This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/96867EB2DF1C11F094CF00C3DAE4EC9C.roa
File:                     96867EB2DF1C11F094CF00C3DAE4EC9C.roa (raw, json)
Hash identifier:          2iRal7m8J1Na7NGEbMCXUA7KVyYMn6zcBErYIoEeTqw=
Subject key identifier:   78:4E:6F:87:88:F5:E4:47:14:60:15:72:49:14:50:C9:C3:79:81:3F
Certificate issuer:       /CN=F369B2BBAF/serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
Certificate serial:       23
Authority key identifier: 1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/96867EB2DF1C11F094CF00C3DAE4EC9C.roa
Signing time:             Mon 22 Dec 2025 09:57:13 +0000
ROA not before:           Mon 22 Dec 2025 09:57:08 +0000
ROA not after:            Thu 31 Dec 2026 09:57:08 +0000
asID:                     37054
IP address blocks:        102.205.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Jan 2026 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B2BBAF, serialNumber=1D3B0590DB837025C9A2F14B349ED2510D554796
        Validity
            Not Before: Dec 22 09:57:08 2025 GMT
            Not After : Dec 31 09:57:08 2026 GMT
        Subject: CN=694915f9-a413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:09:80:82:ca:94:a5:63:07:c6:03:e3:5a:
                    c7:46:46:43:ac:8b:7d:5e:08:52:6d:c4:68:bd:0f:
                    81:b8:56:cb:21:4c:e0:33:17:0f:ac:1e:bf:b2:70:
                    9b:fe:84:ab:88:8e:b9:67:1d:02:36:97:2e:7c:1d:
                    23:ad:44:23:46:39:ae:a4:d9:09:27:16:05:82:cb:
                    47:1f:55:25:46:d5:c1:1e:14:00:99:51:03:c9:e3:
                    c9:4e:c4:6a:48:3d:f3:73:13:0d:b3:69:80:2b:95:
                    11:be:2c:ea:f5:90:ba:c0:c0:a0:2b:07:ee:66:23:
                    87:c1:ee:cc:f0:9b:10:b2:51:88:b2:a2:78:b6:98:
                    3c:9d:1a:ec:7f:e7:61:bd:cb:18:7b:ff:21:87:9b:
                    66:98:89:86:2a:18:be:13:03:f5:8f:c3:e4:b9:a4:
                    25:1b:85:ed:f6:73:90:b1:dd:58:6f:10:7f:d7:cb:
                    ba:8e:53:41:55:6b:23:5a:bc:2f:ef:91:d4:6e:13:
                    d8:8b:1d:f6:83:4b:30:d8:a8:64:87:34:17:0d:da:
                    8c:47:81:2d:9c:26:5b:84:18:0a:94:3c:b5:92:c8:
                    29:f4:5f:d4:44:28:87:65:c9:e8:74:24:f6:b0:a1:
                    2c:6e:7f:b5:d7:fa:81:35:22:7b:7c:a5:15:32:11:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:6F:87:88:F5:E4:47:14:60:15:72:49:14:50:C9:C3:79:81:3F
            X509v3 Authority Key Identifier:
                keyid:1D:3B:05:90:DB:83:70:25:C9:A2:F1:4B:34:9E:D2:51:0D:55:47:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HTsFkNuDcCXJovFLNJ7SUQ1VR5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B2BB/8F5CB3B2C6B311F092156092DAE4EC9C/96867EB2DF1C11F094CF00C3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:59:2a:21:d3:af:65:fc:3b:4b:74:ce:55:3b:71:20:90:80:
         45:d6:a0:bd:e9:97:c8:98:a9:16:58:3e:0b:b3:89:10:d9:1a:
         7a:6e:ce:4d:03:af:df:74:b1:92:42:b5:fb:88:1b:b7:76:10:
         01:6f:76:8c:d7:ec:67:d4:ca:6d:7e:bc:6f:72:eb:f3:3f:a5:
         2d:17:13:22:a7:34:97:68:68:36:19:85:5d:9f:4c:2f:53:ca:
         8c:3d:97:8b:6c:d1:e4:e4:fb:d0:7c:5b:ce:2b:d2:7c:0f:5c:
         50:7f:16:1e:54:60:75:5f:f3:f4:10:33:c5:3b:fb:f2:0d:4f:
         39:a2:5c:e6:bb:bb:37:bf:bf:ba:4c:55:9e:29:87:44:97:09:
         d1:1a:cf:11:cc:cc:6e:8f:13:c9:a6:16:c6:aa:fd:8a:06:b6:
         82:1c:3e:65:59:96:95:76:25:ff:de:ad:98:78:1e:34:f7:b2:
         c3:65:0e:6e:2f:14:98:52:2d:79:64:26:f7:1e:ed:46:5a:a9:
         31:e6:75:85:26:6e:01:6b:cc:3a:ce:f4:a4:da:9e:86:38:82:
         af:64:02:f2:99:c9:2e:69:67:c6:db:54:ea:8d:03:09:17:b3:
         8e:af:50:78:80:c2:23:25:37:4d:3f:f4:d0:fc:3f:c5:45:67:
         4d:5b:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 15:06:10 2026 by rpki-client