This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/519E774ED34D11F0B1FC9AB4DAE4EC9C.roa
File:                     519E774ED34D11F0B1FC9AB4DAE4EC9C.roa (raw, json)
Hash identifier:          nFVvziltdvBWfHJ66OQ0N6PVowTUc4nLNgaZY7llLWI=
Subject key identifier:   F1:E9:99:E6:1C:88:B9:0A:D5:71:4D:78:5B:A7:03:02:FA:D8:AF:BD
Certificate issuer:       /CN=F36A6EA0RI/serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
Certificate serial:       07
Authority key identifier: C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/519E774ED34D11F0B1FC9AB4DAE4EC9C.roa
Signing time:             Sun 07 Dec 2025 09:15:49 +0000
ROA not before:           Sun 07 Dec 2025 09:15:44 +0000
ROA not after:            Wed 04 Dec 2030 09:15:44 +0000
asID:                     24863
IP address blocks:        62.135.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.mft
                          rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0RI, serialNumber=C03B7862E441B002E109E8BB7BAC28FAED97974F
        Validity
            Not Before: Dec  7 09:15:44 2025 GMT
            Not After : Dec  4 09:15:44 2030 GMT
        Subject: CN=693545c5-79ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:18:bf:8a:bc:7c:40:4b:e6:5b:75:c3:3d:
                    5e:6b:46:8c:bc:f4:7f:15:30:a1:ed:48:17:1b:35:
                    9d:82:77:74:90:b2:cc:6a:2c:e0:3c:b9:a7:12:51:
                    f3:d9:e8:f0:f1:18:e9:47:3e:cc:09:55:bb:12:65:
                    e8:b8:1b:55:a8:cc:3f:ea:9f:90:52:d7:b9:a2:b6:
                    cc:f6:a5:67:a1:94:d8:3a:b6:73:79:99:0c:3f:ec:
                    7b:c7:97:4b:9a:ed:9c:66:58:50:e2:65:a3:87:4c:
                    a7:d2:7a:5e:49:be:ab:a5:8c:c4:ab:36:6e:25:7b:
                    cc:5b:02:4e:55:7d:b8:bb:df:b7:e8:19:0a:6c:6e:
                    2a:17:50:93:36:5e:bf:53:c2:29:2b:62:cb:90:f1:
                    93:81:dc:9e:9a:9f:48:76:99:ac:65:b0:c6:50:18:
                    33:ea:58:c9:2c:ac:6f:1b:f8:29:0f:30:b3:12:27:
                    b1:0f:5d:b0:e0:7d:23:e8:b1:06:69:c1:0a:33:b4:
                    0a:a3:3e:e6:14:b2:c5:03:86:c1:91:bd:44:d5:fc:
                    8c:cc:ae:80:0f:25:c9:22:46:b1:f5:06:8e:10:03:
                    c2:1a:30:1e:87:0a:73:d5:a1:3e:6c:1e:4a:17:11:
                    c9:44:3e:70:48:30:5d:d9:86:05:60:97:b7:8a:46:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E9:99:E6:1C:88:B9:0A:D5:71:4D:78:5B:A7:03:02:FA:D8:AF:BD
            X509v3 Authority Key Identifier:
                keyid:C0:3B:78:62:E4:41:B0:02:E1:09:E8:BB:7B:AC:28:FA:ED:97:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/wDt4YuRBsALhCei7e6wo-u2Xl08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wDt4YuRBsALhCei7e6wo-u2Xl08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/465A4B7ED0F511F0A8111F85DAE4EC9C/519E774ED34D11F0B1FC9AB4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.135.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:89:6d:73:77:6c:d5:89:a5:f1:8b:f7:11:3e:ff:5a:9a:2b:
         5e:66:fe:7a:f0:38:cf:95:5e:8b:88:4d:5a:9c:cc:79:e9:eb:
         07:3b:49:f7:0f:df:cf:ec:02:09:16:b5:5e:ca:6a:77:8d:46:
         5e:12:da:6e:81:6e:b8:80:4b:ff:77:f8:a2:28:78:ad:e7:ff:
         91:a1:9c:5e:7d:91:10:bf:eb:27:26:b4:e2:d2:88:6b:51:76:
         17:4e:20:49:db:4a:82:b7:21:e7:d4:81:b7:a6:92:5a:4c:db:
         a0:56:d1:a9:c2:82:72:26:f0:a9:04:c8:90:6a:d1:fe:20:f5:
         ff:56:d6:96:37:fc:fa:cd:5a:f4:46:cb:d4:d1:4d:8a:62:af:
         25:81:97:bd:68:fa:9b:6d:d1:fd:3e:e7:84:6d:62:e2:0c:d8:
         98:ce:22:4e:0b:f6:15:c8:d1:c4:ea:f3:5f:b7:ac:c8:01:19:
         b8:b6:ac:03:96:f7:ad:e8:c0:ca:9b:e5:c4:5d:74:71:c7:a6:
         57:32:a9:73:0c:18:d3:f0:c3:38:b1:10:5e:fb:44:20:5c:48:
         96:e9:38:ea:44:ba:6a:88:52:28:90:52:6f:c0:c5:58:55:9d:
         3b:37:db:ac:e3:f1:53:b0:2c:b2:69:57:be:b1:f0:67:23:8b:
         b5:4d:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:42 2025 by rpki-client