This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/35BD0DCCD9A811F0AA584C88DAE4EC9C.roa
File:                     35BD0DCCD9A811F0AA584C88DAE4EC9C.roa (raw, json)
Hash identifier:          f9TCjeq2fcGfLO+SkJPOqxOUdhtc6lIy0wxxx5QROTM=
Subject key identifier:   4F:44:E8:19:22:25:1C:BA:A5:C0:C3:7C:76:49:91:E8:41:66:E7:9C
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0DFF
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/35BD0DCCD9A811F0AA584C88DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 11:21:33 +0000
ROA not before:           Mon 15 Dec 2025 11:21:28 +0000
ROA not after:            Wed 15 Dec 2049 11:21:28 +0000
asID:                     8452
IP address blocks:        197.32.0.0/11 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3583 (0xdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Dec 15 11:21:28 2025 GMT
            Not After : Dec 15 11:21:28 2049 GMT
        Subject: CN=693fef3d-a653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:83:1c:5b:ac:1c:85:4c:ce:28:e5:95:98:fd:
                    c1:9e:1b:fb:3b:80:95:f5:9b:e6:da:05:bd:ab:70:
                    53:f2:4d:0d:2f:99:60:5c:58:14:9d:6d:15:fd:3b:
                    1f:ca:f0:93:c9:42:80:0b:91:23:ee:28:d8:3a:42:
                    b5:e6:34:61:58:07:49:88:f1:65:5b:be:99:a8:4b:
                    74:11:a4:d6:a1:41:a7:34:94:a4:77:26:73:c8:be:
                    2f:c0:7b:aa:fc:1d:81:67:c6:aa:b5:9e:8c:c5:a7:
                    7d:80:36:c5:c8:f8:c9:44:1f:3d:e7:1e:1e:b9:0d:
                    f4:bd:33:e8:e4:6f:16:fc:9c:47:54:4a:51:f9:29:
                    40:40:e8:46:2b:9a:b1:cc:4f:a7:25:69:5b:77:ef:
                    38:51:e4:fa:a8:3b:f7:6c:b8:81:99:b0:00:86:c2:
                    b2:1d:e2:5c:82:95:eb:4c:19:39:9b:23:93:a4:dd:
                    ca:f6:11:9f:0f:26:72:68:b7:8b:d4:1e:e9:0a:6b:
                    ef:32:b6:27:8d:7b:f8:32:a9:87:8c:13:6b:34:ef:
                    03:db:1f:62:47:c9:84:65:a2:15:3b:a4:7c:b3:b9:
                    e5:31:e8:35:58:4d:a2:af:37:fb:8c:41:a1:a9:23:
                    bf:64:ec:a3:da:68:be:f3:31:ae:92:b5:f0:00:42:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:E8:19:22:25:1C:BA:A5:C0:C3:7C:76:49:91:E8:41:66:E7:9C
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/35BD0DCCD9A811F0AA584C88DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.32.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         31:99:ff:5f:d6:2f:ff:f5:a6:8c:12:0f:cc:95:d2:a2:dd:ae:
         69:58:1f:dc:6a:95:d6:cd:78:92:e9:22:5c:32:20:b0:e0:55:
         74:a3:39:f4:50:e3:8d:02:12:99:d2:58:29:57:14:95:5c:10:
         0e:a5:c3:17:d0:1f:81:0a:d3:31:4e:c7:e0:67:20:cc:f2:69:
         57:0d:07:c7:7a:4b:77:1b:1f:82:ca:02:89:93:ca:03:c8:97:
         2d:5c:38:4a:91:28:46:50:12:7d:60:48:a3:36:93:f9:12:95:
         e5:d6:a9:88:2d:76:7d:c0:a6:e3:cb:68:c2:2d:08:44:a1:e6:
         8a:88:cd:11:b5:2d:0f:f1:5c:0a:5f:9e:8a:46:a6:cd:19:4c:
         8a:5e:49:d3:e9:d8:d9:f8:55:7a:16:86:67:00:9d:c5:5d:d2:
         da:90:a8:71:7c:87:f1:b6:9f:11:c7:a7:d0:d7:94:02:5f:2d:
         b3:00:d4:61:90:b5:ed:5e:01:6c:8a:5c:1f:a8:08:a9:c6:d4:
         ff:54:2d:6e:00:05:4d:59:42:0d:f0:71:50:9f:84:a5:0b:04:
         5e:b5:fe:d4:dc:82:65:d1:48:d0:1f:99:75:ac:24:40:20:80:
         ef:15:7f:bb:39:71:8b:56:b0:aa:53:00:37:e7:33:69:56:d7:
         47:e5:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:50 2025 by rpki-client