This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/27867604D60F11F09BCF4AEFDAE4EC9C.roa
File:                     27867604D60F11F09BCF4AEFDAE4EC9C.roa (raw, json)
Hash identifier:          vyygcPvaqmQG6OPI3dGtJ+FnuE3p2w/6vDUlsFy2p2s=
Subject key identifier:   94:EE:5D:FE:83:9E:9F:E0:D7:CE:27:D5:51:76:8A:86:28:10:A3:EF
Certificate issuer:       /CN=F367CC68AR/serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
Certificate serial:       06
Authority key identifier: AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/27867604D60F11F09BCF4AEFDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:28:23 +0000
ROA not before:           Wed 10 Dec 2025 21:28:18 +0000
ROA not after:            Sun 31 Dec 2045 21:28:18 +0000
asID:                     37069
IP address blocks:        45.104.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.mft
                          rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AR, serialNumber=ACA9C9BEBBE8D0997C064E2FB38FFE29B399073D
        Validity
            Not Before: Dec 10 21:28:18 2025 GMT
            Not After : Dec 31 21:28:18 2045 GMT
        Subject: CN=6939e5f7-84d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:21:ae:33:54:72:ce:2a:13:93:16:57:4e:
                    8c:c3:53:84:7c:8b:5d:71:dd:a2:12:86:30:e6:1e:
                    22:54:83:ad:28:40:f6:16:bf:f2:23:d7:cb:4a:3d:
                    11:a6:2e:5f:09:7f:02:9f:54:2e:dc:ac:ce:66:ac:
                    64:38:7b:8f:8a:f3:ea:d7:3e:31:b9:ae:11:60:f6:
                    bf:63:48:da:60:f6:f1:99:42:df:54:6d:3b:7d:e3:
                    21:b6:e0:b1:88:33:d0:d2:fc:cd:3b:96:07:d6:e3:
                    e1:d2:82:ef:2c:7e:ae:3e:17:9b:e5:24:9c:f4:9a:
                    e2:b3:be:dd:2e:36:57:d6:21:44:f4:d3:6e:80:01:
                    82:a5:6d:d8:9b:c5:5c:bd:1c:95:64:a8:9e:65:13:
                    58:8c:c0:c0:0f:3b:7f:69:f1:56:2e:0d:37:92:e5:
                    43:13:4a:1a:cc:c3:df:3d:f0:86:59:20:dc:51:1f:
                    6e:cb:7b:2b:52:69:80:b1:95:8f:d9:37:63:5c:ad:
                    e8:fc:14:34:30:ce:49:b7:35:6d:e0:82:2b:68:e3:
                    db:e4:21:2b:05:70:a2:c2:28:04:d1:d8:39:c6:ec:
                    c9:c3:71:8a:c2:0f:63:b2:c7:49:b4:1e:46:91:04:
                    d4:79:26:f5:84:57:04:6e:65:38:c1:20:74:57:de:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EE:5D:FE:83:9E:9F:E0:D7:CE:27:D5:51:76:8A:86:28:10:A3:EF
            X509v3 Authority Key Identifier:
                keyid:AC:A9:C9:BE:BB:E8:D0:99:7C:06:4E:2F:B3:8F:FE:29:B3:99:07:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rKnJvrvo0Jl8Bk4vs4_-KbOZBz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/6A7B0164D35D11F0899EA597DAE4EC9C/27867604D60F11F09BCF4AEFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.104.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:a8:cc:60:a9:b1:fc:d3:50:1f:57:09:70:df:25:cf:ed:
         75:df:e7:a3:66:eb:8c:f5:ae:e9:a7:ad:cc:d0:c5:87:3c:78:
         1f:82:e6:43:99:88:87:0b:05:e4:7d:9a:b5:7c:e9:99:ae:a2:
         92:22:a9:c9:6c:49:35:2f:41:fb:3f:23:90:9d:08:8f:bd:65:
         c1:01:8b:26:0f:3a:4a:d4:b2:4e:c4:b4:56:45:18:af:28:65:
         ce:94:8e:9f:70:91:8b:33:ca:60:d9:d9:1f:77:48:99:27:78:
         5b:43:6b:ae:c6:9a:a6:fc:e1:47:46:3c:f5:ea:f9:bb:1d:e5:
         17:c6:8f:b2:b6:e2:da:da:63:66:cf:4a:46:0d:52:de:c2:95:
         74:d9:6c:26:eb:ab:39:e8:0d:4c:19:b0:94:86:7e:eb:a1:ef:
         e8:37:dd:d7:b1:ea:43:c6:b8:37:f4:53:5a:1e:d9:3d:85:ee:
         eb:bb:b7:ac:b7:b1:28:a1:c6:61:27:5e:35:bc:4f:3e:a1:d3:
         82:65:df:63:fa:01:53:ec:d8:34:79:fb:52:09:fc:92:43:64:
         cd:71:df:de:30:0b:c1:36:f0:80:2d:2c:e4:eb:60:fd:0f:c6:
         a0:26:ec:1b:95:4e:56:f8:cd:d5:1b:33:49:e6:a2:14:73:31:
         d2:5d:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:42 2025 by rpki-client