This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/462E5B98D61011F09797F9F5DAE4EC9C.roa
File:                     462E5B98D61011F09797F9F5DAE4EC9C.roa (raw, json)
Hash identifier:          OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=
Subject key identifier:   E5:B7:FB:AF:D5:2B:05:56:D3:79:96:3B:59:BC:D7:64:09:A6:C5:24
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       18
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/462E5B98D61011F09797F9F5DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:36:24 +0000
ROA not before:           Wed 10 Dec 2025 21:36:19 +0000
ROA not after:            Sun 31 Dec 2045 21:36:19 +0000
asID:                     37069
IP address blocks:        197.222.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:36:19 2025 GMT
            Not After : Dec 31 21:36:19 2045 GMT
        Subject: CN=6939e7d8-3b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:05:f4:17:9a:c0:61:39:b2:8b:0f:8c:56:5f:
                    ea:2b:e6:16:f0:5e:26:e2:47:dd:d4:08:4c:de:3c:
                    10:b5:de:ef:62:5b:16:e6:e0:3f:14:15:dc:61:12:
                    ed:ae:61:07:23:38:28:61:01:96:6c:8d:ae:ef:77:
                    a5:5a:8d:2c:48:fe:6a:a0:bf:55:54:41:18:b7:a7:
                    72:f8:88:5f:ea:a8:6c:80:bc:94:ee:20:0e:e5:4c:
                    3d:c0:f6:1e:0a:95:6f:0b:f5:45:fc:7c:c7:d1:f2:
                    60:cb:1c:af:a8:28:28:58:fe:c1:9a:45:7b:62:d4:
                    70:2c:08:6e:e6:8b:5f:d6:aa:8c:bf:6e:02:28:be:
                    89:f3:dc:12:ab:7d:96:25:c7:87:83:09:05:ed:d5:
                    2b:0a:c1:0b:0f:6d:d1:ee:1f:d0:47:85:96:eb:af:
                    23:ca:88:47:82:15:fb:0e:5d:28:fa:3f:a7:ed:66:
                    f7:b0:99:17:4a:c3:4e:f7:eb:80:23:b0:01:33:17:
                    83:28:83:a8:d5:cf:ba:bb:68:47:48:c0:68:46:ad:
                    8a:f9:ad:b2:06:1c:2e:0b:e6:2f:48:4a:69:93:7d:
                    b0:9c:b2:88:7e:38:66:59:7c:14:16:79:9d:e9:06:
                    cf:df:80:01:93:91:26:11:43:48:a9:25:be:e7:ed:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:FB:AF:D5:2B:05:56:D3:79:96:3B:59:BC:D7:64:09:A6:C5:24
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/462E5B98D61011F09797F9F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.222.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:1e:27:95:c0:db:22:1b:3b:a5:75:8c:ca:44:dc:59:a7:
         e2:67:bc:1e:66:0f:a6:4f:bf:1f:b8:19:7c:31:44:36:90:4d:
         3f:69:da:f8:4a:b6:e4:77:2f:01:ca:87:d3:d6:bf:4d:2c:f8:
         fe:b4:53:08:42:d4:f3:f3:82:6f:0c:8b:a8:fe:d9:6b:74:5a:
         20:57:2e:07:72:9e:ba:73:58:08:d3:55:9f:a0:11:62:7b:b3:
         3d:3f:a5:95:25:9d:3b:61:12:b7:7b:d0:7e:10:c0:91:56:80:
         75:c8:6a:f9:01:2f:fd:55:78:1f:9f:98:0b:4c:1c:4c:da:34:
         02:7f:f1:a3:2f:e5:1a:1a:43:40:42:e1:30:f4:79:a9:d8:f3:
         27:19:db:0a:bc:ee:c7:3b:5a:72:c8:34:5e:67:d3:99:ef:8f:
         f1:26:2b:44:47:5e:1b:92:fb:32:6e:e1:15:42:72:ec:00:6b:
         a8:c4:3d:69:67:e4:be:f2:90:01:d9:bc:e8:ba:8f:c1:5e:c8:
         00:b1:c4:b1:60:60:d8:dc:d4:48:fa:0b:b7:7d:1a:ff:cc:a3:
         68:31:dd:f7:ff:2d:c7:3a:11:be:15:46:5a:1a:de:68:83:4f:
         7a:5d:e7:cb:73:60:1d:a1:28:f9:17:c5:87:a2:bf:e8:9f:94:
         b1:7f:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:44 2025 by rpki-client