This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/04EDE310BFC711F0A31BB5E6DAE4EC9C.roa
File:                     04EDE310BFC711F0A31BB5E6DAE4EC9C.roa (raw, json)
Hash identifier:          0QychqzlMIzWQM6dar4QBq1yYOt0ya+7aLt7+P0MnUM=
Subject key identifier:   51:1E:A7:7B:22:43:45:9B:7C:DE:2C:D0:2C:C7:C8:16:DE:67:B2:76
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       051B
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/04EDE310BFC711F0A31BB5E6DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 12:56:35 +0000
ROA not before:           Wed 12 Nov 2025 12:56:31 +0000
ROA not after:            Fri 30 Nov 2035 12:56:31 +0000
asID:                     328222
IP address blocks:        102.128.160.0/22 maxlen: 24
                          2c0f:7380::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
        Validity
            Not Before: Nov 12 12:56:31 2025 GMT
            Not After : Nov 30 12:56:31 2035 GMT
        Subject: CN=69148403-bcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:d1:bd:ce:fe:db:4d:c4:48:a1:47:b2:d4:
                    d7:7d:d3:79:c3:bf:21:48:6a:6b:9f:12:a8:73:b7:
                    11:04:ad:6b:14:16:d5:e7:1d:d9:44:01:85:2d:f7:
                    86:49:16:2c:79:a4:6d:c4:7f:16:7c:af:58:ee:34:
                    f0:0d:16:43:3e:30:0f:8a:06:11:d6:c9:c2:5f:3c:
                    86:a4:47:5c:62:91:1a:0d:d8:4e:75:02:b6:02:ab:
                    b0:be:7b:75:0b:b8:b9:1e:bb:53:92:6c:b6:32:57:
                    29:df:d0:ca:fe:0d:3b:66:78:fe:7d:ee:2c:5f:3b:
                    16:28:5e:ca:33:ca:60:75:a8:fd:9e:5d:c0:3a:a1:
                    f4:6b:29:dd:d1:db:d0:46:2f:a7:cd:4c:42:8e:17:
                    28:40:41:b6:ff:dc:4d:c4:c0:5f:5a:e7:9e:29:27:
                    e5:66:ba:98:41:73:0c:ce:d0:8c:f6:63:e7:ea:0f:
                    58:e1:b3:1d:41:07:fd:f4:85:b4:50:a9:3a:2a:82:
                    57:6c:9b:49:83:a4:b2:28:61:97:fd:ff:de:08:13:
                    59:39:a0:65:32:43:f5:f4:ff:5a:6e:b8:d7:ad:ff:
                    c6:e9:97:4e:48:2c:5c:dd:c9:11:db:b7:01:f6:31:
                    95:87:cd:23:d0:6f:6f:07:4e:5e:ee:e6:07:7c:e0:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:A7:7B:22:43:45:9B:7C:DE:2C:D0:2C:C7:C8:16:DE:67:B2:76
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/04EDE310BFC711F0A31BB5E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.128.160.0/22
                IPv6:
                  2c0f:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:29:df:b5:60:15:55:fb:d4:ce:13:da:30:ad:96:b6:ea:
         50:d7:36:b4:05:7b:f6:15:e9:69:a9:68:d5:a7:86:cf:5d:01:
         47:22:91:98:06:52:34:11:8d:bd:30:f5:b3:13:dc:d0:85:33:
         66:bf:8d:33:89:4f:24:29:42:d5:5c:75:75:b2:4f:99:39:38:
         67:4e:20:5f:40:3b:ba:f3:f2:cd:0e:d5:c3:6b:51:6a:96:c3:
         f3:7b:92:7f:47:4e:2e:7c:cb:8e:6e:ed:17:8c:47:40:11:2c:
         37:55:79:4e:c2:95:a4:b2:be:72:fd:3a:8f:f0:9b:1f:e5:5c:
         41:be:f7:e1:d4:f4:1a:b4:eb:aa:8d:36:47:04:5c:6e:40:2a:
         a5:74:c2:7d:8e:e6:9c:6f:f2:62:87:f7:79:c0:82:50:a1:46:
         67:2a:8c:31:56:8b:b1:36:6d:17:a5:01:56:14:7d:f3:d8:15:
         7d:63:cf:b4:e6:f4:10:ca:00:3d:eb:1b:e6:25:c4:10:bd:80:
         ac:c8:47:16:83:49:61:65:da:6d:f5:c7:11:ff:4c:61:f4:ac:
         83:a0:db:f0:2a:d5:9c:69:40:89:2e:8b:67:d9:28:59:16:ab:
         80:3d:33:86:ea:9f:8f:42:80:3b:c8:59:09:07:60:a6:31:5f:
         77:c1:99:ae
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBRswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJBNjdBRjExMC8GA1UEBRMoRTQ2N0Q0QjIyM0MwODE1NDBBOTFGMjExN0Q2RTU0
OEExQjgyODlFQzAeFw0yNTExMTIxMjU2MzFaFw0zNTExMzAxMjU2MzFaMBgxFjAU
BgNVBAMTDTY5MTQ4NDAzLWJjZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+lNG9zv7bTcRIoUey1Nd903nDvyFIamufEqhztxEErWsUFtXnHdlEAYUt
94ZJFix5pG3EfxZ8r1juNPANFkM+MA+KBhHWycJfPIakR1xikRoN2E51ArYCq7C+
e3ULuLkeu1OSbLYyVynf0Mr+DTtmeP597ixfOxYoXsozymB1qP2eXcA6ofRrKd3R
29BGL6fNTEKOFyhAQbb/3E3EwF9a554pJ+VmuphBcwzO0Iz2Y+fqD1jhsx1BB/30
hbRQqToqgldsm0mDpLIoYZf9/94IE1k5oGUyQ/X0/1puuNet/8bpl05ILFzdyRHb
twH2MZWHzSPQb28HTl7u5gd84PfpAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUUR6n
eyJDRZt83izQLMfIFt5nsnYwHwYDVR0jBBgwFoAU5GfUsiPAgVQKkfIRfW5UihuC
iewwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQTY3L0IyMDA5MUNFRTI2NzExRUNCQzgxM0ZBNUYxMjIyNDY4LzVHZlVz
aVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVHZlVzaVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkRCQTY3L0IyMDA5MUNFRTI2NzExRUNCQzgxM0ZBNUYx
MjIyNDY4LzA0RURFMzEwQkZDNzExRjBBMzFCQjVFNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJmgKAwDQQCAAIwBwMFACwP
c4AwDQYJKoZIhvcNAQELBQADggEBABGmKd+1YBVV+9TOE9owrZa26lDXNrQFe/YV
6WmpaNWnhs9dAUcikZgGUjQRjb0w9bMT3NCFM2a/jTOJTyQpQtVcdXWyT5k5OGdO
IF9AO7rz8s0O1cNrUWqWw/N7kn9HTi58y45u7ReMR0ARLDdVeU7ClaSyvnL9Oo/w
mx/lXEG+9+HU9Bq066qNNkcEXG5AKqV0wn2O5pxv8mKH93nAglChRmcqjDFWi7E2
bRelAVYUffPYFX1jz7Tm9BDKAD3rG+YlxBC9gKzIRxaDSWFl2m31xxH/TGH0rIOg
2/Aq1ZxpQIkui2fZKFkWq4A9M4bqn49CgDvIWQkHYKYxX3fBma4=
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:43 2025 by rpki-client