This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1758C9F2DFCA11F0B3625488DAE4EC9C.roa
File:                     1758C9F2DFCA11F0B3625488DAE4EC9C.roa (raw, json)
Hash identifier:          VfPcaZnejFWg2X8rgXvRWzAt1S8d2DieSOX2vUgeirc=
Subject key identifier:   AE:BA:67:EE:31:6A:52:79:1D:CC:F8:DC:0B:AD:2F:2F:7A:5F:22:3A
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0FF0
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1758C9F2DFCA11F0B3625488DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 06:39:12 +0000
ROA not before:           Tue 23 Dec 2025 06:39:07 +0000
ROA not after:            Wed 23 Dec 2026 06:39:07 +0000
asID:                     401838
IP address blocks:        102.135.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Jan 2026 02:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4080 (0xff0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Dec 23 06:39:07 2025 GMT
            Not After : Dec 23 06:39:07 2026 GMT
        Subject: CN=694a3910-cf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:01:9b:17:33:22:65:86:66:30:60:61:cf:
                    0f:0d:b9:72:db:d2:4b:63:15:9f:b3:79:1e:85:e8:
                    37:64:be:8e:f1:c5:b5:09:a7:33:45:f1:b2:dc:44:
                    45:7b:79:09:3c:21:cf:79:d5:f9:dd:9a:77:71:16:
                    3c:41:00:4a:f5:da:63:cc:a4:ba:16:93:6b:5a:a3:
                    a2:01:64:46:b7:10:80:dd:36:88:11:58:b3:51:03:
                    56:79:d2:14:32:2b:f0:74:1d:0a:8f:5c:54:7f:c5:
                    32:a8:17:e4:54:5e:ea:b7:41:97:39:b2:18:fa:c3:
                    8a:d1:27:48:a0:23:45:97:c8:86:56:7c:f8:79:dd:
                    1f:b5:d2:8e:32:c6:fc:21:c1:77:53:e6:70:db:56:
                    1a:97:ff:e1:fa:37:0a:bc:c7:29:00:be:cb:ba:31:
                    2a:f0:ef:b9:43:ca:30:5e:e5:05:38:a1:70:b7:7b:
                    b0:9a:82:47:08:24:86:e4:15:12:67:a5:70:fb:67:
                    83:f3:4f:35:4b:a5:5b:ca:50:83:ef:33:62:43:61:
                    50:29:42:c9:b3:27:a1:e1:8e:9d:8d:59:7e:67:0c:
                    12:fc:50:b5:de:e6:e6:2e:cc:0b:c2:90:39:50:76:
                    ac:99:64:0b:0a:5a:f8:52:95:fd:11:ad:01:75:c4:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BA:67:EE:31:6A:52:79:1D:CC:F8:DC:0B:AD:2F:2F:7A:5F:22:3A
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/1758C9F2DFCA11F0B3625488DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:11:b8:71:ab:ca:45:f0:e3:cc:48:b6:6e:28:d7:98:b3:
         9b:5e:61:7b:9c:31:14:e0:06:59:7b:69:e2:13:54:2f:f4:fe:
         ca:8a:cd:43:dc:e2:f1:43:29:13:96:73:22:58:72:2b:58:10:
         f9:71:09:3b:22:3c:6b:ab:44:8e:87:19:38:8c:c0:f6:5a:a2:
         28:5c:0d:69:ab:9c:4a:d5:6b:fc:99:b4:e6:45:17:2e:c3:86:
         a5:e2:1e:c1:aa:6d:89:d0:b6:88:d3:ae:22:54:b4:f5:a3:df:
         ec:59:8f:3a:79:a9:7e:8b:e2:ba:6a:33:11:08:72:6d:2f:52:
         86:ee:ee:92:d9:9f:4a:67:7a:ea:b3:04:c4:e0:53:30:9c:19:
         cd:a2:fa:d2:47:86:53:67:ef:1e:06:87:66:9e:42:ab:b4:23:
         0c:0f:a1:0f:ce:33:63:51:09:a8:cf:5d:87:cd:ba:8f:61:28:
         73:95:40:92:9b:2c:e0:80:97:7a:6c:a0:be:c0:e9:73:02:3c:
         60:67:93:6d:1b:04:bc:17:f1:86:5a:39:0d:44:2c:86:68:f9:
         31:8a:b0:1e:4c:b6:87:f5:64:57:08:33:2e:0a:c2:b9:76:f3:
         e1:4d:28:b8:9e:76:11:41:f2:cd:b0:3d:aa:78:29:92:e7:fc:
         bf:08:ab:96
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD/AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEyMjMwNjM5MDdaFw0yNjEyMjMwNjM5MDdaMBgxFjAU
BgNVBAMTDTY5NGEzOTEwLWNmNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwaQGbFzMiZYZmMGBhzw8NuXLb0ktjFZ+zeR6F6Ddkvo7xxbUJpzNF8bLc
REV7eQk8Ic951fndmndxFjxBAEr12mPMpLoWk2tao6IBZEa3EIDdNogRWLNRA1Z5
0hQyK/B0HQqPXFR/xTKoF+RUXuq3QZc5shj6w4rRJ0igI0WXyIZWfPh53R+10o4y
xvwhwXdT5nDbVhqX/+H6Nwq8xykAvsu6MSrw77lDyjBe5QU4oXC3e7CagkcIJIbk
FRJnpXD7Z4PzTzVLpVvKUIPvM2JDYVApQsmzJ6Hhjp2NWX5nDBL8ULXe5uYuzAvC
kDlQdqyZZAsKWvhSlf0RrQF1xAvrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrrpn
7jFqUnkdzPjcC60vL3pfIjowHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3LzE3NThDOUYyREZDQTExRjBCMzYyNTQ4OERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmhxcwDQYJKoZIhvcNAQEL
BQADggEBACW6Ebhxq8pF8OPMSLZuKNeYs5teYXucMRTgBll7aeITVC/0/sqKzUPc
4vFDKROWcyJYcitYEPlxCTsiPGurRI6HGTiMwPZaoihcDWmrnErVa/yZtOZFFy7D
hqXiHsGqbYnQtojTriJUtPWj3+xZjzp5qX6L4rpqMxEIcm0vUobu7pLZn0pneuqz
BMTgUzCcGc2i+tJHhlNn7x4Gh2aeQqu0IwwPoQ/OM2NRCajPXYfNuo9hKHOVQJKb
LOCAl3psoL7A6XMCPGBnk20bBLwX8YZaOQ1ELIZo+TGKsB5Mtof1ZFcIMy4Kwrl2
8+FNKLiedhFB8s2wPap4KZLn/L8Iq5Y=
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:21:27 2026 by rpki-client