This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/0D32F59AC9F111F095B1B88BDAE4EC9C.roa
File:                     0D32F59AC9F111F095B1B88BDAE4EC9C.roa (raw, json)
Hash identifier:          AaGM3Utx/h76yr99sLmTZfdTpfpTT+7g/7DI/iVajG8=
Subject key identifier:   AD:C7:A2:2E:E9:D5:55:0A:76:76:2C:E5:33:D7:CA:71:10:58:E7:5B
Certificate issuer:       /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial:       01DD
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/0D32F59AC9F111F095B1B88BDAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 11:22:40 +0000
ROA not before:           Tue 25 Nov 2025 11:22:33 +0000
ROA not after:            Mon 15 Dec 2025 11:22:33 +0000
asID:                     37680
IP address blocks:        155.93.160.0/23 maxlen: 24
                          155.93.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
                          rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 04:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC6C8AR, serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
        Validity
            Not Before: Nov 25 11:22:33 2025 GMT
            Not After : Dec 15 11:22:33 2025 GMT
        Subject: CN=69259180-adc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:11:31:c0:37:bc:75:49:b2:50:21:4a:e9:
                    f0:dd:b5:28:6b:25:a8:72:10:3e:c6:9c:67:22:3d:
                    b7:75:39:70:a9:71:c3:05:0e:98:62:df:69:fa:a0:
                    42:85:09:fd:af:b8:6c:c3:1d:cc:78:d4:2d:3e:dd:
                    5f:f1:6a:34:7a:18:67:67:9b:38:65:b0:f0:7a:23:
                    86:76:ef:32:30:eb:31:3c:00:32:62:16:0c:30:60:
                    4d:88:2d:c4:50:be:32:24:62:00:2b:dc:46:26:58:
                    90:d7:cd:81:6f:84:94:fc:aa:0f:17:48:83:d2:b3:
                    16:c1:68:35:5f:f4:6b:61:07:98:02:26:9b:fc:bc:
                    9e:d6:b4:1c:d0:a5:fb:02:25:c1:f6:95:ee:2f:75:
                    61:b5:12:d1:13:b8:4b:84:b0:87:75:44:f6:03:ff:
                    4b:c4:d6:41:a0:c0:8f:c8:8a:34:bb:f9:93:3c:9d:
                    45:5e:19:e6:c2:f7:58:74:d0:2a:72:dc:05:99:f9:
                    5f:b4:e7:43:58:ce:ab:42:ef:c1:6b:96:78:e8:66:
                    93:bd:bf:11:1d:5e:2a:77:6e:0a:e2:ff:d5:6a:93:
                    06:31:2d:14:4e:97:70:9b:b5:d8:1d:a0:d9:66:ef:
                    f6:03:3e:e2:ed:de:de:bd:43:8e:41:05:9e:5a:c2:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C7:A2:2E:E9:D5:55:0A:76:76:2C:E5:33:D7:CA:71:10:58:E7:5B
            X509v3 Authority Key Identifier:
                keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/0D32F59AC9F111F095B1B88BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.93.160.0/23
                  155.93.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:d1:6d:23:ed:5f:0c:00:7e:5c:6e:82:82:ec:2e:c2:01:
         f6:6d:8e:99:f6:ad:95:1c:e1:a4:54:53:12:c7:f8:26:3e:46:
         10:9c:77:b7:ab:ef:89:f6:27:10:38:b3:b8:60:8b:c3:da:8e:
         e1:bf:12:69:9f:58:b8:c0:54:95:16:a3:ba:01:26:02:b3:1f:
         3f:f4:62:38:e0:9c:83:ea:cc:f2:c7:d4:82:71:28:3f:c6:23:
         a3:4e:3b:f9:10:e7:44:5d:39:06:96:83:87:57:93:a5:35:97:
         15:f1:b4:f6:20:58:eb:d7:f6:13:30:d3:21:60:b4:1b:28:83:
         7b:06:93:db:78:2e:b5:84:74:5f:85:40:72:03:da:26:fb:35:
         86:34:63:fa:1e:39:22:e8:d7:14:0a:df:c4:4a:ab:74:0c:a9:
         97:2d:2d:80:c2:b1:47:d7:4e:c8:4d:e5:16:47:7f:99:26:21:
         ce:de:1b:e9:ab:8b:80:d4:32:39:90:6c:0f:71:d9:8d:0e:63:
         a1:16:4f:00:3b:4f:9e:8f:46:14:1d:fc:96:2e:46:54:c6:16:
         32:30:3b:cd:b8:71:5c:28:61:c5:8c:83:12:7b:e6:55:34:a7:
         6f:91:c1:c2:8d:a1:49:0c:3a:d5:bd:18:5b:58:5f:7a:2c:38:
         dc:43:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:14:59 2025 by rpki-client