This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
File:                     D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa (raw, json)
Hash identifier:          9nS9/qZCYlRlsFfFJabMOal4M3j3reJuxpTuSFn2jwk=
Subject key identifier:   46:BC:7F:1B:0F:A1:00:34:AE:40:0E:49:06:EA:50:2C:2C:5D:36:16
Certificate issuer:       /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial:       0425
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 11:29:25 +0000
ROA not before:           Thu 06 Nov 2025 11:29:20 +0000
ROA not after:            Mon 31 Dec 2035 11:29:20 +0000
asID:                     33779
IP address blocks:        102.204.112.0/22 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 03:13:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAF, serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
        Validity
            Not Before: Nov  6 11:29:20 2025 GMT
            Not After : Dec 31 11:29:20 2035 GMT
        Subject: CN=690c8695-67c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:2c:0c:dc:82:07:16:47:d8:6b:ce:87:3d:
                    66:fb:17:e9:ea:a1:8b:5a:ce:94:71:e7:75:35:f6:
                    eb:17:8d:7e:4c:8c:3f:7c:55:bb:d6:52:92:e3:3b:
                    a5:b1:48:5e:6b:f2:4a:59:1b:91:ef:c9:69:c8:d7:
                    2a:d0:eb:e3:cf:7b:5e:62:87:11:09:a9:e5:01:e2:
                    56:45:65:55:96:ab:e6:19:18:b9:f0:8c:a9:37:4f:
                    f8:6a:5d:3c:0c:6c:4f:00:b4:ef:af:b6:73:a1:d0:
                    f7:9d:92:89:8d:cb:91:25:18:b7:a9:56:7c:77:fd:
                    98:85:12:0b:c7:25:43:57:f6:21:1c:5f:16:da:79:
                    24:53:3b:75:d3:ed:c8:3e:14:84:ac:a6:1b:f9:9c:
                    db:dd:7f:f3:66:20:8e:ee:9c:e0:74:ad:45:a0:6f:
                    8d:2d:08:ee:ec:51:6e:73:14:37:19:7a:5b:e1:8f:
                    47:9f:ac:90:c3:21:4c:0a:bc:f3:f9:69:3b:f2:ad:
                    ec:65:4c:c6:17:b6:34:a5:f1:25:fe:e5:20:cd:dd:
                    76:4f:2e:00:c9:ec:2c:e5:11:57:64:71:5e:82:2a:
                    52:c2:0b:fb:70:d5:e8:69:43:ca:23:05:b7:dd:2a:
                    9c:0c:da:00:37:8d:75:bc:dd:c9:93:7d:a8:0e:fe:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BC:7F:1B:0F:A1:00:34:AE:40:0E:49:06:EA:50:2C:2C:5D:36:16
            X509v3 Authority Key Identifier:
                keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/D8B2D44EBB0311F0BB5AE3D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:b0:65:cc:47:d6:8d:77:72:46:fd:7e:f0:30:6a:27:96:05:
         54:fa:df:2c:19:25:6e:57:86:85:db:7e:f1:6d:d4:a0:c7:08:
         4f:42:63:f7:ef:e8:db:4f:8e:95:89:45:2b:cc:74:91:21:80:
         a2:48:d9:00:cd:3e:f3:e7:94:bb:17:5f:c0:fc:12:f4:c6:93:
         ae:55:45:92:88:0b:60:e3:a2:f4:d4:fe:da:8c:20:0d:bb:1a:
         c0:a6:60:f6:de:15:b8:21:4e:8a:a1:11:c7:20:c2:38:14:ae:
         eb:7f:de:3c:0a:f9:6d:99:97:f6:36:25:9f:83:00:1b:57:79:
         47:d0:78:9d:44:ae:0a:31:8b:e2:f1:13:6c:f1:81:c9:7c:9c:
         ae:d9:76:e8:e4:30:02:37:3c:3e:a5:07:4d:96:d3:f0:17:3b:
         c6:ce:82:c4:b2:a7:b2:55:54:c3:58:89:e9:c7:4f:14:38:c3:
         77:33:54:71:4b:07:50:a3:43:0c:4f:3a:e5:fa:e5:6f:26:e6:
         83:58:2c:9a:e4:13:0f:f7:9f:8d:7d:c0:73:db:04:50:57:3e:
         30:ef:cc:3c:9c:3f:01:8a:b8:5a:36:86:ff:a2:36:88:15:09:
         98:00:3a:49:14:a0:7a:5a:37:e2:34:b3:e6:f3:10:cb:bb:84:
         7a:3e:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:45:33 2025 by rpki-client