This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa
File:                     AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa (raw, json)
Hash identifier:          IO+N7lJMSFwuh89yHL6Fm/wq2e70cnS2owajXPspnmI=
Subject key identifier:   35:C3:64:7D:74:BD:E6:5B:C4:03:29:EA:55:47:DC:4A:D3:81:5F:CB
Certificate issuer:       /CN=F36B4C8AAF/serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
Certificate serial:       05
Authority key identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 09:36:15 +0000
ROA not before:           Fri 28 Nov 2025 09:36:08 +0000
ROA not after:            Mon 31 Dec 2035 09:36:08 +0000
asID:                     329667
IP address blocks:        102.206.40.0/22 maxlen: 24
                          2c0f:41a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4C8AAF, serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
        Validity
            Not Before: Nov 28 09:36:08 2025 GMT
            Not After : Dec 31 09:36:08 2035 GMT
        Subject: CN=69296d0f-2c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:b5:d9:cf:13:21:53:37:93:54:50:11:76:
                    69:6e:76:c5:36:16:7f:e0:c7:fb:3e:f9:88:56:af:
                    d4:b0:5e:c8:00:22:b0:e6:18:5b:70:96:0a:c7:e7:
                    a9:4d:82:e1:6f:fe:7a:ad:85:58:80:e4:ba:40:05:
                    0c:45:46:84:01:e5:7e:2c:3a:cb:97:38:9a:98:22:
                    fa:da:b2:c4:47:d7:64:88:1d:e6:95:1e:24:cf:7d:
                    d4:6b:f0:58:59:0f:d3:e6:56:1f:5b:1d:c0:6b:a2:
                    06:8a:22:72:33:97:28:96:f4:c3:4a:0a:9d:08:7f:
                    f8:2c:a7:38:d7:80:b7:c9:de:21:a3:c1:62:36:90:
                    20:7c:5e:13:02:ec:97:1a:8a:5b:1a:31:c4:2a:58:
                    8f:f8:53:3d:df:0c:d1:14:f3:15:a9:b4:4e:c6:34:
                    01:d4:2b:6c:3b:4f:5c:30:a3:b9:57:e8:3c:84:00:
                    c6:6f:5e:c0:5f:fb:4d:a6:c0:01:20:b2:45:aa:2a:
                    30:26:33:bb:c6:1e:b7:45:f0:9d:eb:f3:eb:ce:fe:
                    b9:c6:0c:ea:0e:6a:ae:4d:50:29:d1:0b:36:96:9b:
                    2f:f6:67:a6:19:ae:83:69:14:95:24:5c:ba:32:20:
                    69:3f:ec:a4:93:98:fe:2e:4a:0b:63:39:bb:6d:a5:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C3:64:7D:74:BD:E6:5B:C4:03:29:EA:55:47:DC:4A:D3:81:5F:CB
            X509v3 Authority Key Identifier:
                keyid:B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.40.0/22
                IPv6:
                  2c0f:41a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:d0:cd:e0:3d:e1:88:6c:c0:b5:aa:bc:f3:68:ff:e0:c1:
         bb:32:e8:69:25:c5:59:98:3b:56:aa:38:74:c6:4a:80:10:01:
         7b:ad:80:b8:2a:73:92:d3:e7:18:f8:96:e0:5c:09:7f:60:1f:
         bb:87:9a:12:85:40:61:0c:15:ce:5c:9e:a7:e1:c3:57:29:0a:
         ce:5e:09:fa:9e:b9:72:9c:50:0c:23:9a:ff:1b:61:72:1f:eb:
         b2:bc:68:f6:c5:0c:82:22:cd:96:e0:ed:01:4a:a5:0b:4c:b1:
         31:84:84:0f:a7:96:e1:4c:3d:b6:12:4c:3c:cc:95:04:d0:e2:
         ee:0c:25:bd:10:58:49:f2:04:e5:db:7a:ae:0b:b6:1c:13:9a:
         35:86:94:5c:87:b7:34:f1:87:ba:c3:e7:5a:e2:56:21:f2:a8:
         31:cc:59:1f:8c:ab:e5:d5:7f:54:bf:47:5f:df:1e:7f:09:56:
         4f:d9:90:c7:e1:36:8a:84:8a:0a:22:d6:5c:90:3a:c2:ad:ee:
         9f:25:b3:b9:63:c1:27:6b:8e:09:b7:30:a1:60:63:bb:87:f8:
         17:95:fc:98:a2:7c:cd:61:59:f8:39:b5:b0:13:9c:25:43:cb:
         9c:60:d0:15:a9:aa:ff:bc:ad:de:a9:4d:ed:43:d8:29:a7:be:
         52:28:f8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:43 2025 by rpki-client