This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/F514235AD4E311F091552FA7DAE4EC9C.roa
File:                     F514235AD4E311F091552FA7DAE4EC9C.roa (raw, json)
Hash identifier:          Z5F0JLY3mYskMg+U3W1krrAPY7K8I3NgMQAO+hmJvvI=
Subject key identifier:   E0:53:B1:6E:D0:56:E1:C0:9C:29:CA:96:08:1C:64:DD:61:8E:1E:DF
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       01F5
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/F514235AD4E311F091552FA7DAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 09:46:39 +0000
ROA not before:           Wed 10 Dec 2025 09:46:33 +0000
ROA not after:            Fri 10 Dec 2027 09:46:33 +0000
asID:                     16637
IP address blocks:        196.4.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Dec 10 09:46:33 2025 GMT
            Not After : Dec 10 09:46:33 2027 GMT
        Subject: CN=6937effe-7b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:65:96:4d:69:a1:b0:9c:6c:03:5d:4b:d8:
                    e2:ef:8b:71:03:cb:b4:70:44:48:25:29:ad:74:f5:
                    57:66:6d:00:e8:b5:f1:cf:fa:1c:f7:b2:9f:e0:b3:
                    65:f3:19:62:71:5e:cd:ef:cd:53:ac:78:98:86:65:
                    2a:e8:f0:b4:cc:c5:cc:f1:c0:0d:be:33:b3:a7:66:
                    fc:fa:81:70:f3:f6:24:5f:07:5b:9f:17:2b:0e:6b:
                    f8:82:9c:cc:2b:86:19:1d:7a:5a:63:5b:76:7d:c3:
                    26:a8:13:da:2f:01:21:7b:5f:de:d6:b2:f3:df:9c:
                    f0:73:fd:62:80:72:50:66:07:58:e6:f4:f9:f2:6b:
                    24:fb:10:eb:42:73:ee:0a:0e:02:a0:44:85:fd:b0:
                    1b:6a:bb:3d:85:c5:15:1d:7f:f1:40:c3:a7:85:4f:
                    5d:a5:16:da:aa:28:06:89:90:1d:19:74:5b:87:63:
                    ab:ce:6d:df:ec:e9:d0:06:63:ab:32:cc:85:a7:78:
                    7e:d6:5d:2e:e1:a6:93:f6:76:9c:f5:88:e9:9c:69:
                    c1:bb:17:e8:32:ba:c8:8c:10:be:d4:9a:2a:83:9b:
                    76:c9:cd:3c:00:8f:3b:6a:0c:ca:3d:ed:05:3b:f1:
                    32:57:d4:f3:54:a5:4e:e3:4f:44:8d:51:34:9e:12:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:53:B1:6E:D0:56:E1:C0:9C:29:CA:96:08:1C:64:DD:61:8E:1E:DF
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/F514235AD4E311F091552FA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.4.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:ad:f4:e6:57:16:c7:ba:26:c6:18:02:7e:c1:b3:bf:33:
         60:3d:2f:de:09:3b:c1:ce:01:fd:db:ba:93:c6:d1:6b:c3:1d:
         27:08:22:dd:28:21:fb:b4:5b:23:5c:f3:61:84:f1:dd:6f:92:
         08:14:f3:68:7c:b9:cd:bb:10:3f:13:d2:c5:d2:15:96:b7:88:
         cc:96:da:94:88:c9:1d:e1:2a:ed:ec:01:33:c3:5f:8e:c7:ee:
         2b:df:c5:26:ec:18:aa:ae:6e:e0:48:7b:57:09:62:a3:29:53:
         e1:fc:d2:ed:86:38:ae:89:2f:48:9b:99:78:95:3e:00:62:46:
         50:e9:98:9a:9f:4d:14:9a:84:c9:11:0b:c1:24:08:50:9d:89:
         ab:b4:49:b9:2b:b2:61:87:85:19:af:5e:59:c6:f2:95:a9:e4:
         7b:13:d0:de:7b:fa:71:7a:1f:5a:a5:bd:03:3d:e9:46:58:c5:
         89:22:f8:23:b2:51:52:76:4d:2f:13:aa:d9:78:d5:b9:45:b8:
         1b:ca:0d:ef:9e:88:03:a0:6a:d7:e9:6c:a8:e6:ab:e9:52:27:
         b9:ee:02:24:37:be:8b:6f:8f:4d:27:19:00:1a:dc:7a:11:f7:
         81:31:80:4f:9b:3c:d5:fc:ff:ae:5b:b7:62:81:95:d7:fd:15:
         7a:b2:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:25:28 2025 by rpki-client