This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/BB6580B2E42F11F0B9E5F794DAE4EC9C.roa
File:                     BB6580B2E42F11F0B9E5F794DAE4EC9C.roa (raw, json)
Hash identifier:          zMTRRvx7Vr1SvqYss7swVvmr9SUDyECR2yzYAZr6eIg=
Subject key identifier:   88:B5:40:D4:EA:70:D8:E9:22:E4:FC:68:A5:9C:2F:11:38:D0:41:93
Certificate issuer:       /CN=F36D5C19AR/serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
Certificate serial:       09B0
Authority key identifier: 56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/BB6580B2E42F11F0B9E5F794DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 20:56:51 +0000
ROA not before:           Sun 28 Dec 2025 20:56:46 +0000
ROA not after:            Tue 31 Dec 2030 20:56:46 +0000
asID:                     213975
IP address blocks:        129.205.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                          rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Feb 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480 (0x9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AR, serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
        Validity
            Not Before: Dec 28 20:56:46 2025 GMT
            Not After : Dec 31 20:56:46 2030 GMT
        Subject: CN=69519993-ea16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:96:40:3c:ba:62:fc:bb:b6:99:f8:34:4e:
                    45:0c:98:4d:29:45:de:f2:df:cc:2a:e7:e9:64:8d:
                    77:f9:de:59:b2:58:c8:28:1f:75:b6:06:9c:a5:09:
                    3c:f3:a4:e7:3b:70:c4:b9:18:78:99:73:20:c3:c4:
                    9c:bc:57:0e:9b:33:c6:c3:2b:8d:ea:fc:a7:74:ce:
                    91:89:67:3a:47:b0:75:d8:19:dc:f6:f6:0d:da:a5:
                    2c:70:55:11:fd:66:aa:97:cb:4d:db:1d:9f:ec:66:
                    f2:1c:fc:e8:22:31:46:50:31:f2:08:fd:54:d5:a9:
                    2f:6d:34:66:39:d4:49:d2:e5:84:49:d0:6d:4d:21:
                    bf:bd:d3:fe:82:6e:36:bf:82:7c:f2:39:a8:0c:31:
                    5a:28:ab:8a:5b:2d:83:6f:51:5e:42:bb:95:e3:d2:
                    ba:a3:cc:82:76:64:1c:0f:4b:5c:f3:7e:b0:55:bd:
                    2c:8e:cb:a0:8f:af:fa:dd:85:6e:a4:5e:43:67:71:
                    42:bd:bc:0b:02:d0:44:52:2b:d8:e9:bb:6e:d9:be:
                    f3:0d:77:a2:09:52:98:cb:ab:bb:0b:0f:3c:b9:46:
                    99:87:f9:bd:e3:29:ff:c9:49:fa:6b:77:b5:12:55:
                    f6:63:6f:13:41:cc:97:db:96:9d:8e:02:f3:4d:a7:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:40:D4:EA:70:D8:E9:22:E4:FC:68:A5:9C:2F:11:38:D0:41:93
            X509v3 Authority Key Identifier:
                keyid:56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/BB6580B2E42F11F0B9E5F794DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:5b:92:36:d0:b7:6c:9a:45:43:56:ce:df:10:25:19:d0:
         7e:f6:8b:75:c0:fa:33:4d:fd:02:7f:ca:c2:29:1e:35:fc:0f:
         71:9b:38:64:36:ae:f8:bd:99:ba:b0:c2:f3:bb:47:fa:05:5a:
         5e:c1:48:f9:54:29:f8:c0:e2:02:81:71:2c:ca:60:cf:52:51:
         e5:a8:54:fd:4d:c9:b9:72:e5:ea:64:d1:24:59:01:68:43:de:
         1e:ee:79:a7:58:4d:88:3d:cc:c5:2a:21:51:c7:2b:67:ea:d7:
         f6:0e:ec:80:84:87:c2:90:13:6f:aa:25:98:49:4e:7e:19:0f:
         48:63:15:c6:d3:c7:21:ab:d5:1e:c1:67:be:e0:ef:1a:e0:03:
         bb:99:40:64:19:17:2d:43:f6:52:17:25:73:14:62:5f:89:65:
         2f:d7:89:c2:0d:e5:aa:32:54:53:0e:ad:04:b2:08:d2:01:28:
         3c:4e:54:e6:5c:15:8c:e8:ea:0f:5e:9d:cb:d4:d6:59:8b:21:
         43:70:60:5f:59:cc:b0:d5:3e:86:ee:d5:19:be:a2:05:03:e9:
         2e:f7:84:a1:fc:29:59:25:30:8a:a5:26:c7:e8:8d:2c:fc:92:
         88:89:c0:09:f6:b9:b5:4e:13:ee:11:7a:39:ab:d8:28:c9:8c:
         db:02:c9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 08:41:41 2026 by rpki-client