07:15:
         89:20:26:6f:e5:8e:db:b5:7e:f4:b1:5b:66:65:fc:06:b6:22:
         6b:e8:e2:7d:37:6f:48:dd:cc:07:6a:52:47:d3:b3:84:e4:31:
         3b:c7:72:18:db:c0:80:5d:9a:ae:b0:6e:a8:7f:93:55:29:49:
         44:26:42:d9:b9:f5:63:7d:df:d1:dd:6d:c5:81:85:36:6b:05:
         83:73:8b:bf:d5:15:3a:ee:74:8c:e7:6a:31:c2:d2:71:97:27:
         29:e3:4a:c8:5e:84:c1:f2:40:4f:a3:c2:03:4e:c5:da:d5:89:
         13:3d:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:32:43 2025 by rpki-client