This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/082AEAE2D74011F098C7EFF2DAE4EC9C.roa
File:                     082AEAE2D74011F098C7EFF2DAE4EC9C.roa (raw, json)
Hash identifier:          LCA3KngTdWzLwZbfhkdIZPY6gMxZEQztvkZ7uFZEO3M=
Subject key identifier:   7B:FB:82:FB:7E:A3:20:4C:89:47:92:6E:0E:0D:04:0C:4B:F5:72:7A
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       16B0
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/082AEAE2D74011F098C7EFF2DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 09:50:47 +0000
ROA not before:           Fri 12 Dec 2025 09:50:42 +0000
ROA not after:            Sun 12 Dec 2027 09:50:42 +0000
asID:                     202736
IP address blocks:        102.129.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5808 (0x16b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 12 09:50:42 2025 GMT
            Not After : Dec 12 09:50:42 2027 GMT
        Subject: CN=693be577-815e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:e5:14:23:92:09:ec:b4:88:7a:e2:ec:62:
                    14:d1:ca:b8:00:df:91:6d:02:e5:09:2d:c9:85:b0:
                    6b:f0:14:dd:e0:29:e2:47:66:a1:03:5c:03:6d:a8:
                    12:fc:8b:e7:aa:e5:fb:d8:5b:c4:a4:e9:39:35:41:
                    3d:9d:b0:6a:88:0f:ee:93:c1:90:60:2a:6e:0d:28:
                    28:ab:74:bb:b2:d1:f0:94:31:76:db:fc:da:31:11:
                    0c:40:f2:fe:ae:13:16:ff:b3:8a:f8:ac:df:68:29:
                    06:58:91:07:15:95:dc:e0:8c:6b:c9:ce:c1:89:ff:
                    50:d6:d7:f7:2b:c2:0a:53:49:9e:10:09:5a:92:bc:
                    fb:ce:be:97:3a:91:70:40:7a:95:6e:19:2a:9d:d1:
                    f8:cd:78:03:f6:f7:15:22:74:e5:6d:ab:16:70:c4:
                    4c:fc:a8:35:84:cf:1a:b2:b1:3a:54:91:f7:db:69:
                    c6:db:f1:c6:9d:44:73:43:6b:ab:e1:42:8a:32:a1:
                    fb:6e:b7:60:18:6d:d0:aa:32:04:d7:c7:b8:94:34:
                    fc:b9:cd:32:32:96:c5:91:eb:d3:e7:2c:2b:57:a7:
                    fb:45:ee:20:08:53:8f:fb:e8:cb:f1:5f:1e:2f:01:
                    01:3c:a6:d8:6a:f4:61:bc:41:dd:0d:6c:9e:0b:c1:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:82:FB:7E:A3:20:4C:89:47:92:6E:0E:0D:04:0C:4B:F5:72:7A
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/082AEAE2D74011F098C7EFF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:34:b3:81:5b:e1:da:9d:2c:25:28:34:e1:fe:b6:0e:ef:97:
         3c:08:2a:b0:18:0b:d6:46:c7:c3:f0:c8:f9:b5:57:d5:5d:ef:
         71:95:4a:bb:73:56:7c:b4:f8:a5:ca:d0:be:cc:5b:56:3a:5f:
         a6:bb:e3:3b:67:b9:3f:90:a2:1c:27:4b:29:f5:44:70:9d:3a:
         02:96:d2:a4:5e:fd:91:29:07:17:ed:e6:58:8a:26:d2:6c:84:
         66:69:19:3b:0e:eb:42:1b:97:43:d6:b9:ea:e2:7e:72:6c:64:
         92:14:fe:ea:b7:67:33:03:32:cc:c1:de:8f:43:ed:5c:aa:e1:
         ff:63:76:c1:9d:c3:c7:7e:00:a3:07:fa:c7:ef:d2:2f:c2:54:
         6e:61:af:e5:9b:eb:49:72:2b:af:c6:f0:2f:4d:86:24:48:01:
         e7:9c:e5:a1:33:c5:92:dc:00:53:84:43:e1:45:fc:e5:c6:90:
         ff:57:5e:10:45:76:7f:52:92:e4:70:0e:ec:30:52:e0:c1:15:
         c6:b3:94:fc:26:e4:cc:40:2f:32:0e:8d:24:22:3c:c6:a8:7e:
         6b:d3:8a:c9:75:53:2b:e4:62:60:a1:84:10:51:ea:5c:4e:0e:
         87:d3:7a:99:cd:67:4c:a4:91:f9:d0:a0:96:32:05:7f:9a:75:
         e7:dc:ba:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:05:55 2025 by rpki-client