This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/855E7F48D5D711F0994ACE9CDAE4EC9C.roa
File:                     855E7F48D5D711F0994ACE9CDAE4EC9C.roa (raw, json)
Hash identifier:          KQqahJlThDjSMN9OoZVjESlj+xV77EpJ7wFMyg/Ikw4=
Subject key identifier:   7A:BD:8B:AA:66:4E:3E:DC:06:B2:89:85:89:A4:EB:2A:DB:E5:96:61
Certificate issuer:       /CN=F36B8F68AF/serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
Certificate serial:       2A
Authority key identifier: D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/855E7F48D5D711F0994ACE9CDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 14:50:08 +0000
ROA not before:           Wed 10 Dec 2025 14:50:04 +0000
ROA not after:            Wed 03 Dec 2042 14:50:04 +0000
asID:                     329635
IP address blocks:        102.204.127.0/24 maxlen: 24
                          2c0f:79c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B8F68AF, serialNumber=D09DCA0EBA9B868FEDAE49C2B6692AEE054579CA
        Validity
            Not Before: Dec 10 14:50:04 2025 GMT
            Not After : Dec  3 14:50:04 2042 GMT
        Subject: CN=693988a0-79c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:34:5b:c3:91:d8:cc:ea:1a:a3:d8:f4:0a:
                    9b:2b:29:fc:02:5e:df:92:c9:f6:2c:5c:ec:ff:81:
                    9c:63:1c:28:69:f9:2b:75:34:fc:80:13:af:a4:a5:
                    c7:45:a0:b2:ce:0a:3c:5c:fb:1c:1a:b6:0e:32:82:
                    44:ae:d9:25:98:e3:27:8d:ed:dc:eb:79:82:ed:7c:
                    ea:9b:07:84:ef:a3:50:fe:e3:a5:83:da:15:82:64:
                    0b:e8:e2:c7:24:8e:18:38:12:5d:82:17:9e:06:10:
                    55:17:36:47:e2:aa:23:fb:17:f0:56:14:3c:dc:32:
                    9d:14:ab:4b:3c:b7:d2:36:88:1c:3a:c5:ca:52:9c:
                    5d:80:06:ae:bf:2f:a9:34:a9:c1:4c:9d:d7:f0:9a:
                    d0:03:db:c0:de:8a:a5:fa:cc:75:76:7d:b5:b7:fa:
                    e2:f4:94:e2:54:e8:2b:32:ab:7a:6f:03:46:d5:c2:
                    af:62:bc:95:44:f9:06:93:96:a0:98:39:ca:38:f0:
                    77:37:7e:21:47:b8:f4:92:81:cb:13:87:93:b7:a1:
                    37:2f:18:2f:7c:75:84:64:2d:70:a3:f7:1d:34:97:
                    bd:b5:4d:a4:4f:bd:33:95:4b:cf:48:2f:2d:0d:66:
                    69:6d:3c:9c:c8:95:94:a2:a6:11:df:78:1c:65:c7:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BD:8B:AA:66:4E:3E:DC:06:B2:89:85:89:A4:EB:2A:DB:E5:96:61
            X509v3 Authority Key Identifier:
                keyid:D0:9D:CA:0E:BA:9B:86:8F:ED:AE:49:C2:B6:69:2A:EE:05:45:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/0J3KDrqbho_trknCtmkq7gVFeco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0J3KDrqbho_trknCtmkq7gVFeco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B8F68/A101D01CB8AC11F0BC7A6097DAE4EC9C/855E7F48D5D711F0994ACE9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.127.0/24
                IPv6:
                  2c0f:79c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:c2:eb:72:35:92:6c:a6:43:a9:65:96:cc:bf:4c:48:3d:
         fd:b3:16:fd:77:66:c2:ce:a7:ac:5d:f7:8c:96:19:77:88:ec:
         2d:73:c6:9e:e0:a7:eb:12:0b:51:66:aa:a4:95:9d:c0:82:d6:
         f9:33:a5:de:a2:34:0f:3c:d7:ff:4d:76:21:e8:52:99:7b:00:
         65:cb:b3:ef:2b:4b:42:c8:1c:da:73:f3:11:20:4a:90:7b:42:
         07:cf:f3:7b:2a:36:c9:2f:aa:13:2f:cd:a1:c6:a5:a8:2b:59:
         1d:32:a3:6f:d0:78:76:ec:93:fa:44:f1:27:18:58:f7:87:0d:
         c8:e2:c4:40:a5:46:be:64:79:13:87:81:ae:29:10:df:a6:ee:
         4e:ae:c7:54:f3:d5:82:d2:b2:48:2b:68:f2:f8:36:13:d6:70:
         55:a7:16:81:0e:a2:f2:de:fd:b7:f9:f8:15:4c:ab:e6:a5:93:
         a1:34:ec:91:1b:02:4a:b3:72:4f:6a:66:7e:d8:7c:d5:f4:77:
         ae:7f:f2:7e:f1:90:ab:d6:fb:7c:45:7b:c3:e4:4a:27:75:69:
         fd:77:a3:88:4d:55:85:a5:61:c2:96:e9:dc:be:2f:37:70:f6:
         6e:3d:13:2c:97:7e:d2:13:95:11:fd:82:7b:87:98:7e:bb:76:
         6e:7e:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:45 2025 by rpki-client