This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0B5AE48D73F11F0BC6388F2DAE4EC9C.roa
File:                     E0B5AE48D73F11F0BC6388F2DAE4EC9C.roa (raw, json)
Hash identifier:          0gNs6oAKPwxC6hBYnpA3urveWDICdUb9VcOSGglYB+E=
Subject key identifier:   D5:DF:E6:CA:81:97:91:FB:B6:0C:D1:72:57:6B:73:B6:30:2E:DE:05
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       16AE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0B5AE48D73F11F0BC6388F2DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 09:49:40 +0000
ROA not before:           Fri 12 Dec 2025 09:49:36 +0000
ROA not after:            Sun 12 Dec 2027 09:49:36 +0000
asID:                     197537
IP address blocks:        102.129.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5806 (0x16ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 12 09:49:36 2025 GMT
            Not After : Dec 12 09:49:36 2027 GMT
        Subject: CN=693be534-47d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:30:ed:5d:18:73:f9:21:98:3e:4e:13:1e:
                    9e:58:2b:18:69:42:d8:0d:a3:26:9c:eb:ae:9a:ce:
                    21:1f:ca:62:9e:98:cd:d4:bc:d7:14:92:fe:b2:a6:
                    7b:1f:eb:51:ca:00:f9:03:72:be:fa:91:6d:8b:1c:
                    d1:60:fc:3c:c3:e1:5a:4e:b6:1e:66:27:aa:45:b4:
                    1f:5d:98:80:38:84:79:2f:1b:ae:77:5f:30:37:96:
                    8b:ab:cb:02:c0:51:f9:21:c1:6a:6b:9b:51:41:fc:
                    f0:54:70:dc:5b:c4:ce:e5:18:ad:7c:b3:20:c7:30:
                    e8:a5:6a:3a:01:54:93:4a:ea:3b:ed:68:b1:05:5f:
                    b8:25:f2:99:d4:ca:c9:59:58:75:b2:39:d2:3d:1e:
                    7c:16:0f:29:5d:4c:b1:56:fd:3d:6c:8b:cf:df:e6:
                    65:96:26:a1:96:ac:cb:ed:6a:84:ee:d4:60:43:29:
                    6c:63:d8:a4:a5:4c:18:22:09:95:9b:e0:aa:96:38:
                    a4:37:f5:09:f5:38:23:96:9d:b1:8e:91:0a:60:c1:
                    18:19:58:37:06:b2:38:bf:02:e5:61:a8:39:bb:00:
                    1b:3a:ef:e0:e8:99:78:cf:8e:0c:53:96:b7:5e:51:
                    84:cd:aa:8b:f2:5a:9d:e8:1a:bf:55:74:7e:83:da:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:E6:CA:81:97:91:FB:B6:0C:D1:72:57:6B:73:B6:30:2E:DE:05
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E0B5AE48D73F11F0BC6388F2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:b9:03:db:1c:30:57:51:c2:c3:f5:98:73:5d:1e:73:53:
         02:a0:03:60:e8:69:9b:d0:4a:6d:f8:b0:84:6e:a7:d1:6b:76:
         70:09:2b:74:e3:94:68:8e:30:fd:9e:b9:48:94:29:f8:12:b5:
         93:f8:a9:c2:58:58:4d:0c:b5:4d:70:18:8f:2c:24:e4:dc:36:
         92:71:b2:e4:47:60:85:56:dd:24:89:ef:10:60:63:3d:1b:2b:
         12:25:1f:ff:16:ba:36:83:3b:4d:27:b7:55:93:bf:42:e0:c2:
         65:05:de:2b:d9:0a:ae:68:c4:dc:41:79:d1:88:7c:42:e9:d2:
         51:14:ff:3e:f2:2f:9f:3c:6c:61:97:33:6e:37:69:6f:15:4a:
         52:2d:cc:62:92:db:d5:21:fa:49:7e:60:d8:83:a5:f4:71:55:
         91:ae:96:9a:e6:58:5f:7d:4b:2e:68:9e:04:ec:80:55:87:68:
         88:71:6c:a4:0d:4a:4a:e9:05:4a:8f:f3:54:0b:60:71:0f:24:
         63:7f:34:78:11:3c:17:e5:dd:d4:b9:a4:b1:9c:78:1b:03:03:
         cd:7c:90:a8:8c:91:33:24:3e:63:e1:33:64:23:14:9a:bc:2e:
         f3:ec:d4:30:b6:ff:75:0f:f0:8c:55:59:f6:fc:0e:fa:99:42:
         8d:0e:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:05:54 2025 by rpki-client