This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/099F7328D9A911F096B18E8EDAE4EC9C.roa
File:                     099F7328D9A911F096B18E8EDAE4EC9C.roa (raw, json)
Hash identifier:          vKz4MwaF+U/JBZIu/j/X4SY3DZu7/0WQLVi3O6PdX+c=
Subject key identifier:   8D:07:58:88:B4:3F:16:E8:A9:32:0B:89:37:0D:92:74:66:1A:02:A8
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0DF4
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/099F7328D9A911F096B18E8EDAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 11:27:29 +0000
ROA not before:           Mon 15 Dec 2025 11:27:24 +0000
ROA not after:            Wed 15 Dec 2049 11:27:24 +0000
asID:                     8452
IP address blocks:        213.158.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3572 (0xdf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI, serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Dec 15 11:27:24 2025 GMT
            Not After : Dec 15 11:27:24 2049 GMT
        Subject: CN=693ff0a0-e235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:56:b3:d1:b6:ad:72:74:c4:7f:2b:79:e8:1d:
                    63:35:34:46:a9:9d:47:85:2e:6a:d5:49:f3:5c:5f:
                    93:66:ea:a9:0d:5e:e4:1d:b6:f2:53:37:7e:60:b0:
                    ec:3f:ba:5d:1d:a0:e5:20:43:98:41:cc:c4:f3:2c:
                    7a:7f:d9:27:3a:96:c5:05:59:94:c9:a2:58:86:8c:
                    95:38:88:b7:39:fe:94:9b:1f:e8:e4:0e:1a:7b:a2:
                    4a:2f:4d:51:22:4e:34:63:99:84:5c:79:87:8b:ac:
                    0f:1d:31:9e:fd:37:c9:c5:33:3b:5b:06:3b:72:f5:
                    b7:f9:fb:6c:85:88:d3:8e:e7:a1:06:fb:67:da:e8:
                    96:1c:dd:47:6b:6b:21:6e:eb:f3:ac:b4:83:cf:11:
                    c9:c2:04:ee:2d:09:d2:f5:58:f6:65:24:83:60:46:
                    1c:eb:aa:73:51:7d:04:aa:04:8c:f0:e4:84:26:2a:
                    03:af:07:3b:6d:4c:83:e0:9f:4d:3e:35:02:fe:01:
                    91:20:84:fb:4b:dd:29:5a:09:49:b2:37:74:c4:81:
                    c6:c8:57:79:6b:d7:91:7e:a6:89:ec:2a:d5:0b:8c:
                    63:9e:90:18:c3:f1:c5:2c:eb:42:0d:b8:f1:d4:10:
                    e0:29:2a:f1:44:af:75:45:1e:34:35:f8:06:5d:67:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:07:58:88:B4:3F:16:E8:A9:32:0B:89:37:0D:92:74:66:1A:02:A8
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/099F7328D9A911F096B18E8EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.158.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d1:59:3b:72:61:da:a5:77:3c:9b:ea:27:e7:c5:a6:d6:6a:52:
         72:9c:f3:6a:27:ac:29:83:b6:b2:45:27:71:25:58:9b:b6:e8:
         2d:5e:8a:9e:a2:3e:45:1c:82:f9:87:c0:24:38:df:5a:db:1a:
         19:c1:82:03:9f:76:8b:50:05:7d:07:02:5d:45:fe:fb:73:3f:
         38:82:84:a0:5d:92:a9:dd:13:29:56:3c:6c:f2:ee:55:79:18:
         08:90:4b:6c:8c:59:fa:cc:83:1f:22:16:19:9f:ad:1e:7c:28:
         f5:8c:00:84:f8:25:6e:fd:33:8e:4e:1b:47:d6:bb:3a:26:11:
         a8:3a:db:e3:c3:fa:47:4f:a8:46:dc:ae:da:2f:90:56:a0:9e:
         2e:74:3d:fd:37:8f:3e:49:12:a5:32:87:ab:ae:e2:8a:2b:47:
         f0:b1:b0:7d:4a:eb:e9:8b:da:7c:e0:47:e0:04:bb:50:88:c7:
         ac:d0:55:77:c8:97:e6:89:9b:d8:f0:3f:35:39:ff:98:2b:82:
         b0:89:ad:42:09:8b:11:27:6b:cc:3b:a3:e5:66:0d:82:04:dd:
         d3:3f:0c:60:1f:92:7d:9d:2e:a9:64:7c:c8:96:23:61:b8:fc:
         d8:6a:a0:59:46:c3:53:7b:93:df:96:28:af:fa:ad:43:25:6d:
         c3:f8:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:45 2025 by rpki-client