This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa
File:                     6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa (raw, json)
Hash identifier:          xOgvdv+bzOxwVoZHfk68mQJwNieIGm7/dHTt7BIs17g=
Subject key identifier:   B7:E9:2D:63:FC:91:70:26:61:0A:F4:D9:26:4D:CA:8E:24:3F:1C:BA
Certificate issuer:       /CN=F36CC4C5RI/serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
Certificate serial:       02
Authority key identifier: A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa
Signing time:             Sun 21 Dec 2025 13:10:29 +0000
ROA not before:           Sun 21 Dec 2025 13:10:12 +0000
ROA not after:            Mon 31 Dec 2035 13:10:12 +0000
asID:                     36992
IP address blocks:        62.114.0.0/16 maxlen: 24
                          62.139.0.0/16 maxlen: 24
                          62.140.64.0/18 maxlen: 24
                          62.193.64.0/18 maxlen: 24
                          80.75.160.0/21 maxlen: 24
                          80.75.168.0/21 maxlen: 24
                          80.75.176.0/21 maxlen: 24
                          84.36.0.0/16 maxlen: 24
                          84.233.0.0/17 maxlen: 24
                          194.79.96.0/19 maxlen: 24
                          213.152.64.0/19 maxlen: 24
                          213.154.32.0/19 maxlen: 24
                          217.52.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.mft
                          rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 12:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC4C5RI, serialNumber=A07031808822B28A51CEA276D4133D708AA514ED
        Validity
            Not Before: Dec 21 13:10:12 2025 GMT
            Not After : Dec 31 13:10:12 2035 GMT
        Subject: CN=6947f1c4-feb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:8f:9f:eb:3d:01:7e:58:10:1f:70:15:1f:
                    dc:a3:e4:5f:71:7f:8b:8b:e8:0d:9f:d7:78:99:cd:
                    cd:cd:be:e0:d3:b5:a3:dc:b3:56:94:fd:7b:6a:c7:
                    0a:76:17:37:79:a1:ce:fa:eb:3e:d6:d2:0b:84:01:
                    1d:9d:54:16:b4:ac:5c:76:06:3b:fb:70:13:6c:3a:
                    58:a4:a5:1d:90:70:f0:24:33:f8:22:e0:b1:f8:2e:
                    90:14:79:cf:34:03:dd:1d:cc:fe:26:77:5b:2f:55:
                    1a:3b:10:99:f4:54:3d:f2:4a:ca:4d:cb:63:6a:b5:
                    35:a8:9b:b3:2b:c1:f7:66:9d:3d:81:e6:d9:07:42:
                    c4:21:4c:1d:d9:b8:4b:5b:f2:31:46:5f:b4:ca:03:
                    0a:f3:67:b4:6f:42:1c:29:51:78:f5:22:ee:b1:e4:
                    8a:e5:af:12:b8:fa:df:7e:8d:02:74:fd:b6:2b:4e:
                    1c:93:bb:60:25:73:8f:bf:04:dd:be:77:46:09:13:
                    07:9c:c4:3e:47:2c:12:5b:74:dc:05:cc:01:bf:cc:
                    21:d6:42:37:c6:e9:ae:32:5b:40:50:d9:65:9c:c3:
                    37:7d:d3:4c:45:df:e5:92:4b:8a:cd:c1:6c:ac:0e:
                    be:00:be:3d:13:09:a4:28:2b:dc:d3:55:05:ad:91:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E9:2D:63:FC:91:70:26:61:0A:F4:D9:26:4D:CA:8E:24:3F:1C:BA
            X509v3 Authority Key Identifier:
                keyid:A0:70:31:80:88:22:B2:8A:51:CE:A2:76:D4:13:3D:70:8A:A5:14:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/oHAxgIgisopRzqJ21BM9cIqlFO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/oHAxgIgisopRzqJ21BM9cIqlFO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC4C5/F0A872C6DE6B11F0986944EADAE4EC9C/6BB245F8DE6E11F0A9CDBA7BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.114.0.0/16
                  62.139.0.0/16
                  62.140.64.0/18
                  62.193.64.0/18
                  80.75.160.0-80.75.183.255
                  84.36.0.0/16
                  84.233.0.0/17
                  194.79.96.0/19
                  213.152.64.0/19
                  213.154.32.0/19
                  217.52.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         92:36:93:87:35:7c:03:63:41:e6:76:14:89:73:44:88:c2:23:
         e0:35:46:97:5f:f2:79:28:84:83:b3:a3:1b:af:cd:ab:22:37:
         25:11:ae:9d:b4:9b:04:b7:34:50:ce:12:08:b3:67:1f:57:a3:
         8d:ab:e2:9e:70:fd:db:dd:74:2e:6f:03:13:db:fb:20:57:38:
         e8:f4:5e:28:81:de:21:1a:37:90:3a:49:7f:e8:7f:8d:18:aa:
         16:43:64:d4:25:32:88:5d:58:d7:a4:ff:e4:73:87:56:24:2a:
         5e:7a:89:0c:23:34:3d:50:b9:e1:28:0e:c6:6a:37:8c:b1:c1:
         bd:d8:8d:e6:63:13:60:8b:07:cb:68:ef:ae:da:12:27:54:3d:
         97:ac:08:bb:37:e4:d2:62:7a:8c:2b:ee:19:77:ac:b2:ab:90:
         e3:5b:76:d7:22:79:26:d9:10:1c:ef:15:b8:8c:8e:0d:7b:2b:
         16:05:88:a4:4d:c0:96:3b:a7:76:2e:f2:08:1a:57:1a:52:8f:
         c7:de:47:12:72:bf:d0:25:b1:3b:8f:8e:3d:4d:22:ab:23:5a:
         29:1e:4a:9b:ff:d5:50:49:27:17:60:ba:fe:0c:45:ae:63:5d:
         19:4d:69:8d:c7:c4:1a:c8:c2:c2:0e:93:c9:c8:9d:7a:9f:16:
         33:dd:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:51:41 2025 by rpki-client