This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
File:                     4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa (raw, json)
Hash identifier:          t3t/ULtLRNcbsM47r17d7x+jX/SQtkTH2ucz5zxnc2s=
Subject key identifier:   2D:F6:D5:11:0A:1B:D6:EF:F0:FD:54:30:38:6D:38:8B:8A:F7:18:3C
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       16BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 06:59:43 +0000
ROA not before:           Fri 19 Dec 2025 06:59:37 +0000
ROA not after:            Sun 19 Dec 2027 06:59:37 +0000
asID:                     834
IP address blocks:        102.129.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5822 (0x16be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Dec 19 06:59:37 2025 GMT
            Not After : Dec 19 06:59:37 2027 GMT
        Subject: CN=6944f7df-7aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:b9:ac:49:67:af:1f:62:16:5f:c0:d4:f7:
                    3a:e0:79:d8:f9:df:ce:ea:2b:5f:98:6f:11:0f:a4:
                    5c:be:e0:4c:ff:74:2f:16:25:cd:33:44:c8:6c:be:
                    48:77:c9:b9:6e:1b:4d:69:b5:78:f1:60:44:5b:53:
                    ed:4a:1d:68:6b:b1:0c:da:18:ac:a7:b2:d5:79:df:
                    fa:73:90:3d:a9:da:fb:77:7f:8a:2f:ca:82:8d:fa:
                    fb:b9:74:39:05:ac:fd:91:c5:49:bb:be:24:cf:96:
                    80:0b:1e:e6:d1:37:8d:2f:17:5b:6a:7a:86:a4:02:
                    16:3c:90:89:d1:61:e1:b7:61:39:79:50:52:46:e9:
                    35:18:12:9c:97:99:bf:62:a3:80:17:26:9f:98:74:
                    c4:3b:8f:be:9d:f9:17:01:dc:55:e5:49:7c:88:05:
                    c5:8a:c6:b6:26:5c:40:59:0d:0b:64:08:43:b0:49:
                    0f:01:57:fc:ae:03:b2:a2:37:d4:bf:ed:12:2b:4e:
                    99:7b:cd:a8:d0:b9:65:2c:14:b4:f5:ef:4b:c4:c4:
                    1a:b9:0e:0e:d1:a6:78:aa:c5:25:82:b7:e8:49:ac:
                    66:d3:20:4a:a1:4b:72:ae:59:d6:36:0d:1a:57:dc:
                    0f:0e:a1:53:8e:e7:bb:d7:2c:a4:6f:53:ba:50:f3:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:D5:11:0A:1B:D6:EF:F0:FD:54:30:38:6D:38:8B:8A:F7:18:3C
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:de:f2:3a:d4:27:b9:a9:ed:32:b8:21:8d:4c:9c:46:db:68:
         28:34:af:1c:9b:a2:6c:d0:c9:0d:66:7d:e3:d8:fb:37:5c:54:
         df:ba:ea:21:10:09:28:a9:5e:00:6f:62:52:91:15:7c:74:31:
         22:96:f1:aa:51:b2:05:a1:47:77:66:e7:15:d2:0a:71:70:a2:
         33:05:82:a1:43:26:3b:79:fc:3e:50:f3:6c:27:74:49:16:5e:
         10:da:58:f4:0e:c3:45:f4:23:bb:d0:61:5b:0a:72:04:b2:68:
         41:3e:f5:2f:88:94:64:ba:27:d0:63:d6:f6:4a:96:e5:9e:05:
         45:89:3c:fb:3f:75:6a:96:1e:00:a1:63:eb:12:d4:68:31:ad:
         a5:9e:76:66:ed:fe:7f:13:01:81:65:c7:9d:d1:18:e4:83:43:
         46:ae:11:ed:d8:9b:9b:2f:af:67:68:44:75:30:d5:20:53:a6:
         81:25:b2:08:aa:68:dd:c0:92:9a:84:be:e2:de:9d:ac:12:d3:
         43:84:f0:95:5e:d3:95:d3:fd:75:3c:e5:b5:bb:9d:26:2f:90:
         75:f3:fe:68:a2:7d:83:57:93:1e:49:a8:61:e6:56:7e:2e:2c:
         f2:52:b6:eb:c0:9c:9e:5c:df:dd:86:c6:1c:d6:96:8c:1c:db:
         eb:de:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:40 2025 by rpki-client