This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa
File:                     AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa (raw, json)
Hash identifier:          dpaLUZ7X2+eBahFfaBRBpZGcldL+iPoSovpQWiyqWHw=
Subject key identifier:   DB:F3:C2:56:91:1B:C9:67:69:A6:42:39:B4:93:6D:75:4E:08:65:E5
Certificate issuer:       /CN=F36BD41EAF/serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
Certificate serial:       02
Authority key identifier: 18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa
Signing time:             Mon 15 Dec 2025 13:26:39 +0000
ROA not before:           Mon 15 Dec 2025 13:26:34 +0000
ROA not after:            Tue 31 Dec 2030 13:26:34 +0000
asID:                     329647
IP address blocks:        102.204.40.0/22 maxlen: 22
                          102.204.40.0/24 maxlen: 24
                          102.204.41.0/24 maxlen: 24
                          102.204.42.0/24 maxlen: 24
                          102.204.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 05:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD41EAF, serialNumber=18F0CFE49FA802D607FFB730145786D3950BD230
        Validity
            Not Before: Dec 15 13:26:34 2025 GMT
            Not After : Dec 31 13:26:34 2030 GMT
        Subject: CN=69400c8f-10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:54:92:05:d6:20:4a:1b:42:7a:2c:30:f5:
                    e6:50:cb:78:90:71:06:18:8e:58:b4:01:a3:f0:fc:
                    bf:4c:58:91:25:d6:85:0c:55:6c:00:ed:10:70:12:
                    ff:f8:49:0d:9c:7e:4a:64:1f:eb:f3:67:ae:0d:f1:
                    62:df:42:23:48:47:7c:a7:a4:3a:13:39:f8:6c:6c:
                    9d:37:85:17:57:5b:ec:ad:dd:7e:b2:7c:73:2f:6b:
                    02:7d:8c:8c:44:0a:a9:4b:a8:5b:af:c8:4a:5e:a4:
                    e2:2b:3b:ff:a2:d5:ae:e5:42:53:8a:e2:ae:0a:d7:
                    8e:27:7e:07:fe:f4:b8:ec:b9:54:09:d2:9a:3d:44:
                    00:ba:42:75:4e:ea:cd:82:40:d4:61:77:00:0e:6c:
                    60:98:6c:63:e4:2b:9d:e9:e1:8d:1f:d4:e5:0e:ee:
                    8b:f5:c1:ae:42:0e:75:ef:11:c6:f2:32:21:40:2b:
                    53:cb:63:32:74:0a:12:1b:fd:a1:8c:0d:31:9f:c6:
                    e1:74:9a:b3:1c:b1:3e:f3:2e:9e:11:0f:d2:1b:70:
                    16:13:2e:8d:68:06:d4:c0:ef:b4:a1:04:5a:17:e5:
                    33:5f:99:8e:2b:f0:3d:f6:89:f4:d5:b3:b7:2d:43:
                    4e:97:a3:c5:11:70:62:9c:d2:f5:ac:9f:eb:3d:c2:
                    f8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F3:C2:56:91:1B:C9:67:69:A6:42:39:B4:93:6D:75:4E:08:65:E5
            X509v3 Authority Key Identifier:
                keyid:18:F0:CF:E4:9F:A8:02:D6:07:FF:B7:30:14:57:86:D3:95:0B:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/GPDP5J-oAtYH_7cwFFeG05UL0jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GPDP5J-oAtYH_7cwFFeG05UL0jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD41E/3040E1D6D9B511F0A143A8D7DAE4EC9C/AF914E0ED9B911F0BC8E84F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:1c:37:36:a0:bc:1a:20:a6:40:08:4e:86:15:dd:51:9b:f8:
         54:76:11:30:a1:2f:27:c9:7b:22:cc:63:9a:c1:40:e9:5b:7c:
         8b:c6:69:63:2e:26:c0:fc:0b:e9:4d:7a:26:fc:31:a2:db:84:
         4e:fe:7c:b4:df:4e:a6:42:e9:5a:f7:a9:c1:06:04:e2:a7:6c:
         41:93:3a:7f:db:37:52:25:40:8b:7a:3f:a3:91:e5:e6:d9:fb:
         84:56:5e:80:3d:31:69:1f:11:8d:4c:6f:c4:c7:7f:46:06:20:
         76:e4:d2:97:f3:37:f7:79:0c:51:e4:5c:e7:cf:97:5b:88:12:
         b1:01:d7:1a:11:b9:6e:ef:26:31:2f:40:74:f7:34:94:58:f5:
         d8:92:4d:35:c9:b0:81:12:ad:88:42:b6:65:4c:72:0b:f8:f9:
         f7:29:46:59:38:a9:84:b1:1e:30:3f:4b:04:29:b0:a6:89:38:
         d0:d3:db:fe:5b:0f:6c:c1:10:d4:a9:3d:da:aa:10:2d:02:09:
         ce:7f:08:4c:be:a0:3d:83:98:4d:8c:a5:f8:27:5f:e0:15:a0:
         0d:3d:93:80:8c:31:da:12:0e:73:79:4a:6a:fd:4f:70:33:ce:
         e8:a8:e4:75:cf:8a:c3:a5:64:2d:8b:7c:bd:49:b1:c7:7e:19:
         dc:02:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:20:42 2025 by rpki-client