This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B12A4EF8D50611F0B488B37CDAE4EC9C.roa
File:                     B12A4EF8D50611F0B488B37CDAE4EC9C.roa (raw, json)
Hash identifier:          Kkd7AHPCBFTF8AgLW6zKremVMu0A1qolD/VBT0eKD40=
Subject key identifier:   C3:78:4F:7B:21:A4:8E:2B:4D:64:46:C0:29:A2:B4:15:6F:F1:EE:C0
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0FBB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B12A4EF8D50611F0B488B37CDAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 13:55:17 +0000
ROA not before:           Tue 09 Dec 2025 13:55:12 +0000
ROA not after:            Wed 09 Dec 2026 13:55:12 +0000
asID:                     214967
IP address blocks:        196.251.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4027 (0xfbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: Dec  9 13:55:12 2025 GMT
            Not After : Dec  9 13:55:12 2026 GMT
        Subject: CN=69382a45-cbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:6b:39:82:d2:9e:33:cf:0f:b5:f8:28:59:
                    42:2a:23:b4:2b:a6:43:9a:2a:42:d9:49:a6:47:3f:
                    74:b3:ce:4b:90:36:2b:0c:9a:e4:e9:bc:ad:7d:d6:
                    d0:e2:8a:15:e1:d6:1d:ff:ac:1b:e7:41:17:c4:b9:
                    20:3c:bc:86:70:03:43:cd:71:33:00:76:dc:62:37:
                    42:7f:80:2a:5f:fd:dd:ec:b2:68:68:03:94:aa:8c:
                    6b:36:4a:63:68:da:12:0f:60:93:79:a4:f4:ea:9b:
                    34:47:ae:c1:a7:ff:b1:91:39:03:35:89:39:f8:e1:
                    8b:64:9c:05:f0:63:cc:60:7b:42:9a:78:89:9f:c1:
                    5a:db:0c:70:9b:04:45:f3:3f:83:7e:5c:09:f6:7d:
                    72:a2:70:e8:41:32:ae:c3:f5:3e:a3:98:03:3e:e5:
                    31:46:f0:b7:89:ec:76:36:71:b0:e2:05:49:f7:33:
                    2f:30:5c:10:ce:89:fb:8b:cb:07:2f:10:9a:a8:da:
                    ae:e3:27:b5:e5:94:e6:4e:43:1a:d6:9f:bc:c8:d8:
                    52:a2:47:69:2d:f1:7f:d0:6b:2b:cb:ad:07:56:4f:
                    ba:1b:1a:4d:d3:48:bd:cd:06:62:8b:69:3d:0f:8e:
                    82:9d:ec:f9:1e:46:a7:bc:57:ad:af:66:f9:76:9b:
                    c5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:4F:7B:21:A4:8E:2B:4D:64:46:C0:29:A2:B4:15:6F:F1:EE:C0
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/B12A4EF8D50611F0B488B37CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:78:2a:e6:2f:4b:fc:0e:1b:03:3d:a9:dd:61:b3:db:93:4b:
         5b:83:30:0b:11:27:d4:8b:91:99:29:6f:33:65:92:53:9a:1c:
         03:66:b4:c9:c4:47:b1:d7:64:a8:5b:49:73:a1:d6:ae:7b:97:
         32:ce:07:11:20:25:0f:58:35:cd:7c:cf:d5:26:ac:9f:12:8c:
         34:f2:fe:22:92:04:de:6c:ac:dd:c0:e7:8c:00:a2:6d:10:8b:
         75:f2:b7:40:70:91:77:2c:6e:0c:b3:64:70:70:36:75:b6:d3:
         95:63:a7:93:66:61:d8:0d:ff:17:47:a0:03:18:7e:1b:a9:e1:
         0f:b0:71:c3:fc:7a:b4:2e:16:71:92:f9:92:32:a2:e8:9c:ee:
         57:17:7d:47:03:2a:cc:02:19:df:43:b7:22:2d:77:78:20:60:
         2e:3c:96:d2:2b:71:fb:07:83:e9:58:80:06:34:bd:aa:2f:68:
         37:e5:9c:3a:1c:a6:ef:8b:4f:9b:6e:d3:63:c1:ad:a7:fe:25:
         97:c0:e3:a7:7f:93:5e:6d:c4:d5:0c:35:d6:ef:a9:53:e9:ea:
         a6:3e:9c:59:d8:22:fd:d3:30:0f:c2:6d:50:e9:bf:7f:4b:62:
         37:bc:75:21:af:d1:eb:29:44:6b:68:c0:82:20:47:01:9e:2c:
         17:4c:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:50:08 2025 by rpki-client