This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/03F106D2D9A711F092519980DAE4EC9C.roa
File:                     03F106D2D9A711F092519980DAE4EC9C.roa (raw, json)
Hash identifier:          2A+bzaBxZS1FQCfP8W3xZV1hAnZdHW1Neqh6rEzQlxo=
Subject key identifier:   C2:61:2C:25:91:98:C9:AD:3B:A6:57:A0:9D:69:B1:75:2D:A3:E7:48
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0DFB
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/03F106D2D9A711F092519980DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 11:13:00 +0000
ROA not before:           Mon 15 Dec 2025 11:12:55 +0000
ROA not after:            Wed 15 Dec 2049 11:12:55 +0000
asID:                     8452
IP address blocks:        102.40.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3579 (0xdfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Dec 15 11:12:55 2025 GMT
            Not After : Dec 15 11:12:55 2049 GMT
        Subject: CN=693fed3c-32dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:5e:38:0d:03:6d:b0:1e:47:90:8c:32:99:
                    ea:3a:a4:94:00:5d:a5:69:13:73:9e:a2:bc:f8:24:
                    39:f5:7d:dc:2c:5c:69:80:33:eb:25:72:70:f3:80:
                    a4:6c:54:96:e5:d2:d0:4f:52:c1:43:91:2a:bb:ed:
                    53:52:39:e4:3f:78:96:8b:48:8d:b3:da:aa:0d:9c:
                    93:79:95:12:32:f5:b4:a8:74:c1:3b:13:51:e5:96:
                    85:a0:c6:e1:7d:16:03:bb:62:84:73:fb:8f:af:8f:
                    3f:33:3d:04:63:d4:d0:1c:b7:9c:3a:57:9b:f1:61:
                    e8:26:a6:40:a0:c7:3b:b3:97:bc:15:53:4c:5c:b3:
                    a4:a8:44:88:76:2d:1a:a9:ca:d2:a2:ed:de:6f:23:
                    9b:85:58:41:fd:da:fe:b9:ab:69:a0:11:55:ee:64:
                    87:8c:4d:5b:a2:0d:15:00:03:76:0a:32:af:0d:2b:
                    73:d8:a4:1c:4b:04:9e:89:f7:f2:37:9d:ef:bb:ed:
                    27:00:06:e5:c1:0c:9b:3d:9f:c2:1e:b2:07:80:46:
                    bf:5e:f1:38:15:7c:c2:ab:03:ad:73:a6:8e:3a:5b:
                    25:42:f0:3d:f4:27:44:91:fa:aa:0c:3d:d6:9b:c7:
                    f5:a9:b9:19:9e:32:f9:63:1a:0a:b5:56:02:47:74:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:2C:25:91:98:C9:AD:3B:A6:57:A0:9D:69:B1:75:2D:A3:E7:48
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/03F106D2D9A711F092519980DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.40.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:8a:70:85:14:95:b9:fe:96:cd:a9:c6:5e:0d:85:21:3e:
         0e:73:62:e4:e0:d8:4d:0b:01:1a:5b:1c:75:b4:6b:73:2e:44:
         81:40:d1:91:86:72:d2:ed:35:54:96:0f:a2:92:ed:8a:18:64:
         ba:f2:db:56:a9:40:db:f2:ac:29:73:fe:b8:da:fa:cf:c5:c8:
         28:34:c7:21:bd:dc:2b:35:80:d6:81:00:0a:eb:17:5b:8a:3b:
         5f:c4:49:af:78:16:5d:dd:03:7f:f1:fa:86:44:68:de:88:31:
         7d:a7:6d:9d:27:f0:08:b6:62:30:de:0a:58:39:8c:7a:73:bf:
         1c:97:5a:5c:3e:8b:4a:ac:a9:f3:73:88:90:d5:92:e5:8b:12:
         9f:3c:f4:e1:16:ae:76:58:88:79:01:7c:16:a7:2b:61:e9:90:
         8b:5f:26:59:92:e8:64:17:c7:8a:c8:ea:f9:b7:87:14:52:8e:
         58:ab:32:04:9c:96:c1:ca:17:c3:dd:96:ef:25:40:7e:2b:9f:
         d8:c8:9f:89:fc:f8:1a:bf:c2:1d:27:b6:2e:bd:2a:53:e2:58:
         aa:18:48:d0:97:c1:a5:9a:05:57:87:a4:49:f1:bc:6c:46:3d:
         f6:45:7d:29:73:87:1a:c2:23:3c:09:28:8f:b4:58:c0:f2:12:
         78:f4:c8:bb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDfswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBRjExMC8GA1UEBRMoRkQ1OUFDMjA3NzM1OUIwRDcyM0QyMEFBOTk5QThF
MTZBODRCNDE5MzAeFw0yNTEyMTUxMTEyNTVaFw00OTEyMTUxMTEyNTVaMBgxFjAU
BgNVBAMTDTY5M2ZlZDNjLTMyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMUV44DQNtsB5HkIwymeo6pJQAXaVpE3Oeorz4JDn1fdwsXGmAM+slcnDz
gKRsVJbl0tBPUsFDkSq77VNSOeQ/eJaLSI2z2qoNnJN5lRIy9bSodME7E1HlloWg
xuF9FgO7YoRz+4+vjz8zPQRj1NAct5w6V5vxYegmpkCgxzuzl7wVU0xcs6SoRIh2
LRqpytKi7d5vI5uFWEH92v65q2mgEVXuZIeMTVuiDRUAA3YKMq8NK3PYpBxLBJ6J
9/I3ne+77ScABuXBDJs9n8IesgeARr9e8TgVfMKrA61zpo46WyVC8D30J0SR+qoM
Pdabx/WpuRmeMvljGgq1VgJHdOvVAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUwmEs
JZGYya07plegnWmxdS2j50gwHwYDVR0jBBgwFoAU/VmsIHc1mw1yPSCqmZqOFqhL
QZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4QUVBMjI4L19WbXNJ
SGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19WbXNJSGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4
QUVBMjI4LzAzRjEwNkQyRDlBNzExRjA5MjUxOTk4MERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwNmKDANBgkqhkiG9w0BAQsF
AAOCAQEAQKaKcIUUlbn+ls2pxl4NhSE+DnNi5ODYTQsBGlscdbRrcy5EgUDRkYZy
0u01VJYPopLtihhkuvLbVqlA2/KsKXP+uNr6z8XIKDTHIb3cKzWA1oEACusXW4o7
X8RJr3gWXd0Df/H6hkRo3ogxfadtnSfwCLZiMN4KWDmMenO/HJdaXD6LSqyp83OI
kNWS5YsSnzz04RaudliIeQF8FqcrYemQi18mWZLoZBfHisjq+beHFFKOWKsyBJyW
wcoXw92W7yVAfiuf2Mififz4Gr/CHSe2Lr0qU+JYqhhI0JfBpZoFV4ekSfG8bEY9
9kV9KXOHGsIjPAkoj7RYwPISePTIuw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:51 2025 by rpki-client