This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
File:                     F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (raw, json)
Hash identifier:          OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=
Subject key identifier:   D2:B7:B2:48:E6:33:04:13:AA:D6:2D:5F:08:70:FA:06:CC:99:25:9B
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       12
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:34:02 +0000
ROA not before:           Wed 10 Dec 2025 21:33:58 +0000
ROA not after:            Sun 31 Dec 2045 21:33:58 +0000
asID:                     37069
IP address blocks:        41.91.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:33:58 2025 GMT
            Not After : Dec 31 21:33:58 2045 GMT
        Subject: CN=6939e74a-c064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:47:d6:0e:1a:b5:30:2c:1f:3a:df:57:f2:
                    a5:d7:47:eb:c5:41:a2:83:19:8c:87:e3:fd:6f:d6:
                    e0:b7:17:da:8a:02:a3:08:66:d1:11:56:2e:cd:0e:
                    b1:38:55:b4:da:87:7f:69:92:82:5c:99:a8:bf:59:
                    13:c8:e4:69:31:37:5f:9a:f5:ec:bf:39:b8:39:be:
                    7e:75:e5:6a:00:4a:99:bb:d6:94:b7:29:70:01:16:
                    8d:32:08:eb:60:9a:78:4d:a1:5d:ea:4e:d3:f5:06:
                    14:15:d7:56:ee:72:fa:00:d9:5d:eb:aa:b2:cf:1a:
                    2a:63:7d:28:5d:05:1e:58:db:29:5a:34:9f:9c:0c:
                    69:7c:19:77:e0:ac:68:67:93:24:5d:79:5b:db:3e:
                    05:6f:28:5d:12:9b:f8:b2:23:73:f1:f4:37:e5:d3:
                    16:f5:f4:69:2e:11:eb:54:b3:9e:57:3c:e7:34:9e:
                    18:ed:69:3a:b8:65:4b:ca:ff:b2:9c:38:13:7e:9c:
                    07:0f:51:6c:72:71:cc:8d:36:0e:ea:ee:7d:c6:b4:
                    2a:94:45:8b:10:bd:96:69:b7:87:7d:f4:66:1a:34:
                    9a:1d:20:58:db:f1:5e:54:85:93:70:d8:b8:40:61:
                    c1:2d:6c:48:62:8c:78:4f:7e:49:f6:31:4d:d5:df:
                    f3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:B2:48:E6:33:04:13:AA:D6:2D:5F:08:70:FA:06:CC:99:25:9B
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:f8:e6:af:4a:93:40:7a:e0:82:a3:e3:94:8c:2e:88:16:15:
         b1:a0:2a:25:79:4f:0e:83:88:cb:f9:49:fd:28:bb:dd:6f:da:
         5b:bf:f3:cd:68:5a:38:e8:10:97:69:28:a9:4b:ac:fc:02:b4:
         f8:c7:22:2b:70:49:20:df:c2:38:c2:36:03:80:4a:da:f1:ae:
         d4:4e:47:07:c0:32:de:11:45:9e:2a:7f:4e:d1:ef:7c:95:4e:
         c5:4b:32:94:73:71:5a:a5:16:0c:3d:71:87:fa:a7:43:1d:a4:
         aa:93:f5:fb:f6:24:6d:1d:31:22:c3:31:7e:78:0a:5c:6e:50:
         68:34:22:79:2a:1d:ed:fe:f8:e4:ef:2d:22:95:93:7c:2d:ca:
         fb:9b:d3:ee:37:99:d0:51:da:d1:d1:63:d2:e1:df:3b:c7:e9:
         a0:f1:47:1d:e1:33:c5:37:61:60:6e:7c:d2:ea:d8:93:4d:52:
         f7:95:d5:aa:2b:7f:a3:6a:45:5b:68:2f:ec:2f:3b:64:5a:a8:
         06:71:c5:d6:a8:34:c3:02:9d:1d:75:0a:40:3e:cc:0b:13:fa:
         69:62:57:63:a1:da:f8:9d:96:a1:e6:ef:60:12:62:93:e3:19:
         5c:91:3a:4d:28:dc:e1:3a:f7:5a:0c:52:b3:58:d0:a4:ad:f8:
         e2:aa:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:43 2025 by rpki-client