This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DF1A6ECECFC011F0843980E5DAE4EC9C.roa
File:                     DF1A6ECECFC011F0843980E5DAE4EC9C.roa (raw, json)
Hash identifier:          fJ2Assom6xEyn6/GNf5ic5qBOI+igUkackrjUbv3A/c=
Subject key identifier:   7F:57:D8:CD:2B:0F:DE:52:FC:EB:93:8E:38:DF:AE:41:F4:A3:82:A7
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       043D
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DF1A6ECECFC011F0843980E5DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 20:52:53 +0000
ROA not before:           Tue 02 Dec 2025 20:52:49 +0000
ROA not after:            Mon 02 Dec 2030 20:52:49 +0000
asID:                     834
IP address blocks:        102.211.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Dec  2 20:52:49 2025 GMT
            Not After : Dec  2 20:52:49 2030 GMT
        Subject: CN=692f51a5-d0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:c2:9e:72:e1:a9:98:16:aa:35:d5:62:65:
                    99:4a:0b:84:b1:9f:ba:ff:0a:b8:16:f8:3c:64:64:
                    ba:c0:ca:06:dd:88:78:16:d3:e5:ae:21:fe:98:b5:
                    d4:4d:a1:ce:3e:4f:50:e8:88:39:8f:6b:3b:e9:05:
                    af:0a:dc:74:1c:c4:b7:31:35:0d:26:88:cd:1c:2f:
                    f2:01:45:08:d9:80:84:a7:36:f7:61:11:63:e7:05:
                    5c:90:9d:d5:e6:4a:a9:8b:aa:0c:a9:68:ca:b6:0c:
                    7d:51:de:2c:3a:c7:9b:a2:b7:da:09:76:ac:45:25:
                    68:41:f5:0b:50:09:98:f8:27:c1:cc:48:76:7f:57:
                    52:77:5a:d8:df:d0:48:73:0a:ee:24:90:38:73:b9:
                    c5:50:2f:cf:e6:e0:c0:db:8f:05:72:2e:fe:db:bb:
                    3b:25:21:1b:6d:32:5f:21:1c:0f:4b:fc:30:b5:a4:
                    89:df:b0:51:a8:18:50:10:55:6c:3f:d9:91:66:b5:
                    67:24:36:b9:74:07:cd:04:96:f1:3a:6f:5a:c9:3d:
                    d3:67:86:2e:65:64:86:6c:9f:21:d2:9d:5e:6e:a7:
                    b8:ab:a1:32:0b:9a:3a:3e:a6:e0:4c:20:97:9d:2b:
                    49:ee:8e:f3:39:97:64:d5:2c:3f:e7:52:99:1f:fa:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:57:D8:CD:2B:0F:DE:52:FC:EB:93:8E:38:DF:AE:41:F4:A3:82:A7
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/DF1A6ECECFC011F0843980E5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:42:48:30:28:f9:89:22:b3:cb:42:45:b9:74:2d:5a:63:
         dd:00:2e:a8:26:98:e9:63:ac:8f:fb:f2:3d:43:ce:b3:cb:2b:
         24:e0:30:bb:e2:06:09:3c:8e:b1:74:0c:0f:a4:51:27:97:ba:
         3b:d5:f5:57:d0:84:9c:3a:b7:70:4d:9e:e6:1b:45:95:03:b7:
         d9:cb:30:57:bc:74:8a:a5:ac:61:15:fd:87:55:34:0f:6b:e0:
         54:fa:32:ca:50:56:99:b2:68:a2:86:d2:d0:60:50:56:f3:d1:
         34:d9:ec:b0:a7:6b:aa:12:89:ec:37:e7:e9:5d:f5:85:f2:d8:
         4c:fc:e5:3e:99:62:15:ae:a3:94:bb:f9:85:68:f7:05:3c:ac:
         ff:68:1d:b7:23:c0:36:86:91:e8:07:02:b6:00:34:f9:95:30:
         0c:45:c0:9c:59:69:09:1e:44:59:bd:85:41:f9:1f:70:1d:ad:
         13:3b:7b:95:a3:23:8e:0e:ad:84:d2:d1:40:bc:3f:dd:1c:10:
         c9:af:42:29:31:f5:54:94:6c:0b:c2:ce:76:30:58:2f:21:cf:
         23:07:f4:8a:27:36:16:46:05:9a:88:86:83:56:89:d9:fa:82:
         7a:03:7b:dd:65:40:8e:f5:49:02:59:1e:64:20:c0:0a:f7:02:
         f8:e7:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:42:07 2025 by rpki-client