This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa
File:                     ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa (raw, json)
Hash identifier:          J8FadMK7Ea9bvlPNiTTJTPLhHgQY+iwpbXSBMwmh9Yw=
Subject key identifier:   14:51:A6:19:70:BE:25:A4:9D:62:C9:23:6B:15:93:BA:34:75:39:0A
Certificate issuer:       /CN=F36CE290AF/serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
Certificate serial:       06
Authority key identifier: 46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 18:54:36 +0000
ROA not before:           Wed 10 Dec 2025 18:54:31 +0000
ROA not after:            Thu 09 Dec 2027 18:54:31 +0000
asID:                     16509
IP address blocks:        102.208.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CE290AF, serialNumber=461FD9B862A6829AE1E4FED2AC1246B2DD0C7914
        Validity
            Not Before: Dec 10 18:54:31 2025 GMT
            Not After : Dec  9 18:54:31 2027 GMT
        Subject: CN=6939c1ec-c233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:2a:0b:69:9d:94:4e:50:6f:59:fb:7c:d9:
                    7c:8e:53:b0:42:cd:76:ee:9c:8d:3f:90:5a:a5:06:
                    bc:8e:33:d7:0a:18:72:47:76:b9:1e:73:f8:8d:47:
                    5a:fb:dd:5f:b1:87:14:26:e7:39:78:25:56:67:d7:
                    68:af:c9:bf:d1:18:5b:9a:85:bc:e8:ad:b5:0b:f2:
                    50:0a:32:04:76:17:c1:5c:cf:ce:d4:30:22:d7:31:
                    b8:48:45:c5:f5:51:79:f1:69:f8:3e:ea:57:f5:43:
                    0c:e3:d3:75:d9:0d:e2:62:f1:9e:b1:fa:1d:c7:8f:
                    e8:0d:cb:0e:3c:7c:32:26:43:fc:89:8a:a6:92:56:
                    6e:69:43:50:e6:bb:dc:17:53:fa:e4:f6:7c:89:1f:
                    b4:80:0a:d3:63:c8:b3:24:a6:62:f1:db:52:02:00:
                    76:37:84:c4:0b:43:b5:98:2b:5b:6d:07:6e:d7:41:
                    43:dd:59:d7:76:8b:cc:69:ee:76:ed:62:9d:dc:2d:
                    28:86:92:ed:a7:2b:9e:25:03:75:63:f7:cc:85:04:
                    5b:08:70:63:48:bc:ce:e8:23:ea:d7:4f:70:4f:65:
                    fd:24:4a:f0:82:ad:d5:e8:09:fe:0b:e8:a8:d2:c1:
                    35:f6:5f:27:76:b1:2c:fe:f4:be:a6:d8:f4:96:29:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:A6:19:70:BE:25:A4:9D:62:C9:23:6B:15:93:BA:34:75:39:0A
            X509v3 Authority Key Identifier:
                keyid:46:1F:D9:B8:62:A6:82:9A:E1:E4:FE:D2:AC:12:46:B2:DD:0C:79:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh_ZuGKmgprh5P7SrBJGst0MeRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CE290/3F9913C6D4C211F0820C77D7DAE4EC9C/ABDEFC98D5F911F0ADEB97ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.208.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:5b:95:13:07:45:bd:88:7c:6a:41:42:89:b6:b2:d0:c6:
         8d:7d:4f:f1:32:12:7a:48:f3:05:ca:47:cc:ed:26:da:60:ce:
         d9:cb:af:f3:52:6c:99:48:34:f4:73:9f:47:d9:b7:11:3c:15:
         ed:32:9c:bc:ab:0f:88:a8:88:f0:d9:85:12:89:0c:0c:ab:2d:
         b6:0a:0f:f8:ce:28:7e:0c:1c:5a:d2:b4:f5:ed:35:f8:d3:0a:
         4a:d9:92:5d:cd:ee:7e:28:e7:f5:b5:9b:4a:52:c6:df:23:7a:
         76:e1:3b:d0:bc:80:f9:84:08:55:b1:df:03:f1:15:34:4a:82:
         bc:4d:82:1d:07:1b:86:c7:cc:20:dd:73:1a:63:c7:ec:e3:95:
         12:83:f1:40:1c:5d:44:55:35:3d:95:00:7f:c0:be:03:54:63:
         03:8a:51:7d:be:46:46:39:57:fe:b9:df:3e:84:0d:67:f5:73:
         92:c5:7a:18:a6:c4:10:2a:79:b3:6e:3b:7d:55:1d:69:86:48:
         19:67:c0:a2:96:86:37:c2:16:72:63:68:e8:7d:17:2f:9c:03:
         2f:ed:82:c7:a7:d8:88:4e:6f:dd:a9:9e:46:ea:ed:19:52:d6:
         eb:fd:54:50:15:b0:d7:2a:e2:16:ae:ae:65:cf:16:b1:5d:37:
         45:59:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:19:39 2025 by rpki-client