This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/61DC7730DCFF11F084B31E79DAE4EC9C.roa
File:                     61DC7730DCFF11F084B31E79DAE4EC9C.roa (raw, json)
Hash identifier:          RFmc2pe6J4tZTf5Zu+6VgaZEp8ibw3jxL16vDYLsA6E=
Subject key identifier:   F5:DF:4A:4E:3A:F3:23:06:38:2D:24:8A:BA:FD:A7:CD:06:37:17:3D
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0337
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/61DC7730DCFF11F084B31E79DAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 17:23:07 +0000
ROA not before:           Fri 19 Dec 2025 17:23:01 +0000
ROA not after:            Tue 31 Dec 2030 17:23:01 +0000
asID:                     36912
IP address blocks:        102.244.198.0/24 maxlen: 24
                          102.244.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Dec 2025 00:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Dec 19 17:23:01 2025 GMT
            Not After : Dec 31 17:23:01 2030 GMT
        Subject: CN=694589fb-986f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:3c:6a:05:e0:3f:9d:f6:70:82:be:f2:ad:
                    92:21:81:42:0e:88:79:9f:04:f6:f0:c2:52:c7:b1:
                    68:08:7c:64:17:16:b9:41:b2:50:2f:10:2e:f0:69:
                    97:e3:53:9c:a6:73:14:72:a3:9e:19:4d:b1:9f:e7:
                    b9:8a:5b:84:46:88:b6:02:47:ea:c7:08:f8:2c:90:
                    53:eb:d8:78:87:ad:d5:92:a1:e1:69:76:ea:2d:c8:
                    8c:c7:65:3c:b0:59:af:3d:88:01:31:b0:c0:e7:b2:
                    04:6c:97:5e:f5:5a:2b:8e:23:84:c4:22:bd:17:d3:
                    c3:ac:9d:09:1b:38:9c:c5:fd:2d:e4:c6:b5:40:ec:
                    cf:38:9b:da:51:80:97:49:8c:64:86:d1:da:dd:14:
                    6f:00:db:46:69:10:eb:13:ac:88:31:47:cf:c9:dc:
                    b2:94:2a:d6:5e:9c:b0:21:91:e7:7c:21:03:d6:c3:
                    92:1f:d6:c8:1c:06:94:d5:ca:04:5c:8a:5c:57:14:
                    f7:b6:eb:a6:b4:01:3a:0b:41:5a:50:0c:63:8b:a2:
                    05:14:57:d0:0e:ac:55:e0:52:f8:ad:66:85:31:a2:
                    11:91:d9:3a:49:8c:ed:e1:de:b0:01:dd:5f:37:1d:
                    cf:e0:70:3c:04:a7:60:d3:df:7d:8c:b0:35:08:65:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:4A:4E:3A:F3:23:06:38:2D:24:8A:BA:FD:A7:CD:06:37:17:3D
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/61DC7730DCFF11F084B31E79DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.244.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:d9:b6:48:45:d2:be:9e:ba:a9:00:94:b0:cb:9c:2d:ae:
         82:66:4c:1d:18:e1:a0:ac:e4:80:9a:ca:78:54:f4:39:ca:b3:
         e7:f2:02:95:5c:68:ec:58:c8:99:b7:74:6c:86:18:e2:9e:53:
         a0:ba:c3:a3:e5:80:6f:25:55:07:7c:09:6a:ea:65:01:a9:95:
         5d:46:d8:bb:2e:50:88:33:61:9a:f4:20:c5:7b:ba:6a:18:ca:
         19:f3:8a:c8:1d:f9:17:96:c5:4f:61:2d:54:60:78:45:14:79:
         d4:59:21:73:14:fd:a7:e1:b5:c7:7a:36:4f:d5:05:c4:da:0f:
         d6:96:d3:0e:c9:6c:a2:ff:2f:27:9c:35:8a:0d:12:e7:4b:61:
         1c:0e:06:57:51:29:28:3b:cf:14:d2:d4:aa:d3:07:95:1d:23:
         20:aa:f9:5e:1d:fe:b2:ff:17:23:24:72:3e:13:93:e6:76:63:
         0b:d0:6a:b7:bb:fd:7b:d2:84:10:20:7c:ca:12:c9:29:47:89:
         52:8c:5a:07:37:eb:2d:97:ee:4f:d8:f0:dd:f3:6a:de:20:9b:
         29:1f:4b:10:be:d0:f7:4a:ea:cb:29:cf:dc:6d:32:4a:37:14:
         d3:62:ba:df:22:35:05:d4:ba:73:4e:d6:98:dc:be:25:7b:e7:
         a3:9e:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:22:57 2025 by rpki-client