This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/486AE492DFC711F0A95595F5DAE4EC9C.roa
File:                     486AE492DFC711F0A95595F5DAE4EC9C.roa (raw, json)
Hash identifier:          65bNn9O3053+34JmCFsMEOe1N2fURQMg53q/IZOc2XY=
Subject key identifier:   A8:89:56:E5:9B:28:DD:8F:97:4C:B2:52:B4:AC:EC:EC:6F:7A:E6:C7
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       16CD
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/486AE492DFC711F0A95595F5DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 06:19:06 +0000
ROA not before:           Tue 23 Dec 2025 06:19:00 +0000
ROA not after:            Sat 25 Dec 2027 06:19:00 +0000
asID:                     7018
IP address blocks:        102.129.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5837 (0x16cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 23 06:19:00 2025 GMT
            Not After : Dec 25 06:19:00 2027 GMT
        Subject: CN=694a345a-6e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:0c:e9:ef:dc:d9:56:e9:9f:3f:e9:70:45:
                    9a:70:ae:97:07:b2:5f:d7:e7:1c:02:34:65:aa:12:
                    7b:34:27:28:be:ed:8f:c6:8e:9d:69:b2:de:48:f4:
                    b8:2a:54:67:89:50:02:32:f9:ee:6a:d9:ac:dc:56:
                    96:87:fe:e5:d0:8a:45:c6:43:9e:31:58:6b:ff:bb:
                    0e:3d:9b:20:d7:5d:ce:99:c8:06:63:3f:0f:c5:ea:
                    f5:20:f3:cc:d3:10:2e:88:b6:ab:72:68:c2:7f:05:
                    6a:e9:2a:f9:80:65:b3:47:60:ed:f7:ad:51:96:13:
                    1e:56:e2:2b:fd:15:36:80:91:b8:97:d3:25:bb:fa:
                    34:b2:b7:13:62:27:62:22:db:76:b5:76:5e:2b:04:
                    85:7a:cd:0e:f8:30:84:c7:a8:65:46:5f:a5:cb:1f:
                    d8:f9:17:a1:d7:69:23:05:43:f9:55:d1:b0:2b:d0:
                    4a:c5:14:4d:d7:cc:00:17:dd:d3:22:28:84:8b:92:
                    ca:76:e2:e8:13:63:25:05:22:d2:db:7d:cf:07:18:
                    c6:4c:00:a4:80:75:aa:e7:63:e1:0f:6b:a8:1e:6b:
                    30:3c:cc:98:1f:cb:77:86:36:2e:a4:18:82:2c:3f:
                    1e:0b:5c:42:74:c3:76:0e:43:01:75:15:a1:0f:79:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:89:56:E5:9B:28:DD:8F:97:4C:B2:52:B4:AC:EC:EC:6F:7A:E6:C7
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/486AE492DFC711F0A95595F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e9:bd:40:aa:67:2e:5a:e1:bc:d9:8e:d5:65:38:54:23:40:
         0b:14:97:a5:40:eb:2b:ae:6a:7c:31:2a:d3:e3:dd:f1:5f:e2:
         de:4a:00:e5:4d:e9:40:af:da:4f:61:0e:19:1e:85:e8:36:9c:
         c4:c7:53:7d:64:6a:16:14:6b:66:7c:70:26:ba:d9:d4:27:0e:
         2f:f4:22:e4:2c:c4:b9:d1:2d:04:db:bd:8c:9f:0b:c7:36:1a:
         fb:32:e9:9d:65:50:98:04:3c:4f:a9:91:70:95:30:23:31:d0:
         a9:e6:64:72:bb:43:0b:68:a9:b2:7e:83:1c:7f:b5:20:e9:38:
         07:3e:e4:c3:6f:b3:92:90:2b:b7:8c:e4:03:cc:f5:b6:73:7b:
         58:de:36:6b:21:fc:b2:02:e4:9f:48:e9:3c:19:32:f0:52:2c:
         c1:9d:99:66:b2:ba:ed:19:b9:fd:5d:12:39:5c:63:ba:cb:62:
         5c:8c:68:0b:3f:19:f7:86:b5:98:f6:0b:24:6b:89:4e:c9:20:
         be:31:91:90:49:bf:00:99:cd:05:4c:a5:77:8c:e5:4b:5c:06:
         a3:ca:38:d3:60:00:22:06:6b:70:b7:8e:a6:6f:94:b1:a8:6f:
         1c:5c:05:13:5d:6e:54:0f:18:a9:e7:1f:db:1c:f0:13:83:ad:
         b3:9e:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 23:20:33 2025 by rpki-client