This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/8AE0C950CC5211F08901D0F0DAE4EC9C.roa
File:                     8AE0C950CC5211F08901D0F0DAE4EC9C.roa (raw, json)
Hash identifier:          p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=
Subject key identifier:   FA:AA:51:D4:59:0E:3E:81:5F:5D:F3:A4:51:49:93:C1:AD:56:8A:8F
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       0210
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/8AE0C950CC5211F08901D0F0DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 12:05:34 +0000
ROA not before:           Fri 28 Nov 2025 12:05:29 +0000
ROA not after:            Thu 01 Nov 2035 12:05:29 +0000
asID:                     329255
IP address blocks:        102.204.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 10 Dec 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Nov 28 12:05:29 2025 GMT
            Not After : Nov  1 12:05:29 2035 GMT
        Subject: CN=6929900e-455e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:56:e1:b2:0b:3f:5a:a4:8b:58:26:ec:e6:
                    32:20:3e:a2:f8:7d:8d:cd:2b:82:cc:d7:f4:e2:a0:
                    59:47:5a:f7:5e:e9:62:20:6c:8f:a9:91:67:3d:be:
                    b4:07:d0:ab:f9:a3:7c:58:64:c3:1b:f8:73:f5:e7:
                    f7:fb:96:24:ce:2f:53:19:72:aa:b5:ee:a1:06:4a:
                    c8:d0:b4:8d:b0:1e:36:2b:f9:c1:b4:f8:c0:55:ac:
                    82:ce:78:93:3d:31:03:8b:fd:fe:c4:2e:cf:33:d2:
                    d7:57:3c:02:f7:f5:f7:92:72:8d:ac:82:86:91:18:
                    a2:18:fa:f3:5d:5b:33:30:fb:c4:55:e0:2b:bf:8f:
                    c0:dd:92:b3:d8:f6:34:29:d5:b6:7f:fc:9c:d0:2a:
                    30:6e:2c:3b:8a:ab:52:39:72:d8:96:1e:aa:f8:a1:
                    38:2f:ac:dd:c5:ff:ec:2e:b8:64:33:f6:45:a9:92:
                    d0:28:5a:ca:17:df:45:6a:9d:a0:61:f2:01:d8:59:
                    91:c2:a8:44:cf:5b:fe:74:ee:e8:6e:0b:c7:d3:e6:
                    11:db:ab:84:97:15:f5:21:c5:1b:1f:76:1e:c4:3d:
                    9f:e4:32:78:2f:48:2f:b2:e7:af:42:32:2e:24:d0:
                    1d:52:97:5b:c8:0d:20:b2:23:e3:6f:a7:2e:b2:2a:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:51:D4:59:0E:3E:81:5F:5D:F3:A4:51:49:93:C1:AD:56:8A:8F
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/8AE0C950CC5211F08901D0F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:d2:1c:41:0c:5e:49:1e:12:b4:13:d8:12:f8:59:1d:3d:
         eb:de:1d:2a:d4:1d:27:f4:19:be:c6:58:22:6e:64:4a:ae:77:
         d4:fa:e8:7e:8b:4d:0e:40:5d:e4:a6:59:e8:9d:c8:d8:1f:f4:
         3c:bd:8d:f9:f4:b9:b5:1e:62:a2:f6:fc:d1:d1:c8:e8:83:92:
         fd:5b:a9:24:75:1d:b7:ee:25:0f:38:3f:2f:9e:72:f7:07:4b:
         2e:45:ba:7a:2d:30:50:4a:d4:b6:cc:be:04:a3:da:1d:19:8c:
         cc:58:af:c3:91:4f:2d:a1:3e:a2:8c:b4:f2:4c:2f:f7:af:27:
         d8:07:6f:e4:b4:01:71:d9:79:0d:d3:fd:98:b5:ca:5a:91:a6:
         9d:9a:05:f2:8c:fb:bc:cc:14:b3:59:25:b7:11:77:17:50:65:
         9c:88:7a:03:08:39:7a:b9:e5:79:75:45:bd:4d:fb:b4:4b:ba:
         a3:9a:0a:c1:74:4e:b5:18:f8:48:29:01:96:54:ad:1c:0d:b6:
         76:c3:f0:c3:a3:71:2a:a7:e5:12:68:76:68:88:44:4f:fd:91:
         36:d1:97:88:fb:4a:e1:b0:a4:35:3b:c0:ad:a5:a6:fd:63:c5:
         b7:85:e3:50:1c:86:4e:af:fd:0c:82:d1:86:e7:be:23:47:28:
         5c:ae:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 17:57:33 2025 by rpki-client