This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/45DD78D8C52E11F08D363A8DDAE4EC9C.roa
File:                     45DD78D8C52E11F08D363A8DDAE4EC9C.roa (raw, json)
Hash identifier:          yfdoYAwEYWo4igb+kX7l8vEmL7IfitH9Vwqq7einS1w=
Subject key identifier:   20:07:B0:E7:10:30:C4:EC:19:F5:22:6C:DD:52:CF:02:DA:9F:B9:BB
Certificate issuer:       /CN=F362D462AF/serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Certificate serial:       0B
Authority key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/45DD78D8C52E11F08D363A8DDAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 09:58:18 +0000
ROA not before:           Wed 19 Nov 2025 09:58:03 +0000
ROA not after:            Mon 19 Nov 2035 09:58:03 +0000
asID:                     37506
IP address blocks:        41.220.80.0/20 maxlen: 20
                          197.148.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 05:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
        Validity
            Not Before: Nov 19 09:58:03 2025 GMT
            Not After : Nov 19 09:58:03 2035 GMT
        Subject: CN=691d94ba-0f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:6b:c8:cc:7d:d6:53:20:48:9a:ba:b7:e6:
                    b0:9d:1a:da:c2:c9:f4:fa:cb:da:00:ba:9f:c2:e6:
                    cc:ff:43:90:bb:5a:7d:8c:04:62:2f:54:d7:c7:e0:
                    cd:9e:51:d1:42:0a:85:40:8d:31:56:a9:60:95:f5:
                    2c:18:8e:2a:90:ff:48:0e:00:89:ab:f5:43:b8:a8:
                    db:a4:40:b9:f0:6a:bc:69:8d:c6:10:5e:fc:74:bb:
                    f8:9e:b6:e2:da:8a:03:cd:16:1f:2c:77:95:77:f5:
                    26:ba:f4:39:e6:4e:1c:63:e4:e3:8d:0c:cf:53:08:
                    bc:69:05:8c:0d:c2:57:41:15:a5:ad:1c:0b:11:e3:
                    07:86:85:b5:3a:8e:16:f3:db:38:c0:aa:95:1d:37:
                    8f:0c:f6:6a:c8:7f:5b:41:40:25:3f:84:43:91:ea:
                    28:78:38:79:3e:57:62:9a:60:33:a9:37:f3:80:b7:
                    91:7d:b7:19:b0:03:9f:18:4a:da:98:67:b5:bf:07:
                    9c:ee:47:57:6f:7e:16:34:c3:7f:35:b9:b1:4e:22:
                    6f:b7:d6:7c:0d:82:c4:f5:66:65:cd:27:d1:40:75:
                    00:c3:be:39:98:10:89:af:06:1d:76:2f:cf:cf:43:
                    1c:1a:2a:cf:1e:7c:6c:e8:3d:35:8a:54:0d:8d:87:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:07:B0:E7:10:30:C4:EC:19:F5:22:6C:DD:52:CF:02:DA:9F:B9:BB
            X509v3 Authority Key Identifier:
                keyid:F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/45DD78D8C52E11F08D363A8DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.220.80.0/20
                  197.148.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:dd:7b:2a:32:08:3b:5f:83:c0:ed:c7:33:5b:e3:c8:04:
         09:6f:1a:2f:50:71:3b:9e:fc:44:5c:54:7d:a7:1a:7a:ca:a2:
         fc:08:28:e6:f9:a1:7e:ca:a3:9f:ea:27:ac:f7:13:23:c1:cf:
         25:b2:9d:bd:62:ed:09:07:36:a8:35:b0:39:93:88:44:15:e7:
         93:8b:40:94:33:1e:3e:69:ec:0c:13:35:6f:af:79:c7:e1:e8:
         52:dd:1d:bb:1c:c2:83:00:8b:99:0d:1f:86:6a:35:d1:d2:c6:
         00:09:c2:ae:d9:86:cc:dc:4e:bb:23:fe:3b:8a:d8:3f:bf:70:
         e3:da:08:04:25:4d:83:67:27:04:d9:b5:9a:aa:f4:2f:46:12:
         62:f2:37:81:3c:af:dc:d6:36:87:83:6a:88:cf:10:a8:58:54:
         de:74:a4:da:c5:bd:f7:12:aa:22:c9:6c:dc:09:95:2a:07:ab:
         01:3f:9a:dd:53:96:75:3d:18:e1:9c:b8:0c:e6:40:9b:08:55:
         0b:91:31:08:0b:9b:f3:d7:99:1b:ab:91:ce:35:4d:f3:df:61:
         ec:08:4d:cb:a9:6b:c0:2e:c0:7b:51:d4:39:bb:af:49:41:ce:
         b0:60:8e:72:ee:76:37:9e:d7:95:9b:af:fc:d0:b7:7e:b9:3b:
         c8:95:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:44:15 2025 by rpki-client