This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/0B035958DA7311F0BD9C4B87DAE4EC9C.roa
File:                     0B035958DA7311F0BD9C4B87DAE4EC9C.roa (raw, json)
Hash identifier:          1YCwQ08Er0/oJv0rugAKvka/AUZZE4KlC5UipfKoXzE=
Subject key identifier:   94:13:B4:64:AA:6B:64:06:D8:2A:38:73:DA:72:28:2F:88:E3:60:9A
Certificate issuer:       /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial:       05
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/0B035958DA7311F0BD9C4B87DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 11:33:29 +0000
ROA not before:           Tue 16 Dec 2025 11:33:25 +0000
ROA not after:            Tue 31 Dec 2030 11:33:25 +0000
asID:                     329647
IP address blocks:        102.204.40.0/22 maxlen: 22
                          2c0f:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
        Validity
            Not Before: Dec 16 11:33:25 2025 GMT
            Not After : Dec 31 11:33:25 2030 GMT
        Subject: CN=69414389-96f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:e1:22:7d:23:45:b0:3a:80:e6:fa:31:5c:
                    95:8f:a1:68:f0:d6:70:41:17:eb:64:03:04:40:02:
                    2f:d3:94:cb:9b:2b:26:0d:dd:9f:5a:df:75:b4:81:
                    88:ee:01:15:e5:73:62:36:7c:b1:0e:c8:2a:08:c4:
                    a5:db:60:1e:5e:dd:20:e8:43:6d:78:18:34:e0:31:
                    ab:36:ce:6a:de:57:86:32:51:f2:7d:d5:79:e7:9b:
                    a4:a4:5a:b4:83:97:4d:b7:e5:7b:e7:be:0c:70:c0:
                    1e:96:62:f8:0d:38:79:b8:bf:e6:0e:0c:da:4d:8f:
                    af:01:76:f7:53:30:97:c9:3c:2b:4c:d6:6a:49:da:
                    21:ff:f7:e5:30:43:74:f9:1a:eb:2e:a1:dd:6c:40:
                    23:6b:30:4e:88:46:09:6f:1a:31:2f:ae:73:17:34:
                    4b:c6:84:cd:48:70:f8:6f:6c:07:97:d0:68:2f:ea:
                    8f:d9:4f:5c:c4:0d:c1:bf:46:4e:73:cd:7d:9e:a5:
                    7d:d3:9e:f1:42:8a:a9:97:e3:9f:21:02:f7:70:7b:
                    a2:93:8e:49:66:e7:35:90:fa:96:e5:c4:2b:55:ba:
                    c4:c7:85:b0:c9:39:f8:f0:09:ca:86:61:09:be:10:
                    ba:e1:19:b7:ee:9e:3b:5e:de:fc:d0:27:6a:72:e2:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:13:B4:64:AA:6B:64:06:D8:2A:38:73:DA:72:28:2F:88:E3:60:9A
            X509v3 Authority Key Identifier:
                keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/0B035958DA7311F0BD9C4B87DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.40.0/22
                IPv6:
                  2c0f:3dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:1d:bd:ff:0e:41:56:85:e5:c2:12:69:41:5c:81:7a:48:f4:
         f3:ef:80:70:11:17:6f:6b:73:a5:c5:29:8b:e4:34:5c:4b:00:
         a2:ee:49:02:ae:77:9e:6a:9b:fa:d1:f0:60:6f:1f:c6:83:c9:
         85:7c:48:ab:6e:f4:e3:c4:fd:17:bd:b3:1c:17:55:91:eb:d4:
         e6:a8:c3:d8:7b:5a:92:c5:8d:de:95:ce:7c:ce:0d:71:18:9c:
         43:ef:0e:4a:0b:74:a5:3c:02:e9:92:97:a8:f3:4e:1a:c7:d6:
         10:71:e6:5f:5c:60:14:63:1b:0d:35:15:db:9e:e9:ec:71:ff:
         f3:a6:83:1c:05:8b:24:ca:78:5b:96:95:e4:13:31:ec:46:64:
         11:d2:08:47:bd:23:f9:69:08:6b:4a:63:20:dd:03:bd:ca:3c:
         42:51:19:09:dd:66:00:0d:0d:50:2f:20:89:bd:b4:36:4a:57:
         8d:3c:59:26:cd:9c:e8:99:f0:73:eb:31:66:b4:fc:41:2e:c8:
         9b:b5:90:25:56:3d:3e:fc:21:34:f8:b6:f5:28:d5:61:4b:74:
         d5:4a:49:d9:24:92:7f:74:16:81:a8:00:84:68:da:0f:7f:cf:
         b5:8a:84:89:bd:19:7a:d9:f1:0f:5f:e8:49:a2:14:fc:27:e4:
         29:2d:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:19:26 2025 by rpki-client