This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/30AAB082FC6211F0840064D0DAE4EC9C.roa
File:                     30AAB082FC6211F0840064D0DAE4EC9C.roa (raw, json)
Hash identifier:          FTL97fxTl1eE12YVO6r15mzp9MJrM8fqutIMlkKBkag=
Subject key identifier:   1E:23:DA:96:E9:A5:44:B9:BC:62:C6:CC:53:84:2F:49:1B:1C:03:BB
Certificate issuer:       /CN=F3642A06AF/serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
Certificate serial:       02
Authority key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/30AAB082FC6211F0840064D0DAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 15:58:30 +0000
ROA not before:           Wed 28 Jan 2026 15:58:26 +0000
ROA not after:            Wed 31 Jan 2029 15:58:26 +0000
asID:                     329507
IP address blocks:        196.49.108.0/24 maxlen: 24
                          2001:43f8:1751::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
        Validity
            Not Before: Jan 28 15:58:26 2026 GMT
            Not After : Jan 31 15:58:26 2029 GMT
        Subject: CN=697a3226-a1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:5e:35:99:76:ce:30:3e:0a:a5:79:e4:ea:
                    16:53:1f:3d:a1:31:94:6c:d8:d8:ed:3b:e5:1f:f9:
                    cf:6f:67:1f:dd:af:dc:a1:40:8c:df:62:44:4f:2c:
                    0f:81:4a:49:88:46:12:18:d1:94:e7:7d:d1:d2:1e:
                    fe:82:c8:a7:24:72:2f:a7:29:54:94:ef:d8:51:4f:
                    8f:22:e9:c8:01:22:d7:37:da:2d:1b:00:e0:a6:4c:
                    8f:90:8d:1c:04:9c:e4:fb:88:42:6d:b1:4e:0e:f0:
                    85:bc:ed:68:24:25:68:7e:8a:87:e6:bf:6e:3a:22:
                    11:15:17:21:66:b8:60:8c:1b:96:b1:10:a0:41:a9:
                    7b:eb:a5:2f:08:43:a1:85:27:f1:b9:10:06:97:18:
                    0a:af:42:60:0d:54:f1:40:f4:da:7c:b9:7f:14:63:
                    5b:3d:7a:65:08:1e:a2:ab:ba:41:76:b6:59:1c:00:
                    b0:17:c5:29:2b:d0:70:8a:cf:54:f2:4e:59:c9:51:
                    21:41:ab:a6:b1:83:01:e2:ec:1b:71:d7:ea:bc:12:
                    56:8f:31:30:b1:c4:e6:28:70:c6:ea:3f:a0:df:67:
                    cd:05:88:0e:80:ff:b4:db:b1:c6:8b:75:cb:04:90:
                    d2:2a:89:41:9c:77:48:01:ef:ce:4d:82:a8:bc:66:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:DA:96:E9:A5:44:B9:BC:62:C6:CC:53:84:2F:49:1B:1C:03:BB
            X509v3 Authority Key Identifier:
                keyid:53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/30AAB082FC6211F0840064D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.49.108.0/24
                IPv6:
