This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12C94488C51811F08BBBD07EDAE4EC9C.roa
File:                     12C94488C51811F08BBBD07EDAE4EC9C.roa (raw, json)
Hash identifier:          Ed+1OFgfHZH2NhogNwe+Ep6vqs3iKB/M39PATMnuc7Q=
Subject key identifier:   72:B7:A0:E9:9B:38:21:EB:F7:46:FB:CD:27:58:CC:D7:9A:92:2B:95
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0826
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12C94488C51811F08BBBD07EDAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 07:19:24 +0000
ROA not before:           Wed 19 Nov 2025 07:19:19 +0000
ROA not after:            Sun 28 Dec 2025 07:19:19 +0000
asID:                     200113
IP address blocks:        102.177.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 02:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086 (0x826)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 19 07:19:19 2025 GMT
            Not After : Dec 28 07:19:19 2025 GMT
        Subject: CN=691d6f7c-fd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:ba:58:b1:43:46:e2:81:49:d2:d1:2e:65:
                    6e:94:b2:74:6b:3f:9b:96:9d:6b:10:83:18:7a:75:
                    ed:dc:24:08:0b:d2:95:b7:85:6b:5d:c1:94:20:62:
                    d9:5e:4e:82:b6:57:62:89:b3:c9:9c:71:55:be:5c:
                    93:b5:de:7a:ba:a5:b5:a8:de:ab:1e:1a:91:90:8c:
                    ab:13:35:f9:e1:e8:e3:99:42:4e:bb:77:7a:a3:27:
                    17:f9:03:22:2d:b6:42:5e:44:1d:49:e4:65:4d:d5:
                    60:0a:a3:bb:14:db:d0:04:6f:aa:0a:6e:c3:6a:03:
                    40:b8:1b:2d:f7:58:41:bf:3c:04:da:08:db:e1:06:
                    2f:1d:1f:08:09:05:89:91:af:3f:02:f5:99:b3:ed:
                    35:31:47:74:16:42:c8:bb:d9:92:cd:18:6f:42:4a:
                    f7:2e:0d:c0:d1:4a:1b:d0:4d:2d:1f:2b:35:56:41:
                    c2:a1:ae:eb:98:c2:b9:0b:2e:a9:ea:17:34:96:d8:
                    95:a5:9c:00:08:90:d2:f9:44:8b:de:5f:c9:fb:04:
                    b7:8d:6d:62:e8:0d:d5:09:1f:b5:4f:e6:99:36:76:
                    26:77:1c:88:c3:b8:92:0d:aa:25:2f:72:fd:77:11:
                    d7:ec:ee:e4:4c:8a:1a:c1:b1:8d:4f:49:18:95:02:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:A0:E9:9B:38:21:EB:F7:46:FB:CD:27:58:CC:D7:9A:92:2B:95
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/12C94488C51811F08BBBD07EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:f4:37:28:b6:a3:b4:a6:ec:5a:bf:e2:56:fa:9c:0d:93:
         81:92:9c:3d:4f:b4:11:b4:d2:ef:97:d1:87:a2:fc:46:9e:6d:
         47:15:8d:7f:85:76:44:19:60:2d:48:e6:23:14:fc:42:12:ad:
         de:83:87:09:79:1d:b0:23:1f:f2:a3:86:e1:a2:f9:4c:6b:f1:
         3c:38:ea:3e:2e:85:49:a2:d7:c4:b0:9b:41:c6:30:40:da:bf:
         bf:42:76:ad:2f:61:bd:78:16:5e:24:0d:a2:7e:24:93:d5:45:
         dc:7c:d0:aa:f0:2b:aa:06:86:9a:91:db:6d:d3:8a:60:4f:1d:
         69:2b:56:c9:74:64:8d:37:7c:86:67:43:09:4f:67:58:55:11:
         62:46:0d:4b:28:95:63:f1:c2:3d:1b:3d:01:0f:2b:80:9a:a2:
         96:2d:cf:6e:a9:ee:63:51:bf:c8:41:a9:f9:f9:72:59:e9:79:
         99:d2:0f:c9:c0:62:d7:a7:ed:b8:ed:be:da:85:b9:30:3b:ad:
         74:d0:5c:6d:39:94:e0:cf:e7:45:36:98:17:60:1b:69:a2:71:
         29:d8:80:1e:8e:5d:dd:50:a0:2f:3f:a5:ab:04:13:12:55:bf:
         2c:56:7a:2a:76:5c:aa:8c:19:d4:fa:94:6d:73:c8:2b:83:02:
         0e:3c:54:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNTExMTkwNzE5MTlaFw0yNTEyMjgwNzE5MTlaMBgxFjAU
BgNVBAMTDTY5MWQ2ZjdjLWZkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4erpYsUNG4oFJ0tEuZW6UsnRrP5uWnWsQgxh6de3cJAgL0pW3hWtdwZQg
YtleToK2V2KJs8mccVW+XJO13nq6pbWo3qseGpGQjKsTNfnh6OOZQk67d3qjJxf5
AyIttkJeRB1J5GVN1WAKo7sU29AEb6oKbsNqA0C4Gy33WEG/PATaCNvhBi8dHwgJ
BYmRrz8C9Zmz7TUxR3QWQsi72ZLNGG9CSvcuDcDRShvQTS0fKzVWQcKhruuYwrkL
LqnqFzSW2JWlnAAIkNL5RIveX8n7BLeNbWLoDdUJH7VP5pk2diZ3HIjDuJINqiUv
cv13Edfs7uRMihrBsY1PSRiVAgktAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcreg
6Zs4Iev3RvvNJ1jM15qSK5UwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4LzEyQzk0NDg4QzUxODExRjA4QkJCRDA3RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsbgwDQYJKoZIhvcNAQEL
BQADggEBAJEO9DcotqO0puxav+JW+pwNk4GSnD1PtBG00u+X0Yei/EaebUcVjX+F
dkQZYC1I5iMU/EISrd6Dhwl5HbAjH/KjhuGi+Uxr8Tw46j4uhUmi18Swm0HGMEDa
v79Cdq0vYb14Fl4kDaJ+JJPVRdx80KrwK6oGhpqR223TimBPHWkrVsl0ZI03fIZn
QwlPZ1hVEWJGDUsolWPxwj0bPQEPK4CaopYtz26p7mNRv8hBqfn5clnpeZnSD8nA
Yten7bjtvtqFuTA7rXTQXG05lODP50U2mBdgG2micSnYgB6OXd1QoC8/pasEExJV
vyxWeip2XKqMGdT6lG1zyCuDAg48VMo=
-----END CERTIFICATE-----
Generated at Fri Dec 5 18:11:51 2025 by rpki-client