This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/079ED4EED4ED11F0B23179DDDAE4EC9C.roa
File:                     079ED4EED4ED11F0B23179DDDAE4EC9C.roa (raw, json)
Hash identifier:          mQiwz+Lyy5Wnp4r5beDcoqvBfm5DT/2V6ah49ZEkaZA=
Subject key identifier:   5C:2C:E8:7C:82:22:EB:E1:59:CE:E0:5A:46:B2:5F:79:B8:64:19:07
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       046F
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/079ED4EED4ED11F0B23179DDDAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 10:51:35 +0000
ROA not before:           Tue 09 Dec 2025 10:51:29 +0000
ROA not after:            Tue 31 Dec 2030 10:51:29 +0000
asID:                     15964
IP address blocks:        197.159.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Dec  9 10:51:29 2025 GMT
            Not After : Dec 31 10:51:29 2030 GMT
        Subject: CN=6937ff37-bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:f4:9b:09:c3:71:78:2e:7a:8a:fe:a6:7f:
                    79:78:5c:37:2d:71:2f:37:38:fc:0d:d9:d7:42:60:
                    c0:9f:69:ae:fb:4e:8d:61:5c:f6:92:2f:92:e5:7d:
                    b7:12:40:51:ef:0c:d4:49:5e:86:0f:65:2f:fe:09:
                    a3:eb:0d:45:f5:63:bd:a9:19:0c:04:25:4e:73:9d:
                    5a:15:c5:72:ff:06:b6:a2:00:6d:52:75:90:d8:97:
                    05:86:25:a1:cd:82:a6:84:e6:92:36:a2:fc:1e:cf:
                    09:88:70:4a:97:64:2a:92:6b:13:79:77:83:7b:f4:
                    ed:7e:6d:21:9a:07:95:2a:71:11:1b:16:3c:82:a7:
                    f0:4c:24:d1:35:f5:82:86:be:01:37:71:6e:42:95:
                    8c:a0:d8:7d:37:5b:2b:3d:c3:0a:16:64:8c:58:60:
                    b0:3a:94:c6:c2:ea:6f:65:e9:87:62:84:03:41:4e:
                    bb:1a:94:c7:f1:f3:05:89:8a:45:cd:cc:2e:5f:63:
                    0d:27:a9:20:70:58:85:8d:69:00:c0:f7:77:87:23:
                    2e:62:4c:b9:33:9f:22:60:1b:2f:48:58:6f:3b:80:
                    c7:f6:b0:35:ba:e5:0f:b2:05:62:ca:df:ed:83:68:
                    46:fb:d4:a6:ff:ae:16:d2:29:39:26:29:e8:59:a7:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:E8:7C:82:22:EB:E1:59:CE:E0:5A:46:B2:5F:79:B8:64:19:07
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/079ED4EED4ED11F0B23179DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.159.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d9:45:b6:0f:37:7f:a1:6d:d5:a0:1c:75:2f:84:16:88:52:
         00:f0:d9:1d:16:87:6b:e2:c3:6c:6b:77:e4:ca:da:db:bc:61:
         f7:7d:95:39:48:59:84:91:64:79:3c:2e:00:e9:86:1e:08:4f:
         6b:dc:bf:ce:11:18:84:a0:ff:e3:62:af:98:f4:a9:b0:42:60:
         aa:74:53:ba:bd:67:0e:18:ec:32:43:12:61:1c:a6:b3:7c:92:
         7e:db:48:16:39:db:18:b8:6c:ea:b6:2e:ab:b1:b5:b0:58:89:
         c1:49:ce:0d:5c:d5:47:4e:a5:b8:c4:fd:22:22:f2:00:18:8b:
         46:6c:0e:7c:6f:e5:43:06:2c:8b:71:01:8a:5e:e8:66:7b:87:
         af:0c:5d:c1:34:43:6c:48:08:2e:5f:bc:e0:6d:8f:dc:67:ba:
         b9:2e:ee:be:12:d8:90:80:db:ce:1b:5d:a7:80:03:c7:69:05:
         db:c9:59:69:7c:50:6a:04:0a:42:1e:98:6e:a3:c6:61:8d:0f:
         5a:9d:f4:99:62:e8:a1:00:92:5d:61:ec:db:9d:9d:e1:51:0f:
         a9:79:39:91:78:6f:39:03:ca:72:2e:8a:64:d6:5a:cd:bd:71:
         7d:a8:87:dd:05:ec:01:5d:02:90:23:c3:37:93:a3:83:e5:5b:
         70:80:38:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:19:24 2025 by rpki-client