This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/E9537D34D68E11F0804EF19CDAE4EC9C.roa
File:                     E9537D34D68E11F0804EF19CDAE4EC9C.roa (raw, json)
Hash identifier:          Yi7WlpDmrDcsEUphgJQV/qjToEbUEGi7uC9aoYVJh9s=
Subject key identifier:   4F:DA:0D:F1:E7:B1:3E:FB:96:0D:0E:04:D1:68:2D:46:49:36:C8:F2
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       0241
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/E9537D34D68E11F0804EF19CDAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 12:42:54 +0000
ROA not before:           Thu 11 Dec 2025 12:42:49 +0000
ROA not after:            Sun 31 Dec 2034 12:42:49 +0000
asID:                     329666
IP address blocks:        196.49.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 25 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Dec 11 12:42:49 2025 GMT
            Not After : Dec 31 12:42:49 2034 GMT
        Subject: CN=693abc4e-da1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:b2:dc:d3:9b:3c:ea:00:29:df:ed:d7:55:
                    62:aa:fd:4f:1e:df:6d:3b:89:ab:a8:5d:4b:c4:0f:
                    67:60:8e:b0:25:bd:e5:64:e2:12:a1:51:24:70:5d:
                    6f:fc:c2:ba:4c:d0:c5:22:79:e5:b4:3d:78:68:7c:
                    48:2e:ae:ba:b5:19:55:d2:f4:ad:6b:c4:31:da:3e:
                    6e:59:8e:ed:23:1c:07:10:6b:b0:e0:9c:8d:ee:da:
                    7a:e9:6e:31:ba:c4:44:21:12:4b:cd:12:f3:35:7a:
                    50:48:09:65:a2:0f:31:c7:53:e2:ee:b4:95:74:67:
                    5f:44:34:80:ef:7a:7d:a1:f4:41:bb:92:83:af:91:
                    3b:55:81:7b:e4:55:82:52:d6:e8:99:20:d3:17:ff:
                    7b:46:5d:7b:d4:b2:7f:bc:47:30:a5:e3:8b:ef:bb:
                    4c:bf:cd:11:50:d4:fb:15:27:c9:be:f7:af:5c:d1:
                    40:e8:4f:08:21:72:44:e4:ab:05:7b:5f:19:b1:8a:
                    02:c3:0d:ab:b2:03:51:79:4a:d7:67:4b:12:9d:40:
                    e1:b8:49:9c:c9:bf:a4:59:6f:1d:f4:6b:7f:39:f8:
                    5f:ce:db:d3:30:94:16:df:6e:4a:2e:ba:4f:2e:f0:
                    15:83:d0:f8:ec:7a:7a:9f:a2:34:89:0e:ef:e0:c4:
                    06:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:0D:F1:E7:B1:3E:FB:96:0D:0E:04:D1:68:2D:46:49:36:C8:F2
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/E9537D34D68E11F0804EF19CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:1d:f9:db:f7:be:4a:89:d0:9c:bd:00:92:94:c8:a7:ab:
         7f:14:7a:5e:80:fa:9f:b1:77:87:22:56:0f:a3:e4:15:58:c3:
         b3:fa:ef:5f:d8:77:53:7a:fc:cf:5a:27:d3:47:f5:a0:ff:13:
         c1:75:41:fc:0c:b4:45:81:9f:a5:40:4b:95:bf:87:79:28:78:
         a9:94:6e:61:f4:2d:56:5e:ed:ce:41:ad:20:1a:46:ca:4f:2a:
         60:53:9d:d3:0c:2d:82:df:a5:3f:0d:68:61:6d:ed:63:06:dd:
         30:fa:49:03:0b:31:20:db:07:2b:32:50:30:a0:fc:95:1b:00:
         e4:d8:36:f8:57:04:cb:5e:59:4e:8e:cf:3e:6b:38:2e:8e:9f:
         8a:03:00:c4:39:7b:94:65:be:13:25:17:37:8b:51:ee:23:42:
         cd:a0:97:24:cc:69:61:95:88:e3:76:fe:f6:4a:22:ff:2a:2f:
         15:ff:72:68:af:34:54:8b:9d:11:32:4c:61:e2:7c:cc:98:71:
         f2:b5:e5:de:a7:ab:a5:34:ad:9f:cb:1d:13:75:62:58:34:3f:
         d4:2b:54:7d:f3:65:f8:12:e1:9b:6e:7c:e8:e3:34:5f:73:52:
         9f:d4:15:08:fe:dd:85:bb:60:cf:62:f1:ac:b9:7c:6d:6e:04:
         af:31:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:16:58 2025 by rpki-client