This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/7DA422ACD4C511F0B1311BECDAE4EC9C.roa
File:                     7DA422ACD4C511F0B1311BECDAE4EC9C.roa (raw, json)
Hash identifier:          6V8Z71gkmFS44iG++1MEDpGgXR97Y4NjsKUF87yk400=
Subject key identifier:   7E:AA:72:BF:AA:DA:50:78:C3:1F:39:21:2A:C8:40:2E:80:A5:1A:A5
Certificate issuer:       /CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Certificate serial:       02A4
Authority key identifier: 09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/7DA422ACD4C511F0B1311BECDAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 06:08:33 +0000
ROA not before:           Tue 09 Dec 2025 06:08:28 +0000
ROA not after:            Sun 31 Mar 2030 06:08:28 +0000
asID:                     36938
IP address blocks:        41.222.77.0/24 maxlen: 24
                          2c0f:f098::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 11 Dec 2025 05:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AEEAF, serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
        Validity
            Not Before: Dec  9 06:08:28 2025 GMT
            Not After : Mar 31 06:08:28 2030 GMT
        Subject: CN=6937bce1-9dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:87:4d:b1:8f:c4:30:8a:a1:ee:22:95:02:
                    c0:08:ab:03:36:a3:bc:54:b2:94:bb:15:58:83:e4:
                    12:c6:47:5c:b2:08:63:d5:29:b2:80:ee:0a:67:bd:
                    9b:f6:d4:d5:6d:ca:d1:91:b6:35:c6:8c:78:e3:72:
                    af:29:f6:61:f2:a2:2e:1c:45:45:87:a4:d7:fd:48:
                    86:82:7c:20:70:59:28:f3:05:65:87:93:c7:f1:b4:
                    0f:73:8c:21:c4:8a:06:36:7e:de:d4:d0:3d:99:4b:
                    55:f8:34:38:47:c5:33:b3:6e:68:5c:4f:82:1d:f4:
                    a6:51:b4:f3:b1:4b:ed:04:ee:da:1c:cc:ff:82:0e:
                    87:07:85:01:4d:97:37:68:db:77:c2:9f:b6:67:ae:
                    59:00:e4:74:71:82:2a:0e:ee:d8:d3:6b:bb:a8:7e:
                    10:68:0c:25:8a:92:e6:92:1d:4c:11:a3:21:64:8d:
                    85:2c:c2:b8:59:4e:59:09:c6:28:1b:5b:57:56:74:
                    54:6f:92:77:7f:8b:f5:b2:2f:7e:d2:6a:a5:66:4b:
                    5d:56:a4:4a:eb:29:a3:28:11:e2:ef:b8:fd:a1:31:
                    bc:5c:40:d6:18:d5:a0:11:6f:cb:5a:9f:68:c3:d2:
                    dd:4b:2c:aa:52:14:8c:b4:ec:3f:48:a8:c6:91:34:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:72:BF:AA:DA:50:78:C3:1F:39:21:2A:C8:40:2E:80:A5:1A:A5
            X509v3 Authority Key Identifier:
                keyid:09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/7DA422ACD4C511F0B1311BECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.77.0/24
                IPv6:
                  2c0f:f098::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:d3:d7:3c:26:19:73:54:6a:3e:c4:26:08:72:48:2f:c8:2c:
         95:40:75:3f:6a:59:63:c3:99:9a:32:3a:b1:88:1e:e2:3d:09:
         cd:6e:59:33:4f:52:ac:f1:09:dc:5f:39:6a:54:7d:92:37:7b:
         a2:01:fe:00:e5:17:f1:11:28:fb:f1:16:a2:0e:64:e5:09:47:
         dc:75:2a:6a:21:85:3d:d4:26:54:17:af:d0:85:f0:29:23:fe:
         3a:75:37:83:b6:ec:b1:6e:3a:09:f9:93:1e:8e:4b:92:d1:08:
         ab:63:78:4c:cb:27:1f:a8:d1:9f:68:66:c7:28:49:e1:60:3c:
         c0:c6:82:b5:8c:b6:7e:45:5a:06:c9:5a:8a:ed:6a:4f:f8:d0:
         66:82:d6:c3:7a:a8:51:15:90:a1:2d:f3:85:b5:eb:8e:c8:34:
         8a:27:fd:33:46:8e:67:c0:3b:f6:6d:65:59:25:b4:21:81:31:
         b0:0e:9b:ba:df:a1:60:99:11:a4:e5:5b:20:96:b0:2a:69:87:
         8f:9f:0a:6d:0b:98:fa:a9:63:b1:c5:17:92:25:c9:49:dd:bd:
         70:dd:86:d3:da:77:43:90:4e:39:30:ec:9d:d0:20:56:c4:68:
         6d:19:48:bc:61:bd:f9:9d:a4:1d:4d:c9:33:02:9b:7a:21:66:
         9e:e6:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 13:07:30 2025 by rpki-client