This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/3EF11F18020811F183569A86DAE4EC9C.roa
File:                     3EF11F18020811F183569A86DAE4EC9C.roa (raw, json)
Hash identifier:          LwF0R8Np+QyIRUBb++EGu0f4gRD7bktO+etHrbXuPpc=
Subject key identifier:   58:31:17:A3:ED:CE:2B:A1:31:67:5B:75:4E:DF:0F:AD:86:78:1F:3F
Certificate issuer:       /CN=F365765FAF/serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
Certificate serial:       30
Authority key identifier: BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/3EF11F18020811F183569A86DAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 20:29:46 +0000
ROA not before:           Wed 04 Feb 2026 20:29:42 +0000
ROA not after:            Wed 31 Mar 2027 20:29:42 +0000
asID:                     328614
IP address blocks:        102.23.80.0/22 maxlen: 24
                          102.23.80.0/24 maxlen: 24
                          102.23.81.0/24 maxlen: 24
                          102.23.82.0/24 maxlen: 24
                          102.23.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365765FAF, serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
        Validity
            Not Before: Feb  4 20:29:42 2026 GMT
            Not After : Mar 31 20:29:42 2027 GMT
        Subject: CN=6983ac3a-6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:c9:ee:0d:60:d0:29:68:dd:70:f2:34:7f:
                    23:33:a3:cd:6e:ec:0f:bb:cd:f4:63:32:50:fb:5f:
                    9e:3b:7b:74:c7:ca:14:9f:2d:9f:19:eb:69:cc:ee:
                    17:dc:36:a1:d4:ac:c9:2c:de:e5:d7:3c:cb:1a:88:
                    8b:29:3e:7a:b3:bc:71:98:ba:3b:39:da:06:bc:96:
                    6f:72:54:92:ea:88:ad:3d:ec:72:dc:c8:68:a7:eb:
                    2c:5a:18:95:7c:da:6b:a6:6d:8c:17:b7:20:16:ca:
                    85:87:0a:b9:5c:8b:61:ef:ed:90:6e:4b:9f:48:c4:
                    de:f7:e1:65:96:e7:7b:00:dd:70:1f:cf:ee:03:d0:
                    bc:8e:af:bb:9d:c9:d1:9f:9b:2a:f0:e6:15:e6:86:
                    9f:71:d8:7a:ba:38:59:45:8c:e5:22:1a:c6:a4:c0:
                    3f:be:04:e6:ec:9d:4e:d2:bc:2a:81:a0:7f:f2:c3:
                    62:53:5a:d6:f4:b3:43:9e:3b:d0:1a:90:64:e4:34:
                    41:10:fa:d2:cb:8a:7a:99:ab:e2:43:34:f3:3e:d6:
                    46:7c:a4:5a:b0:ed:43:b8:71:21:e9:27:ea:4e:0c:
                    c6:8d:62:cc:97:c6:b1:e5:21:7d:b3:ac:f3:54:b3:
                    80:ac:68:99:9c:a5:20:8a:83:e7:b8:cf:ef:60:e9:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:17:A3:ED:CE:2B:A1:31:67:5B:75:4E:DF:0F:AD:86:78:1F:3F
            X509v3 Authority Key Identifier:
