This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/EF37A816D8EF11F0B7873D83DAE4EC9C.roa
File:                     EF37A816D8EF11F0B7873D83DAE4EC9C.roa (raw, json)
Hash identifier:          bWMppRJbwYhIJPdXrXCt5XruoowhYb5EoWsWNOjjVOU=
Subject key identifier:   5C:CC:E0:D8:03:65:73:22:9A:17:23:9A:4B:DD:78:BC:F0:30:F6:A5
Certificate issuer:       /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial:       0316
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/EF37A816D8EF11F0B7873D83DAE4EC9C.roa
Signing time:             Sun 14 Dec 2025 13:22:27 +0000
ROA not before:           Sun 14 Dec 2025 13:22:21 +0000
ROA not after:            Wed 12 Dec 2035 13:22:21 +0000
asID:                     329263
IP address blocks:        102.203.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEBD2AF, serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
        Validity
            Not Before: Dec 14 13:22:21 2025 GMT
            Not After : Dec 12 13:22:21 2035 GMT
        Subject: CN=693eba13-e00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:b6:13:44:b5:79:92:9f:49:29:b9:e5:08:
                    9b:95:84:9b:51:04:5d:27:b0:12:3f:9b:b9:bd:e1:
                    fd:82:fb:69:ab:03:72:9c:1c:b8:9f:6d:f8:24:d2:
                    11:3b:a8:cc:aa:f6:b3:ff:39:92:57:b5:96:a1:bd:
                    5c:ef:2a:c7:a9:7e:fb:05:8c:4f:3a:a9:35:bb:a7:
                    88:1c:10:bb:04:a8:d1:59:a8:85:cb:c9:a6:59:7e:
                    f4:d5:ed:a2:c2:b1:9a:34:67:07:db:27:66:21:bb:
                    20:fa:0b:39:76:98:29:8d:a1:c2:69:03:fa:40:b4:
                    ab:99:a9:0f:52:11:de:43:01:85:5d:e8:7d:d3:07:
                    87:66:78:76:aa:70:f9:8e:c3:64:02:b0:8d:3d:b1:
                    11:1c:d6:89:85:47:ee:82:51:b8:46:71:1a:a5:59:
                    21:a0:b2:98:70:fb:d0:cb:89:04:48:87:52:9a:db:
                    55:73:e4:48:84:e4:c6:27:03:32:ad:53:61:57:8d:
                    c7:41:be:b8:cb:e2:a0:9f:51:91:ad:79:5e:b6:e0:
                    f1:99:f1:8d:af:b4:e2:f9:d7:8a:91:8e:bc:64:57:
                    13:bb:52:5f:8a:1c:5e:fd:33:7d:48:8f:b1:09:16:
                    ec:fd:ec:54:91:13:99:9a:81:6a:6c:82:0f:e1:a1:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CC:E0:D8:03:65:73:22:9A:17:23:9A:4B:DD:78:BC:F0:30:F6:A5
            X509v3 Authority Key Identifier:
                keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/EF37A816D8EF11F0B7873D83DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:72:62:b6:13:85:7d:37:c2:b4:c1:e0:51:e3:f8:94:8a:
         c9:de:5b:28:2e:90:e2:9c:5a:d0:ff:b5:28:4c:3e:34:8f:7d:
         5a:c0:3e:03:9d:d3:22:d3:37:1d:b2:66:c4:27:07:6f:6f:fb:
         61:41:e4:43:21:93:17:3f:cf:ce:01:3c:88:26:84:af:99:e6:
         91:03:31:af:4c:03:40:9d:9f:0e:4b:91:32:62:6a:73:b6:2f:
         bb:ec:f8:a3:8e:ad:23:f7:1a:a0:46:66:ce:ef:a9:0b:5c:9a:
         81:94:ce:3d:68:0f:41:17:02:2c:d8:f9:7e:55:7c:70:61:24:
         ea:e1:db:46:44:e8:22:d7:77:11:6d:55:eb:d7:a6:f7:7f:7f:
         36:bc:5a:0e:f5:e6:df:33:96:bc:0f:3b:cd:b4:ca:5b:16:f1:
         57:24:46:b0:d1:59:75:cd:66:1e:90:04:a3:51:e9:71:21:e6:
         47:81:ee:66:bf:4e:16:71:0b:ee:88:7f:7e:cc:1a:07:1c:ca:
         f4:7a:0e:67:d2:b0:d5:43:d0:f7:52:fb:37:dc:15:18:c0:be:
         de:66:6d:a4:e3:46:76:7c:b4:54:27:cb:e0:53:be:c4:e7:6a:
         ce:02:e2:3d:19:d5:9b:20:cd:49:f2:70:3a:56:7e:be:05:1e:
         4e:7b:4a:57
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0VCRDJBRjExMC8GA1UEBRMoMTg0NDEzRUFEMEVDQzVCRTExQzcxMUIzRTZERkU0
QjREQ0M4RDg0RjAeFw0yNTEyMTQxMzIyMjFaFw0zNTEyMTIxMzIyMjFaMBgxFjAU
BgNVBAMTDTY5M2ViYTEzLWUwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFMLYTRLV5kp9JKbnlCJuVhJtRBF0nsBI/m7m94f2C+2mrA3KcHLifbfgk
0hE7qMyq9rP/OZJXtZahvVzvKsepfvsFjE86qTW7p4gcELsEqNFZqIXLyaZZfvTV
7aLCsZo0ZwfbJ2YhuyD6Czl2mCmNocJpA/pAtKuZqQ9SEd5DAYVd6H3TB4dmeHaq
cPmOw2QCsI09sREc1omFR+6CUbhGcRqlWSGgsphw+9DLiQRIh1Ka21Vz5EiE5MYn
AzKtU2FXjcdBvrjL4qCfUZGteV624PGZ8Y2vtOL514qRjrxkVxO7Ul+KHF79M31I
j7EJFuz97FSRE5magWpsgg/hoYCNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXMzg
2ANlcyKaFyOaS914vPAw9qUwHwYDVR0jBBgwFoAUGEQT6tDsxb4RxxGz5t/ktNzI
2E8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFQkQyLzQ5Q0JFOUJDOEE5MjExRUU5RUNFMDMxMzRBRDlFNkZDL0dFUVQ2
dERzeGI0Unh4R3o1dF9rdE56STJFOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dFUVQ2dERzeGI0Unh4R3o1dF9rdE56STJFOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkNFQkQyLzQ5Q0JFOUJDOEE5MjExRUU5RUNFMDMxMzRB
RDlFNkZDL0VGMzdBODE2RDhFRjExRjBCNzg3M0Q4M0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmy8gwDQYJKoZIhvcNAQEL
BQADggEBAD9+cmK2E4V9N8K0weBR4/iUisneWygukOKcWtD/tShMPjSPfVrAPgOd
0yLTNx2yZsQnB29v+2FB5EMhkxc/z84BPIgmhK+Z5pEDMa9MA0Cdnw5LkTJianO2
L7vs+KOOrSP3GqBGZs7vqQtcmoGUzj1oD0EXAizY+X5VfHBhJOrh20ZE6CLXdxFt
VevXpvd/fza8Wg715t8zlrwPO820ylsW8VckRrDRWXXNZh6QBKNR6XEh5keB7ma/
ThZxC+6If37MGgccyvR6DmfSsNVD0PdS+zfcFRjAvt5mbaTjRnZ8tFQny+BTvsTn
as4C4j0Z1ZsgzUnycDpWfr4FHk57Slc=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:28:12 2025 by rpki-client