This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2129862D4D111F09CBB2DB7DAE4EC9C.roa
File:                     D2129862D4D111F09CBB2DB7DAE4EC9C.roa (raw, json)
Hash identifier:          8E4ME+q4j0M1E21Rcx5aY/Mk7EaA4YUy26GdUgqVv6s=
Subject key identifier:   FC:A8:C7:16:15:11:9C:2A:25:74:00:4D:CA:53:51:6E:BD:98:63:D3
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0FAD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2129862D4D111F09CBB2DB7DAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 07:36:49 +0000
ROA not before:           Tue 09 Dec 2025 07:36:44 +0000
ROA not after:            Wed 09 Dec 2026 07:36:44 +0000
asID:                     398704
IP address blocks:        196.251.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4013 (0xfad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Dec  9 07:36:44 2025 GMT
            Not After : Dec  9 07:36:44 2026 GMT
        Subject: CN=6937d191-8d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:52:65:e3:90:07:5c:9f:ec:b3:88:b9:96:
                    29:bd:5c:89:a2:8b:d9:a3:dd:60:ee:a2:2e:6a:b4:
                    d7:19:6c:20:50:94:fb:d8:0f:33:5e:61:92:87:84:
                    00:11:88:47:16:8f:85:11:15:92:94:77:5c:d5:f7:
                    61:98:a4:a9:3c:b0:22:47:93:60:77:38:62:39:fb:
                    ce:6e:93:28:0a:d8:b4:f2:22:91:cf:8d:c9:82:b5:
                    7f:9a:18:ac:d1:3b:dd:16:a9:4f:52:6a:2e:c8:55:
                    48:73:0c:0b:ad:7e:5f:f4:d1:40:c2:ea:8a:94:38:
                    b4:92:3e:fc:00:16:06:c4:cc:e4:66:8f:9b:fd:88:
                    f0:df:60:80:39:aa:26:c9:bb:7e:31:46:c9:ff:8d:
                    60:fc:39:85:73:f1:86:6b:49:e5:3c:82:97:0f:30:
                    dc:d5:e4:24:a3:84:86:17:1d:2b:b1:3e:02:7e:cb:
                    93:32:99:f4:ca:ff:95:26:59:82:01:10:3c:b1:21:
                    b3:a5:cb:7c:5b:a7:84:7a:a0:f1:39:7c:0e:f2:e8:
                    34:99:02:44:43:c4:28:f0:ea:79:54:ff:27:dd:6c:
                    16:4c:2b:d4:38:a9:8f:bd:6d:62:20:ae:e0:37:45:
                    3a:39:2f:dd:93:1a:09:cb:47:aa:6b:ba:69:3b:fe:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A8:C7:16:15:11:9C:2A:25:74:00:4D:CA:53:51:6E:BD:98:63:D3
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/D2129862D4D111F09CBB2DB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b5:9b:9d:b2:e6:42:65:4e:ae:eb:8c:11:c1:5c:17:81:9a:
         fa:9d:86:a4:e7:22:63:11:67:e6:34:8d:3e:b4:2a:c3:4e:bc:
         6e:1e:c1:fe:cd:85:ef:40:8c:ce:29:f5:57:ba:f0:b7:27:5d:
         08:0c:97:4e:55:08:66:ff:93:ba:80:5b:53:81:98:5a:34:bc:
         5a:c4:4b:b1:08:98:cc:ba:62:54:da:b3:19:36:c3:3b:25:50:
         31:15:d3:21:23:dd:28:6e:6d:4f:46:29:7d:c9:f3:10:40:fb:
         98:71:ef:0a:77:7c:f5:32:db:37:58:d5:d3:b2:0b:ad:92:d2:
         b3:76:96:c8:51:d4:76:e3:c8:9e:ab:b4:b0:bd:d4:4b:69:6e:
         e0:b7:18:6c:5f:0e:57:58:6f:a6:87:65:be:63:1f:09:84:3e:
         b5:46:08:a0:37:57:40:58:f5:c6:d6:ed:fc:11:98:9e:85:8a:
         87:9a:ed:1f:7c:8c:0e:b4:87:d3:e6:b6:19:91:fa:67:f2:27:
         82:bb:46:20:94:26:89:4a:04:90:47:a4:c0:7d:b3:3a:63:80:
         11:6b:51:fb:59:4e:3e:77:29:d7:bf:58:35:13:13:40:00:14:
         c0:d7:32:22:67:5a:cd:39:a1:d7:f7:4a:c3:7d:db:f2:3f:53:
         bc:31:c0:be
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICD60wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBRjExMC8GA1UEBRMoNkFFQTI0QjA5OUMzMkIyMkU0RTQ4QkI5RjI2Q0Y1
NzhCRUY2QkZGMzAeFw0yNTEyMDkwNzM2NDRaFw0yNjEyMDkwNzM2NDRaMBgxFjAU
BgNVBAMTDTY5MzdkMTkxLThkNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6DFJl45AHXJ/ss4i5lim9XImii9mj3WDuoi5qtNcZbCBQlPvYDzNeYZKH
hAARiEcWj4URFZKUd1zV92GYpKk8sCJHk2B3OGI5+85ukygK2LTyIpHPjcmCtX+a
GKzRO90WqU9Sai7IVUhzDAutfl/00UDC6oqUOLSSPvwAFgbEzORmj5v9iPDfYIA5
qibJu34xRsn/jWD8OYVz8YZrSeU8gpcPMNzV5CSjhIYXHSuxPgJ+y5MymfTK/5Um
WYIBEDyxIbOly3xbp4R6oPE5fA7y6DSZAkRDxCjw6nlU/yfdbBZMK9Q4qY+9bWIg
ruA3RTo5L92TGgnLR6prumk7/hjFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU/KjH
FhURnColdABNylNRbr2YY9MwHwYDVR0jBBgwFoAUauoksJnDKyLk5Iu58mz1eL72
v/MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVBNDBENTc3L2F1b2tz
Sm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2F1b2tzSm5ES3lMazVJdTU4bXoxZUw3MnZfTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjNCQTE5LzBFN0YxREY2OTYyQTExRUM4NjcxRTZFMDVB
NDBENTc3L0QyMTI5ODYyRDREMTExRjA5Q0JCMkRCN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADE+20wDQYJKoZIhvcNAQEL
BQADggEBAK21m52y5kJlTq7rjBHBXBeBmvqdhqTnImMRZ+Y0jT60KsNOvG4ewf7N
he9AjM4p9Ve68LcnXQgMl05VCGb/k7qAW1OBmFo0vFrES7EImMy6YlTasxk2wzsl
UDEV0yEj3ShubU9GKX3J8xBA+5hx7wp3fPUy2zdY1dOyC62S0rN2lshR1HbjyJ6r
tLC91EtpbuC3GGxfDldYb6aHZb5jHwmEPrVGCKA3V0BY9cbW7fwRmJ6Fioea7R98
jA60h9PmthmR+mfyJ4K7RiCUJolKBJBHpMB9szpjgBFrUftZTj53Kde/WDUTE0AA
FMDXMiJnWs05odf3SsN92/I/U7wxwL4=
-----END CERTIFICATE-----
Generated at Fri Dec 19 08:05:06 2025 by rpki-client