This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa
File:                     699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa (raw, json)
Hash identifier:          MbciLgOo/FZXT6pICHx7XJwIWDJbakWY3mBA3T6dzSM=
Subject key identifier:   3D:AF:89:DB:77:9E:CF:78:D4:E6:E6:E6:53:BC:E9:AB:B0:9B:34:2F
Certificate issuer:       /CN=F36A6DD7AF/serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
Certificate serial:       0EE7
Authority key identifier: 3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 21:06:13 +0000
ROA not before:           Tue 18 Nov 2025 21:06:06 +0000
ROA not after:            Fri 30 Nov 2035 21:06:06 +0000
asID:                     327767
IP address blocks:        102.218.132.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 00:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3815 (0xee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AF, serialNumber=3E226B20C2E1769880FC68E1DD335AD17A0ACEA3
        Validity
            Not Before: Nov 18 21:06:06 2025 GMT
            Not After : Nov 30 21:06:06 2035 GMT
        Subject: CN=691cdfc4-773a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:6e:45:5a:68:fd:b4:2c:7f:11:7d:de:63:
                    90:e8:3a:1a:27:aa:17:a8:e0:57:19:d3:7d:47:fc:
                    b9:94:f4:b1:a3:c7:56:33:00:f0:3b:64:ed:2a:87:
                    46:b9:01:66:7b:2d:f0:68:1f:c3:52:f9:65:2c:de:
                    23:a9:bf:20:3d:c2:43:ed:63:5e:9c:16:9f:48:a8:
                    42:b3:15:88:fe:d6:96:41:87:a1:0b:05:21:3f:be:
                    e0:56:d4:a9:60:9e:fc:4b:66:19:9a:6e:6f:ec:da:
                    a4:ee:72:2a:1e:1d:77:f0:8e:a2:cb:ce:47:21:bb:
                    26:3c:d1:5b:0f:1a:65:5c:c1:05:d2:35:b7:d0:c5:
                    8f:5e:eb:8c:54:99:2e:91:00:11:33:68:8c:09:0c:
                    31:21:21:5a:53:42:c4:2b:93:14:9c:2c:67:5a:26:
                    a8:c4:85:75:61:d6:03:1a:86:a4:8f:61:1d:66:cb:
                    e8:1c:66:04:6c:5f:3a:ff:bf:1f:c4:a5:dc:4b:3d:
                    74:8f:9b:dc:fd:01:d5:56:b8:3c:4b:02:21:4f:db:
                    4f:f7:48:3f:a0:77:85:0e:b2:36:05:07:28:ee:b5:
                    67:92:b6:88:3d:9f:99:e0:8d:ad:b9:e5:42:11:5c:
                    f4:8c:4a:03:f0:3d:94:28:48:2d:25:3a:86:85:09:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AF:89:DB:77:9E:CF:78:D4:E6:E6:E6:53:BC:E9:AB:B0:9B:34:2F
            X509v3 Authority Key Identifier:
                keyid:3E:22:6B:20:C2:E1:76:98:80:FC:68:E1:DD:33:5A:D1:7A:0A:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PiJrIMLhdpiA_Gjh3TNa0XoKzqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/5CB7C22E587F11E5BF942749F8AEA228/699D3DA6C4C211F0BAEE54D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:f8:58:7a:dc:39:3c:16:7b:ea:8e:bf:2f:e6:30:eb:1a:
         36:ac:ef:23:e8:60:89:d0:a9:3f:86:bd:de:37:f0:35:83:2c:
         13:4f:d9:81:e8:7a:b3:37:bb:db:8e:ac:a1:c0:1f:e6:2f:e5:
         e5:3c:29:f5:59:3d:26:2b:8d:4b:0f:93:71:38:3b:10:5a:2e:
         22:d6:05:4e:65:23:d8:79:6d:ff:40:38:a4:fd:3f:c6:dd:f6:
         ff:30:12:c2:61:6c:90:f0:cd:ea:1c:d6:d4:d2:dc:a8:59:68:
         98:d6:4c:1f:c6:6a:d6:25:4d:2a:b8:69:48:cc:e1:10:58:21:
         fd:98:cd:69:82:d3:1d:56:7e:10:fa:9e:2b:9f:27:af:d6:20:
         66:74:f4:6f:8f:7a:0d:90:14:2a:7e:b0:f5:ff:ea:05:ef:16:
         7c:27:3f:00:5e:62:1e:bb:36:27:c6:4c:96:ce:be:29:42:ec:
         e2:da:10:0c:f7:88:9e:93:00:43:3e:6f:79:01:27:4b:14:34:
         2a:a0:8e:8b:6d:37:4b:e3:bc:34:dc:ff:6f:65:c4:b9:d4:1f:
         b6:11:02:d4:07:85:0b:f9:09:2b:82:07:0b:59:39:1d:c7:cb:
         50:bf:e3:e2:b8:da:4e:31:4c:09:8b:51:cc:ac:2d:53:d0:33:
         39:e1:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:39:02 2025 by rpki-client