This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4CA08EDCD43111F08AAA84C3DAE4EC9C.roa
File:                     4CA08EDCD43111F08AAA84C3DAE4EC9C.roa (raw, json)
Hash identifier:          Ak6aoJ1Myzk1zKS2M8nfpl7lCXIF4G8sOYLXcwAkYxg=
Subject key identifier:   41:7F:67:49:DD:D1:C6:54:D7:BA:18:8E:D0:A5:71:D0:1A:78:C3:C5
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0DAC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4CA08EDCD43111F08AAA84C3DAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 12:27:46 +0000
ROA not before:           Mon 08 Dec 2025 12:27:40 +0000
ROA not after:            Wed 05 Dec 2035 12:27:40 +0000
asID:                     203144
IP address blocks:        192.142.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
                          rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3500 (0xdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Dec  8 12:27:40 2025 GMT
            Not After : Dec  5 12:27:40 2035 GMT
        Subject: CN=6936c441-d772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:87:0a:ff:3b:a4:84:b1:55:28:36:90:13:
                    95:36:1d:17:ae:44:57:a1:6a:cb:89:a6:70:0c:5a:
                    40:f1:ce:f5:cf:49:88:16:92:cf:b5:47:ac:b6:fe:
                    15:be:89:b1:56:60:e4:c5:62:4c:b1:45:1f:c1:08:
                    19:93:26:bf:c7:12:6c:b4:3b:18:f0:6e:5a:bd:a0:
                    2d:cc:d3:62:69:58:0f:2e:bf:db:a0:68:19:a1:ee:
                    00:e4:da:60:45:e5:20:73:c9:a5:0d:c5:b5:c6:e0:
                    0d:1e:c5:b4:a4:8f:74:b0:df:c4:ad:e8:7a:33:f2:
                    dc:26:7d:3a:96:6a:54:1d:d7:6c:ac:e0:5d:39:36:
                    37:29:23:9d:f6:64:c1:e0:b2:66:a7:ad:61:79:68:
                    99:90:3c:93:77:1b:55:40:e7:8e:cf:0a:68:bf:02:
                    dc:21:87:e6:f9:e3:96:36:d6:22:0a:62:f5:74:a9:
                    8f:08:cc:b9:2c:a8:6b:be:bd:df:2d:f9:c8:17:bf:
                    b9:2f:e4:c5:6f:d9:d2:fd:1b:48:d2:ae:b3:11:18:
                    86:fb:51:70:fb:01:18:a4:a9:90:f4:cc:fe:f8:fe:
                    6f:e0:08:3d:70:2a:b7:ab:26:66:4e:f6:c4:77:5a:
                    f0:8d:e0:ad:43:0e:56:db:ff:4f:d2:f8:41:dc:8c:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:67:49:DD:D1:C6:54:D7:BA:18:8E:D0:A5:71:D0:1A:78:C3:C5
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4CA08EDCD43111F08AAA84C3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:95:c5:ec:23:2b:5d:57:f8:9b:47:1e:7a:78:47:a6:53:
         62:49:68:18:5d:22:96:3a:bc:a2:78:86:17:3a:61:75:9d:f3:
         23:10:91:2e:66:54:bd:c8:3c:66:03:02:7a:4a:da:a5:56:0e:
         d6:b4:29:80:0e:a6:01:3e:fb:c4:2b:e5:05:36:61:87:4e:f7:
         4c:76:85:89:c4:2c:dc:fc:4d:3e:08:06:55:1d:c7:1e:9f:39:
         10:f0:e7:f7:53:be:4b:92:f8:6f:3e:26:36:90:48:d7:7c:c2:
         0b:87:71:04:50:b2:5f:10:00:e4:c8:19:d6:08:1b:36:a3:ff:
         db:48:35:31:e8:66:de:f6:52:7e:dc:f0:cd:27:c0:4b:eb:3b:
         9a:b1:7a:bd:9a:52:8f:39:e5:9b:64:db:e6:31:48:3a:d7:64:
         18:b9:99:d1:78:8e:c0:90:34:e5:f2:49:74:01:ea:b3:aa:e8:
         93:00:d3:bd:5d:58:28:e3:ff:25:52:06:3b:ad:68:90:da:41:
         6c:ee:88:7b:89:51:98:32:51:d4:e2:69:d9:90:15:e3:1b:3a:
         5b:72:c9:8f:a5:93:4d:03:d4:6d:3b:05:cc:a4:52:89:0d:1d:
         62:4f:57:88:4e:71:94:96:fd:89:8b:65:02:ac:36:9a:f6:22:
         89:80:0e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 00:25:07 2025 by rpki-client