This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E71883CCD11911F0905C41E4DAE4EC9C.roa
File:                     E71883CCD11911F0905C41E4DAE4EC9C.roa (raw, json)
Hash identifier:          ptLEvDPoBUNZw9QkvxO0UcZfmaeq6W6QweZchj2wukE=
Subject key identifier:   74:A8:87:C9:CC:C0:08:89:3F:F2:CD:7E:E6:DC:4C:BC:21:CF:C2:86
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0F99
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E71883CCD11911F0905C41E4DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 14:02:43 +0000
ROA not before:           Thu 04 Dec 2025 14:02:38 +0000
ROA not after:            Fri 04 Dec 2026 14:02:38 +0000
asID:                     834
IP address blocks:        102.135.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3993 (0xf99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Dec  4 14:02:38 2025 GMT
            Not After : Dec  4 14:02:38 2026 GMT
        Subject: CN=69319483-a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:70:18:eb:4f:a5:7c:40:40:2d:4a:d2:ce:
                    6e:6e:1d:6c:29:61:ad:55:df:b3:b6:48:56:1d:54:
                    5b:91:85:a3:7c:72:5a:9a:5e:7a:82:52:35:d1:5d:
                    37:ac:68:42:92:9c:7a:6c:9c:50:e5:62:ef:d5:d6:
                    5e:62:93:3b:94:1c:9d:fc:96:d9:20:8c:52:b3:7b:
                    6e:c1:bd:57:bb:23:12:a6:26:8c:75:ab:b3:73:d0:
                    c5:4f:2a:50:2a:8d:ab:f1:43:7c:8c:89:da:7a:c8:
                    fd:c2:ec:3f:1c:74:2d:d7:57:61:38:53:f0:67:7a:
                    95:d9:50:72:29:66:3a:e4:68:a6:2c:e1:fd:c1:11:
                    86:b2:b4:85:a1:0d:d4:ca:be:5a:71:f7:73:a9:c2:
                    0b:f0:1d:9f:48:0b:bf:87:c2:11:fb:b2:eb:8f:f3:
                    cd:d0:1a:26:a7:7c:aa:b9:2f:de:a6:24:a6:a8:5f:
                    74:cd:92:77:70:4a:93:b2:99:a5:e7:f9:f4:10:4b:
                    db:94:0d:b2:5c:2a:98:4a:f6:5e:6d:e5:97:6c:e5:
                    0c:47:b1:33:e0:41:59:29:6d:09:82:b3:09:3e:e0:
                    ef:36:11:75:14:ef:e8:d2:05:04:73:07:f4:fd:39:
                    4f:a7:d9:14:98:57:fb:bb:f8:1d:58:6b:c7:09:db:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:87:C9:CC:C0:08:89:3F:F2:CD:7E:E6:DC:4C:BC:21:CF:C2:86
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/E71883CCD11911F0905C41E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.135.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:43:fe:c3:0c:89:ae:26:e4:41:00:a6:3e:fa:4e:0b:71:
         fc:7e:35:38:9c:ae:c6:ba:22:e8:ef:2e:fd:3d:14:6e:34:8b:
         42:53:ed:ea:16:17:68:0b:e3:ed:e8:39:c3:fd:f8:24:8c:42:
         6a:c6:64:7c:80:70:7d:80:6b:27:08:ff:61:f5:05:d1:4d:61:
         7a:98:ca:65:5b:35:be:f0:3e:2a:2d:85:6a:14:e0:16:7b:70:
         9c:c2:96:4b:08:c2:6e:2f:b7:40:2f:5c:02:98:65:1d:75:71:
         19:ef:57:3c:c0:33:d7:84:e9:8d:e2:53:6b:8f:18:e4:2a:aa:
         42:2f:6e:2a:60:7d:ab:f9:0c:cb:cc:ad:90:45:17:90:f9:e4:
         6b:8c:75:37:61:6d:10:7f:9b:e2:94:dd:68:0d:22:f0:47:f8:
         2f:bc:6c:9c:db:a2:db:ed:82:27:dc:0b:f8:49:f7:66:fb:18:
         25:63:ca:a6:8b:d1:3f:67:e2:e9:44:f9:13:90:75:ea:93:3a:
         36:00:ca:30:74:64:1c:b0:fa:98:5c:b9:f3:a7:8f:31:d2:e4:
         10:8b:64:48:ec:3d:aa:aa:05:43:72:a5:c5:cf:57:1c:17:81:
         e9:e3:b4:c7:91:c5:c2:4f:b9:c6:a0:d1:28:a9:ec:eb:78:7f:
         10:5c:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:58:25 2025 by rpki-client