This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9E702CACED3D11F0AB3F07DDDAE4EC9C.roa
File:                     9E702CACED3D11F0AB3F07DDDAE4EC9C.roa (raw, json)
Hash identifier:          XBSjJs2iA617/JNd+euthBuNSdR0visyQW1rAzOx3Aw=
Subject key identifier:   9D:91:FB:D2:EC:87:7B:EC:AC:CE:A1:8F:E6:E7:CB:0C:BA:25:1C:C1
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       07AF
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9E702CACED3D11F0AB3F07DDDAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 09:28:56 +0000
ROA not before:           Fri 09 Jan 2026 09:28:47 +0000
ROA not after:            Wed 09 Jan 2030 09:28:47 +0000
asID:                     9304
IP address blocks:        102.216.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 02:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1967 (0x7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Jan  9 09:28:47 2026 GMT
            Not After : Jan  9 09:28:47 2030 GMT
        Subject: CN=6960ca58-6011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:a7:88:45:f6:1b:1d:45:b4:ab:cc:1f:f3:
                    c8:73:b4:50:b4:7b:00:de:d6:e6:a4:2c:3e:0b:7f:
                    2c:22:31:1a:50:ff:95:42:d2:be:a6:c5:b5:d9:be:
                    5b:d9:62:03:89:9f:89:d6:4c:80:9d:2e:cf:b2:15:
                    62:98:91:f4:c2:c1:a7:64:e0:ec:1e:71:e0:02:6d:
                    a7:de:57:18:c4:a6:d7:89:26:d8:89:d2:69:ea:e8:
                    8d:16:7d:d3:17:31:a1:e4:be:48:05:67:24:21:1e:
                    ed:0f:1f:aa:3f:8e:b2:59:30:47:83:88:83:08:53:
                    15:a2:3e:07:b3:6c:e9:25:06:5b:8e:36:c9:01:15:
                    99:f0:13:e4:dd:14:c7:60:4d:97:d8:38:12:65:5c:
                    55:c6:50:c8:66:41:d2:2d:4d:65:e9:12:81:2b:41:
                    db:af:fb:9b:a4:40:df:16:49:cf:40:8b:17:a0:1e:
                    cd:31:bc:67:f4:de:fa:35:f0:45:b5:6f:f4:8b:80:
                    aa:fe:a5:56:a6:aa:98:18:fe:66:c8:d0:06:9b:6e:
                    4b:17:9b:53:3e:82:a6:3d:c2:f2:c5:ed:3f:20:5c:
                    ed:8e:e5:3a:b8:87:a9:b9:9d:8a:52:63:90:f4:07:
                    3c:b9:19:0e:a5:f5:36:38:13:5a:03:85:79:22:34:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:91:FB:D2:EC:87:7B:EC:AC:CE:A1:8F:E6:E7:CB:0C:BA:25:1C:C1
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/9E702CACED3D11F0AB3F07DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:eb:0b:21:fe:6a:2a:c1:a9:7b:b4:0a:1f:98:bf:e3:9e:
         85:fb:d7:3a:85:6f:6b:8d:2e:ab:90:46:75:50:79:58:f4:63:
         5f:b2:e6:ff:69:85:f7:97:b7:e2:96:70:f3:33:bf:b7:0d:18:
         e3:3c:ce:9d:a8:86:b9:48:22:bf:a4:7b:44:0d:6d:4a:d1:34:
         b2:2b:09:db:d9:36:e7:50:9a:f3:d7:6d:c5:d9:13:58:2a:76:
         cf:fd:4f:3a:7c:ef:75:5d:d4:bb:73:c8:1d:e3:68:92:f5:ac:
         9a:50:eb:34:ee:db:58:f9:2e:7c:5c:b5:6d:a4:dd:e9:07:b1:
         f3:84:3e:f0:db:66:a9:b4:0b:69:41:b4:4d:35:7a:af:c1:6d:
         f3:2a:8c:d3:16:d7:2b:01:9d:d5:f3:d0:00:02:ec:5d:2f:e3:
         35:6c:a7:0a:c7:df:c0:77:72:4b:da:5d:16:1f:b7:c1:df:2c:
         1f:d0:72:28:9c:dd:49:3c:01:d9:24:d9:de:44:4d:8e:df:8a:
         c7:eb:d5:78:a2:bd:1a:d2:98:3a:9d:dd:db:b8:be:6f:36:e8:
         b3:6b:01:e8:fe:e0:4c:fc:38:2b:6b:14:0b:5a:83:69:7d:11:
         2c:4b:f9:57:21:cc:f8:1b:33:bc:66:b4:90:02:ed:be:ea:7a:
         08:65:c9:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB68wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ2NTlBRjExMC8GA1UEBRMoNjBBMEU1RDFBQzY2QzhBRTNCN0M5RTZBOEVGNUJD
MDRCOEJCQjg4RTAeFw0yNjAxMDkwOTI4NDdaFw0zMDAxMDkwOTI4NDdaMBgxFjAU
BgNVBAMTDTY5NjBjYTU4LTYwMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCo0aeIRfYbHUW0q8wf88hztFC0ewDe1uakLD4LfywiMRpQ/5VC0r6mxbXZ
vlvZYgOJn4nWTICdLs+yFWKYkfTCwadk4OweceACbafeVxjEpteJJtiJ0mnq6I0W
fdMXMaHkvkgFZyQhHu0PH6o/jrJZMEeDiIMIUxWiPgezbOklBluONskBFZnwE+Td
FMdgTZfYOBJlXFXGUMhmQdItTWXpEoErQduv+5ukQN8WSc9AixegHs0xvGf03vo1
8EW1b/SLgKr+pVamqpgY/mbI0AabbksXm1M+gqY9wvLF7T8gXO2O5Tq4h6m5nYpS
Y5D0Bzy5GQ6l9TY4E1oDhXkiNKjVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnZH7
0uyHe+yszqGP5ufLDLolHMEwHwYDVR0jBBgwFoAUYKDl0axmyK47fJ5qjvW8BLi7
uI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVBNDBENTc3L1lLRGww
YXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lLRGwwYXhteUs0N2ZKNXFqdlc4QkxpN3VJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjE0NjU5LzY2NTZERTc0NkRGODExRUNCQ0MyMTA3NjVB
NDBENTc3LzlFNzAyQ0FDRUQzRDExRjBBQjNGMDdERERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2FEwDQYJKoZIhvcNAQEL
BQADggEBAJBu6wsh/moqwal7tAofmL/jnoX71zqFb2uNLquQRnVQeVj0Y1+y5v9p
hfeXt+KWcPMzv7cNGOM8zp2ohrlIIr+ke0QNbUrRNLIrCdvZNudQmvPXbcXZE1gq
ds/9Tzp873Vd1LtzyB3jaJL1rJpQ6zTu21j5LnxctW2k3ekHsfOEPvDbZqm0C2lB
tE01eq/BbfMqjNMW1ysBndXz0AAC7F0v4zVspwrH38B3ckvaXRYft8HfLB/Qciic
3Uk8Adkk2d5ETY7fisfr1XiivRrSmDqd3du4vm826LNrAej+4Ez8OCtrFAtag2l9
ESxL+VchzPgbM7xmtJAC7b7qeghlyUc=
-----END CERTIFICATE-----
Generated at Sun Jan 18 10:02:08 2026 by rpki-client