                keyid:BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/3EF11F18020811F183569A86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.23.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:94:b6:b4:0f:4f:c0:b4:dd:68:68:47:12:70:f3:9b:bd:
         29:0d:2a:1f:92:88:13:8f:61:ea:e5:23:59:a0:27:24:f0:b3:
         3a:5b:a0:f0:94:75:ed:1a:41:b8:4f:19:fa:4b:64:14:48:c8:
         2a:80:50:c4:54:05:08:71:7c:3f:f7:dc:bd:1d:23:b8:5b:ac:
         3c:f2:85:d4:c9:01:b3:87:7f:19:9c:14:1d:f7:9c:c9:e8:67:
         ee:f1:71:73:08:0e:7b:58:98:c4:94:d4:33:ac:42:c5:05:c0:
         2a:86:63:17:67:e0:f3:99:74:bb:c6:a3:4d:3c:9c:39:41:5d:
         39:31:e6:40:fd:a3:2f:2f:8d:80:ff:03:84:11:41:ea:07:35:
         41:47:95:9d:03:8b:3c:f7:b7:d5:9a:c0:90:98:57:df:38:31:
         ee:bf:cf:14:3d:dd:47:c8:56:b3:d8:7c:0a:b8:a9:15:44:cf:
         d7:9a:9c:a5:37:97:54:a3:63:6d:42:5b:ab:47:6b:05:f2:a1:
         5d:f4:f3:0a:0d:c1:7c:b5:e2:ea:dd:dc:58:94:1a:b8:31:d7:
         b8:72:70:87:07:36:0a:e3:c3:03:65:e7:71:f5:36:a1:90:b8:
         6a:12:d4:37:2b:3c:ca:7d:4a:56:62:7a:c2:2e:68:88:46:3c:
         1a:38:13:f6
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NzY1RkFGMTEwLwYDVQQFEyhCRUI0QjFCQkI3RDU3MDgwQjlGNkY0NjQ5NkZDMTQ2
NzA1RjQzMUY3MB4XDTI2MDIwNDIwMjk0MloXDTI3MDMzMTIwMjk0MlowGDEWMBQG
A1UEAxMNNjk4M2FjM2EtNjMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNlye4NYNApaN1w8jR/IzOjzW7sD7vN9GMyUPtfnjt7dMfKFJ8tnxnraczu
F9w2odSsySze5dc8yxqIiyk+erO8cZi6OznaBryWb3JUkuqIrT3sctzIaKfrLFoY
lXzaa6ZtjBe3IBbKhYcKuVyLYe/tkG5Ln0jE3vfhZZbnewDdcB/P7gPQvI6vu53J
0Z+bKvDmFeaGn3HYero4WUWM5SIaxqTAP74E5uydTtK8KoGgf/LDYlNa1vSzQ547
0BqQZOQ0QRD60suKepmr4kM08z7WRnykWrDtQ7hxIekn6k4Mxo1izJfGseUhfbOs
81SzgKxomZylIIqD57jP72DppRkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRYMRej
7c4roTFnW3VO3w+thngfPzAfBgNVHSMEGDAWgBS+tLG7t9VwgLn29GSW/BRnBfQx
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTc2NUYvRTgxRDA2RkVFOUZBMTFGMDlFNUIzM0QxREFFNEVDOUMvdnJTeHU3
ZlZjSUM1OXZSa2x2d1Vad1gwTWZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdnJTeHU3ZlZjSUM1OXZSa2x2d1Vad1gwTWZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTc2NUYvRTgxRDA2RkVFOUZBMTFGMDlFNUIzM0QxREFF
NEVDOUMvM0VGMTFGMTgwMjA4MTFGMTgzNTY5QTg2REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmYXUDANBgkqhkiG9w0BAQsF
AAOCAQEARBuUtrQPT8C03WhoRxJw85u9KQ0qH5KIE49h6uUjWaAnJPCzOlug8JR1
7RpBuE8Z+ktkFEjIKoBQxFQFCHF8P/fcvR0juFusPPKF1MkBs4d/GZwUHfecyehn
7vFxcwgOe1iYxJTUM6xCxQXAKoZjF2fg85l0u8ajTTycOUFdOTHmQP2jLy+NgP8D
hBFB6gc1QUeVnQOLPPe31ZrAkJhX3zgx7r/PFD3dR8hWs9h8CripFUTP15qcpTeX
VKNjbUJbq0drBfKhXfTzCg3BfLXi6t3cWJQauDHXuHJwhwc2CuPDA2XncfU2oZC4
ahLUNys8yn1KVmJ6wi5oiEY8GjgT9g==
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:13:01 2026 by rpki-client