This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa
File:                     65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (raw, json)
Hash identifier:          mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=
Subject key identifier:   67:3E:98:C6:A0:4B:16:9A:7E:85:E2:3A:0E:EF:76:6E:B4:59:78:6F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       0A
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:30:07 +0000
ROA not before:           Wed 10 Dec 2025 21:30:02 +0000
ROA not after:            Sun 31 Dec 2045 21:30:02 +0000
asID:                     37069
IP address blocks:        105.32.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:30:02 2025 GMT
            Not After : Dec 31 21:30:02 2045 GMT
        Subject: CN=6939e65f-d566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:12:36:f8:fe:7c:81:7b:6f:f2:4e:bc:7a:bc:
                    9c:19:f9:3c:5b:85:84:3a:61:17:b8:23:6f:32:7a:
                    f5:14:da:4f:ee:f5:80:39:ec:1b:d0:b1:84:79:d8:
                    c9:1f:70:64:a2:db:45:c0:8c:55:2a:c8:da:9f:97:
                    24:d7:f4:02:e5:9b:14:85:dd:67:0b:a7:bb:4f:1c:
                    b3:ba:5d:90:ca:4a:72:b6:d4:11:b3:23:cf:0c:ff:
                    65:3e:8d:3c:15:14:a1:a9:d0:e8:e2:60:bc:21:ea:
                    14:8a:f5:b9:8c:dc:4b:c4:e6:ec:01:ef:b3:26:d7:
                    ae:13:89:e8:e5:b0:dc:fb:9f:45:24:5f:62:56:a4:
                    c5:b8:98:af:90:28:73:0d:64:40:d7:2c:1b:48:76:
                    f2:0b:d6:87:ad:14:cd:36:f2:70:57:c2:46:11:2b:
                    c4:bd:51:f1:c6:42:46:e8:73:23:68:15:ad:5b:5b:
                    8f:d3:08:9b:66:51:15:33:31:23:67:87:18:a9:fd:
                    b0:1b:2d:52:09:af:43:38:2f:4a:c5:63:27:c1:95:
                    7b:20:6e:1d:64:d6:ce:75:cc:bd:6e:c6:01:6c:5d:
                    a3:af:15:43:1f:89:4c:5f:76:93:e4:28:49:ad:43:
                    69:7a:be:1c:a5:29:81:5a:53:c7:b2:b4:ee:3d:97:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3E:98:C6:A0:4B:16:9A:7E:85:E2:3A:0E:EF:76:6E:B4:59:78:6F
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.32.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:c7:02:5e:f5:3b:e1:07:e4:ec:f8:5d:eb:a1:29:f8:ab:
         fd:3a:d9:80:d1:20:04:a6:20:b2:9d:59:54:45:ac:db:43:36:
         c1:f9:eb:60:e4:6a:4b:7a:28:ed:6c:7d:48:45:6c:90:1f:5b:
         02:77:dd:d7:e9:06:2b:7a:36:7d:8d:03:95:b4:fa:67:80:9c:
         ae:01:1d:18:cc:22:c9:1d:43:68:7d:60:4a:4e:d2:08:93:7a:
         64:e3:97:67:fa:2e:8e:6f:70:2d:ee:f8:9c:25:14:44:7b:e9:
         8f:b1:d3:d8:d0:22:3e:a5:f5:29:e7:12:94:7a:52:61:d5:ce:
         bc:6d:ae:87:43:2c:90:33:3f:c2:0f:f9:68:83:8a:71:bd:d5:
         96:a4:91:3f:c0:4c:7d:bd:a0:ff:85:e5:26:02:96:38:92:42:
         51:30:94:8b:4c:be:e4:83:64:15:c3:f9:3c:b0:f7:bf:6a:a2:
         00:cd:54:5e:41:1b:39:7a:20:7b:54:e3:14:4f:46:cf:da:80:
         8f:21:6a:b5:91:43:ce:01:7d:de:ba:30:55:0c:d4:d3:a0:91:
         ec:e5:64:3f:76:40:fe:26:0c:ad:b3:27:16:6a:7d:3e:7e:34:
         81:4b:29:87:b7:9e:26:1d:70:1d:3e:0f:ad:b5:8f:cc:af:94:
         f4:56:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:43 2025 by rpki-client