This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/663044EADE6E11F08634B67BDAE4EC9C.roa
File:                     663044EADE6E11F08634B67BDAE4EC9C.roa (raw, json)
Hash identifier:          LCOmuTQcwycNhMw2CFZDyotBnrzvHLmf2qdHUbahKo0=
Subject key identifier:   D8:22:02:39:4D:88:AB:4F:C1:23:B0:2F:96:8E:E4:8C:F0:34:AA:DB
Certificate issuer:       /CN=F36CC4C5AF/serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C
Certificate serial:       02
Authority key identifier: 3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/663044EADE6E11F08634B67BDAE4EC9C.roa
Signing time:             Sun 21 Dec 2025 13:10:19 +0000
ROA not before:           Sun 21 Dec 2025 13:10:12 +0000
ROA not after:            Mon 31 Dec 2035 13:10:12 +0000
asID:                     36992
IP address blocks:        41.64.0.0/15 maxlen: 24
                          41.176.0.0/16 maxlen: 24
                          41.199.0.0/16 maxlen: 24
                          154.236.0.0/14 maxlen: 24
                          2001:42b8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 12:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5AF, serialNumber=3F9CD8F8513EEC057BF24CDBCD7F3BFA3A743E7C
        Validity
            Not Before: Dec 21 13:10:12 2025 GMT
            Not After : Dec 31 13:10:12 2035 GMT
        Subject: CN=6947f1bb-3014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e8:80:94:22:f0:53:50:8d:d9:3f:4c:de:5a:
                    07:79:ad:33:69:1c:aa:81:01:71:d7:28:a3:ad:27:
                    f5:10:05:18:ff:29:4f:b8:79:57:33:2d:5f:33:b8:
                    70:33:ce:b9:5e:ed:0c:72:07:14:1b:98:fe:82:4c:
                    a0:fb:70:04:52:77:3d:50:fa:c8:81:ca:5a:74:02:
                    82:a8:83:81:fe:12:84:2e:a9:29:7d:28:e4:2c:2a:
                    c6:b3:d5:50:c6:bd:9c:03:6e:5f:85:12:a1:64:fb:
                    d9:b9:b3:28:d0:4d:6a:e2:eb:87:9c:c2:f4:16:5b:
                    5e:77:a3:96:97:da:d8:cb:65:5e:c9:98:f9:5f:65:
                    3c:52:b4:ab:e7:52:0f:7a:3b:fc:da:61:ed:5a:95:
                    d6:b6:64:f7:83:cf:6f:63:14:2a:77:5b:84:eb:35:
                    b8:b6:b2:4d:15:2c:93:e9:7a:bf:fe:28:f7:40:ae:
                    ad:43:19:4a:a5:8e:47:f5:05:24:4a:78:58:a6:7a:
                    c4:ab:88:3b:a1:94:00:51:c3:cb:a9:bd:34:b8:bd:
                    75:aa:dc:68:0b:69:24:69:c2:84:81:59:3a:d4:79:
                    08:65:8f:a7:82:24:b1:1e:0a:d9:a1:cf:31:72:aa:
                    24:fc:ad:14:df:67:8a:24:1e:80:ba:49:78:d8:07:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:02:39:4D:88:AB:4F:C1:23:B0:2F:96:8E:E4:8C:F0:34:AA:DB
            X509v3 Authority Key Identifier:
                keyid:3F:9C:D8:F8:51:3E:EC:05:7B:F2:4C:DB:CD:7F:3B:FA:3A:74:3E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/P5zY-FE-7AV78kzbzX87-jp0Pnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P5zY-FE-7AV78kzbzX87-jp0Pnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/04CAE4B4DE6C11F0BBD54FEADAE4EC9C/663044EADE6E11F08634B67BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.64.0.0/15
                  41.176.0.0/16
                  41.199.0.0/16
                  154.236.0.0/14
                IPv6:
                  2001:42b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:69:fa:15:5b:b7:f9:07:27:8c:d5:e8:74:7e:73:3a:be:65:
         a1:a5:15:ad:0d:dd:8a:a1:65:ee:a3:5a:80:50:cb:0e:2c:84:
         24:df:84:14:84:4d:c7:7c:bf:ff:7f:cc:2d:4f:65:cd:b9:57:
         a8:9b:83:87:ee:a1:15:38:b4:43:46:64:9e:8d:b8:29:5c:8a:
         9c:c0:2f:d6:e4:ad:e0:b6:85:d7:bc:c0:0d:0a:ea:2b:f9:16:
         75:6c:a3:8d:1e:38:1a:c8:b2:c8:e7:df:d7:50:2c:ee:49:aa:
         06:61:28:4a:6b:4c:0c:93:a2:5e:a9:fe:31:7c:31:8b:12:22:
         3e:4a:4d:e2:06:39:d6:09:ae:38:0e:6c:8e:9d:f8:a9:54:8b:
         eb:c8:af:96:e1:3d:89:4d:f0:2a:66:cf:5c:6e:30:95:35:dc:
         9d:6c:49:14:05:aa:76:d7:2b:b7:b8:1a:4a:d2:cc:50:8d:7a:
         54:67:27:40:f1:73:64:13:b3:21:de:08:00:93:ce:f1:af:3b:
         c7:55:7c:f2:e5:0b:26:25:86:3f:41:68:2f:e2:5c:35:92:55:
         6d:52:a8:01:26:4c:fc:55:be:63:5d:55:1e:08:42:48:3c:16:
         42:60:40:0b:3b:ed:2d:6c:e2:3e:c6:2f:e2:4f:a4:05:3c:a1:
         57:f1:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:51:36 2025 by rpki-client