This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B1BAF662BEED11F09AFA5C8EDAE4EC9C.roa
File:                     B1BAF662BEED11F09AFA5C8EDAE4EC9C.roa (raw, json)
Hash identifier:          yFct0WTUO5haovjHkdZelB1T9Wedrit2wHbjqx7SxP4=
Subject key identifier:   55:A4:72:3D:D5:19:DF:A2:92:15:E4:FE:55:30:FE:CB:B8:41:A0:3E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0F65
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B1BAF662BEED11F09AFA5C8EDAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 11:00:55 +0000
ROA not before:           Tue 11 Nov 2025 11:00:50 +0000
ROA not after:            Wed 11 Nov 2026 11:00:50 +0000
asID:                     834
IP address blocks:        102.135.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3941 (0xf65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Nov 11 11:00:50 2025 GMT
            Not After : Nov 11 11:00:50 2026 GMT
        Subject: CN=69131767-c4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:10:67:98:ad:87:13:58:04:7b:a8:5a:d5:
                    8c:9c:6b:ca:b2:1d:13:44:f7:10:78:2c:5c:0a:70:
                    7e:e7:5a:42:38:2a:ab:55:5f:a0:7f:33:58:c2:f4:
                    28:ba:ef:a7:c1:15:0c:0e:f9:88:fe:c4:c2:b2:1c:
                    db:e0:a1:65:d2:09:98:9e:4c:ab:02:ac:b3:76:8a:
                    1f:4a:c4:0b:49:94:8f:33:85:15:e5:ab:ff:63:da:
                    04:42:45:aa:ef:2c:53:84:76:29:0a:c8:8b:b1:66:
                    94:96:a4:0b:14:15:74:e9:05:a3:65:2b:c9:9d:b8:
                    73:4a:8a:45:69:dd:fa:4c:17:ca:15:ab:ae:11:11:
                    ee:6f:ca:5c:de:b7:fd:9e:9e:69:1d:80:a8:4d:d0:
                    91:72:56:af:90:89:da:ae:e2:84:4a:3e:3f:ed:c4:
                    ff:2c:30:84:7c:c0:f1:ab:34:bd:3e:cc:0b:6a:a9:
                    8a:9a:58:56:96:c9:80:02:49:ad:1a:e4:27:51:e7:
                    58:d1:f0:5e:72:55:62:75:2e:00:0c:d3:8c:c2:27:
                    59:bc:ef:bb:60:60:5e:74:1e:19:c0:7c:df:24:2d:
                    85:24:2a:c6:52:b4:04:ae:fa:12:23:4a:e7:32:64:
                    9f:b8:c7:85:a8:c2:ea:a9:54:05:44:9c:15:77:a6:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A4:72:3D:D5:19:DF:A2:92:15:E4:FE:55:30:FE:CB:B8:41:A0:3E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B1BAF662BEED11F09AFA5C8EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:c3:31:3e:44:d7:57:fe:e1:70:18:b2:58:08:e5:39:9d:
         60:61:0e:db:c2:39:c7:a8:58:6a:ad:b7:e1:86:fc:08:7c:6d:
         1e:bf:9a:4a:69:f9:6f:71:2a:31:3d:38:fb:6a:a8:f4:05:08:
         e3:cf:56:1f:f3:c2:c2:e4:49:75:72:54:d7:37:e2:82:13:3d:
         25:c6:d2:44:89:22:31:42:03:2d:ac:7b:e1:a6:57:18:f9:99:
         2b:92:3f:6c:1e:42:f6:f5:18:3f:f7:d3:00:7a:99:39:ba:a8:
         28:49:6b:8b:82:bd:28:e3:fe:36:83:99:25:aa:65:d5:cf:a2:
         65:ec:21:af:90:ea:23:51:87:a4:82:90:eb:c2:ea:d9:26:86:
         32:e6:30:72:bf:0e:7e:bf:12:19:3c:2d:d8:f4:95:07:6b:d8:
         1e:71:b6:cd:0a:ef:21:b3:bc:33:9e:c5:16:75:bb:f2:ec:d5:
         2b:c7:ec:d6:e7:75:e4:d6:98:47:46:a3:50:ea:a1:a5:e4:ab:
         5c:6b:07:15:74:5a:d8:7d:c6:23:42:8e:45:46:5d:59:72:93:
         75:32:68:e8:3e:22:73:04:7a:a1:b5:c3:c0:02:8f:1c:5d:fa:
         c1:ee:81:d0:8c:7d:46:a2:29:19:83:0e:a8:be:9d:d4:cb:c8:
         f0:6a:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:58:24 2025 by rpki-client