                  2001:43f8:1751::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:e2:8e:ff:79:2d:d1:89:98:94:dc:a0:fd:38:69:01:af:1b:
         fd:b8:b2:21:5b:1a:65:8c:2e:28:74:53:6e:0b:17:1e:19:cd:
         14:5a:de:c8:e0:9b:bc:39:ad:ae:7d:bf:ed:ff:a8:df:2d:77:
         a8:b1:3e:11:78:70:28:6b:29:0b:1c:17:60:a8:56:25:88:49:
         31:53:09:d3:a5:e6:78:7e:5c:16:f1:04:67:7f:00:ed:ef:ad:
         e0:3f:83:04:e5:b1:ae:4c:09:0e:32:f6:04:70:89:12:23:24:
         e7:55:56:0f:e0:c7:4a:7a:7e:e8:30:94:18:83:b7:ec:de:1f:
         18:6b:5c:44:d1:1b:40:5d:d2:8d:05:a0:7c:ca:3a:ee:15:80:
         8c:b6:9a:84:30:a6:20:3c:85:a1:28:f7:eb:87:e7:da:64:6f:
         07:f7:0f:7f:8f:6e:a9:ed:3d:0f:26:46:b4:83:e8:f4:1f:82:
         e7:6e:ae:03:58:0f:d1:34:7b:e8:71:ee:61:a3:bb:e1:e6:e3:
         98:b1:9a:84:f5:61:f4:a8:9c:60:13:3a:83:ce:c3:bc:cc:ac:
         98:c6:38:f4:39:96:b5:be:06:ad:6d:f0:1f:69:10:e1:e5:d8:
         86:64:cf:3e:c9:70:4f:60:bb:18:15:48:38:34:97:54:27:bd:
         18:7f:4c:9b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkEwNkFGMTEwLwYDVQQFEyg1M0U4NEFGMjk3NUExOEMxOUEzOTY1NTIzRkYwQjFC
Qzg0RTYwMjNEMB4XDTI2MDEyODE1NTgyNloXDTI5MDEzMTE1NTgyNlowGDEWMBQG
A1UEAxMNNjk3YTMyMjYtYTFkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALvQXjWZds4wPgqleeTqFlMfPaExlGzY2O075R/5z29nH92v3KFAjN9iRE8s
D4FKSYhGEhjRlOd90dIe/oLIpyRyL6cpVJTv2FFPjyLpyAEi1zfaLRsA4KZMj5CN
HASc5PuIQm2xTg7whbztaCQlaH6Kh+a/bjoiERUXIWa4YIwblrEQoEGpe+ulLwhD
oYUn8bkQBpcYCq9CYA1U8UD02ny5fxRjWz16ZQgeoqu6QXa2WRwAsBfFKSvQcIrP
VPJOWclRIUGrprGDAeLsG3HX6rwSVo8xMLHE5ihwxuo/oN9nzQWIDoD/tNuxxot1
ywSQ0iqJQZx3SAHvzk2CqLxmSbkCAwEAAaOCArYwggKyMB0GA1UdDgQWBBQeI9qW
6aVEubxixsxThC9JGxwDuzAfBgNVHSMEGDAWgBRT6Eryl1oYwZo5ZVI/8LG8hOYC
PTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJBMDYvNUE5ODQ2MDRGQzYwMTFGMEE5QTdFREM3REFFNEVDOUMvVS1oSzhw
ZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVS1oSzhwZGFHTUdhT1dWU1BfQ3h2SVRtQWowLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDJBMDYvNUE5ODQ2MDRGQzYwMTFGMEE5QTdFREM3REFF
NEVDOUMvMzBBQUIwODJGQzYyMTFGMDg0MDA2NEQwREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMQxbDAPBAIAAjAJAwcAIAFD
+BdRMA0GCSqGSIb3DQEBCwUAA4IBAQCQ4o7/eS3RiZiU3KD9OGkBrxv9uLIhWxpl
jC4odFNuCxceGc0UWt7I4Ju8Oa2ufb/t/6jfLXeosT4ReHAoaykLHBdgqFYliEkx
UwnTpeZ4flwW8QRnfwDt763gP4ME5bGuTAkOMvYEcIkSIyTnVVYP4MdKen7oMJQY
g7fs3h8Ya1xE0RtAXdKNBaB8yjruFYCMtpqEMKYgPIWhKPfrh+faZG8H9w9/j26p
7T0PJka0g+j0H4Lnbq4DWA/RNHvoce5ho7vh5uOYsZqE9WH0qJxgEzqDzsO8zKyY
xjj0OZa1vgatbfAfaRDh5diGZM8+yXBPYLsYFUg4NJdUJ70Yf0yb
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:55 2026 by rpki-client