This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A77BACE0D60E11F0A525F0ECDAE4EC9C.roa
File:                     A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (raw, json)
Hash identifier:          WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=
Subject key identifier:   3E:C9:61:07:EC:55:E3:0A:EA:10:96:5D:61:FD:18:5A:9F:29:CC:CF
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       08
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A77BACE0D60E11F0A525F0ECDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:24:48 +0000
ROA not before:           Wed 10 Dec 2025 21:24:43 +0000
ROA not after:            Sun 10 Dec 2045 21:24:43 +0000
asID:                     37069
IP address blocks:        154.128.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:24:43 2025 GMT
            Not After : Dec 10 21:24:43 2045 GMT
        Subject: CN=6939e520-9e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:0a:1d:4b:12:71:ef:56:c7:b9:4e:9d:e8:
                    56:ec:63:d0:42:1d:68:e9:5c:cb:1f:95:5b:cd:6b:
                    40:d4:a3:6e:d5:bc:71:31:97:41:d1:35:a7:aa:d2:
                    28:5f:6f:92:ec:69:59:d4:64:55:bb:a3:c1:67:30:
                    d9:52:00:8e:c4:ff:32:91:95:e6:4d:4f:06:0b:91:
                    87:af:8d:44:76:33:4c:53:fa:e1:26:d8:d1:bf:4d:
                    7a:b6:86:6d:d0:cc:d7:c1:61:db:3a:6f:c7:7f:e4:
                    fe:4f:95:60:77:b8:ae:49:4d:2e:3e:95:07:4f:c3:
                    db:32:4d:f6:10:46:eb:aa:d8:fd:e0:9c:04:f5:3c:
                    19:27:5a:b8:49:b8:aa:0f:e3:ca:47:e6:3c:b0:1b:
                    10:5e:ae:bc:90:bc:95:4d:c5:35:39:50:57:c2:cd:
                    40:f6:d1:92:51:10:fb:e9:b3:95:62:00:03:14:6e:
                    89:39:b0:ff:bf:62:0b:ef:ab:f0:3c:b4:64:bc:2c:
                    98:4e:37:19:24:27:64:85:55:0e:24:80:b1:8e:fa:
                    c1:c4:85:12:dc:cd:9f:d5:62:73:04:07:e0:a1:a0:
                    01:98:82:96:03:72:e5:0b:23:5f:47:2a:7a:42:27:
                    a8:2c:d3:37:d3:27:d2:f5:9e:ab:3f:cb:d3:e5:32:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:61:07:EC:55:E3:0A:EA:10:96:5D:61:FD:18:5A:9F:29:CC:CF
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A77BACE0D60E11F0A525F0ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.128.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:9f:00:d3:d3:39:50:e6:c3:78:6a:25:97:b1:16:5a:35:
         56:39:60:76:0b:d8:bb:03:fa:3a:19:5a:54:0f:2e:5f:04:ea:
         8b:d3:ac:92:4b:34:b7:d9:c3:6d:56:00:8b:10:4b:e8:e9:8b:
         28:d0:30:fe:06:ba:32:6e:aa:76:7d:53:5e:9f:54:1a:2b:d2:
         b7:39:7b:55:6a:2b:af:90:3c:6b:d9:8c:85:bd:85:d3:c8:88:
         37:26:63:18:ad:c2:bf:9d:58:46:46:17:4c:f7:74:40:a2:29:
         18:66:7f:d1:fd:18:a1:3c:b7:a5:1f:6c:03:98:cf:0e:06:ea:
         13:a3:18:75:45:47:35:91:62:e9:e2:fb:c1:19:01:a7:46:62:
         2f:f6:02:0f:92:76:4a:15:eb:e8:ba:28:c4:c2:58:fb:29:a1:
         de:0b:e8:3a:72:9b:de:37:84:d9:2b:d1:2c:59:cf:37:2a:19:
         63:33:af:05:bd:83:43:2f:c9:0a:a0:3a:62:c2:4c:fb:b7:aa:
         d4:45:07:b8:23:60:46:e3:fd:ac:02:ae:be:cd:08:01:7d:37:
         61:f4:6e:e6:13:e8:87:a6:7e:d4:28:5b:7a:8d:3b:6d:f8:11:
         9a:ed:8f:74:d8:48:50:84:64:65:28:f6:fa:eb:80:1b:98:01:
         59:20:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:44 2025 by rpki-client