This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa
File:                     9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (raw, json)
Hash identifier:          PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=
Subject key identifier:   C8:D6:19:DA:82:B4:D5:96:9D:43:BF:8E:BA:28:78:B0:4E:8F:95:7F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       0E
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:31:43 +0000
ROA not before:           Wed 10 Dec 2025 21:31:38 +0000
ROA not after:            Sun 31 Dec 2045 21:31:38 +0000
asID:                     37069
IP address blocks:        105.192.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:31:38 2025 GMT
            Not After : Dec 31 21:31:38 2045 GMT
        Subject: CN=6939e6bf-e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:4e:1b:20:d3:ea:cd:47:2c:0d:09:73:56:
                    c2:a3:6c:fe:99:7b:ff:89:ed:56:b7:0c:99:8b:82:
                    8e:75:90:35:a6:24:2d:b1:e0:18:9b:eb:1c:1d:50:
                    e9:6a:a8:ac:4c:34:2e:56:81:0c:7d:08:11:78:c2:
                    49:c5:37:6b:02:02:52:a9:57:b6:29:05:f9:46:0d:
                    98:83:ed:73:4c:37:45:75:3f:3d:3b:a8:2e:fb:bb:
                    09:26:ca:5c:be:93:1d:f7:31:14:8e:51:f9:07:e7:
                    ef:05:db:d7:73:ac:0c:08:f2:b5:87:7e:d7:42:2a:
                    b0:c5:d0:63:43:0d:c4:2b:a7:30:17:0f:16:6f:75:
                    c8:bc:98:62:e1:2c:57:5f:ac:ba:ed:b6:4a:f4:7d:
                    d4:00:6d:b9:3c:a7:f5:79:9a:32:c1:66:53:90:37:
                    72:71:74:1c:23:11:df:9f:b8:63:ec:7c:86:ea:76:
                    c7:cc:6b:e2:d1:e2:e5:bd:93:7c:f2:2a:2f:11:25:
                    50:3f:90:33:99:d8:99:20:f3:a5:c4:90:af:24:25:
                    c4:28:a8:12:16:f6:1b:02:76:db:f8:17:ec:60:07:
                    c6:f4:e3:df:61:51:24:f1:99:a8:b8:ec:09:65:a1:
                    c6:a0:a7:fa:8d:ae:73:5b:fd:7b:4e:63:45:e7:99:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:19:DA:82:B4:D5:96:9D:43:BF:8E:BA:28:78:B0:4E:8F:95:7F
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         20:d4:79:44:21:27:99:76:53:27:e8:d8:28:35:f0:97:3f:67:
         28:d6:05:b8:33:9a:e7:0b:e2:d5:fa:06:f9:52:c5:fb:ee:aa:
         9e:12:c6:39:bb:f6:a6:eb:c9:ff:0c:97:e3:ee:3b:f6:eb:1f:
         39:6e:15:69:ac:3d:cb:20:c9:5c:99:0f:4d:16:74:14:e9:85:
         da:d5:22:0b:e2:ae:7f:da:ac:1c:43:2b:05:0a:8e:dc:b7:21:
         c4:2f:43:7b:12:e2:b8:aa:60:e6:31:42:6b:fe:fa:99:42:d8:
         25:40:08:d9:28:dc:58:c8:27:ff:89:0d:8a:b9:3b:b7:ee:45:
         02:be:bc:a2:0c:d8:dc:16:b0:f8:6e:dd:40:0c:b2:34:94:69:
         73:cb:2c:e0:f3:2e:bb:b5:78:db:b6:7f:6e:23:c8:fb:cd:25:
         60:95:3d:1d:7e:a1:4d:3f:4d:42:1f:80:e9:00:2c:49:7b:c9:
         04:4b:fc:b8:51:d9:73:f7:77:85:21:05:05:c6:5b:b6:b0:42:
         b9:ec:3d:5c:df:08:ba:81:8a:2e:8e:46:e7:80:d9:4e:05:7e:
         35:c6:4c:8f:36:90:5a:ac:12:76:c0:d6:45:91:a5:17:f1:3a:
         be:5c:d7:86:76:36:6e:6f:47:90:3e:75:df:f3:74:40:34:b3:
         a7:7e:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:45 2025 by rpki-client