This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/4131DF64010A11F1B0D566F5DAE4EC9C.roa
File:                     4131DF64010A11F1B0D566F5DAE4EC9C.roa (raw, json)
Hash identifier:          Rsivq+fHXDUBU8/LxssiLCoPmxJgnPOYnoomwdzu8Q8=
Subject key identifier:   D8:F6:C8:A0:1E:89:84:3E:E4:07:4F:A8:01:64:39:6B:EE:C1:C3:CA
Certificate issuer:       /CN=F366628AAF/serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
Certificate serial:       02
Authority key identifier: 4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/4131DF64010A11F1B0D566F5DAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 14:11:38 +0000
ROA not before:           Tue 03 Feb 2026 14:11:33 +0000
ROA not after:            Fri 28 Feb 2031 14:11:33 +0000
asID:                     329505
IP address blocks:        102.207.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366628AAF, serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
        Validity
            Not Before: Feb  3 14:11:33 2026 GMT
            Not After : Feb 28 14:11:33 2031 GMT
        Subject: CN=6982021a-b6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:b3:5b:50:7a:82:42:a2:e5:f5:2b:74:fb:
                    f1:6d:8e:bd:bf:13:95:19:18:39:5b:07:28:46:f4:
                    77:18:e6:94:25:6a:15:95:0b:27:ff:7e:e4:07:e4:
                    46:83:e7:e9:65:6e:f0:45:90:0d:47:f0:0c:60:64:
                    83:86:b5:c5:55:73:17:7f:3f:a5:c5:55:9d:2c:3d:
                    8b:da:f4:ea:40:eb:b3:36:e8:79:89:66:6a:c6:10:
                    27:99:e3:5a:e1:ae:44:c3:dc:6a:87:52:5e:33:e0:
                    02:1d:8c:b4:72:87:66:d2:19:c6:77:19:27:07:25:
                    a0:3f:9c:22:b2:80:28:14:63:a3:ff:fb:18:d3:ac:
                    ae:c6:7b:1f:eb:08:a8:32:a7:0f:33:8a:71:42:0f:
                    2e:f7:a3:64:c2:cb:b2:f7:60:de:91:f8:ff:49:9a:
                    36:78:50:a1:5b:c2:3b:8c:1f:fd:09:7c:89:f1:3d:
                    a4:9b:4d:e7:8c:c7:f5:c0:3a:d0:c1:36:67:8b:da:
                    d9:97:e5:bb:95:89:f1:ce:2a:a8:d4:33:29:74:ea:
                    d8:13:6f:ca:93:d9:93:d3:e6:8b:fb:c1:1d:ea:c8:
                    d2:63:8e:28:02:9b:18:9c:06:4f:20:b8:8c:fa:f5:
                    03:e7:52:a6:fd:86:ad:31:58:be:29:fc:72:51:ed:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:C8:A0:1E:89:84:3E:E4:07:4F:A8:01:64:39:6B:EE:C1:C3:CA
            X509v3 Authority Key Identifier:
                keyid:4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/4131DF64010A11F1B0D566F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:cc:de:df:aa:b3:10:30:c7:53:42:38:91:00:d4:c3:3c:36:
         0a:e2:af:ce:dd:bc:a1:c0:97:03:f1:b2:ed:ef:6d:ad:af:04:
         6c:b1:2a:35:28:08:ec:d6:c5:e3:ed:a4:56:6c:b7:36:2d:1f:
         48:45:ea:56:7a:d1:a1:d5:cd:17:a4:55:c6:a3:5f:30:1c:0c:
         ca:b2:e8:dc:bb:06:5c:73:01:a2:a4:d6:3c:38:e1:3e:16:7a:
         b2:26:37:5c:6c:1d:f0:af:02:33:a5:63:29:11:d8:5f:04:fe:
         a8:a3:f3:0e:09:58:81:d2:37:f8:3f:f1:dd:8c:0a:a5:6e:c4:
         81:ee:e3:8b:00:ff:54:9b:2a:c7:ff:83:f4:0b:86:fa:dd:aa:
         f4:04:02:45:a4:1e:03:5a:80:19:92:36:5a:db:b0:67:d3:4e:
         48:bb:d9:54:f7:5a:64:3d:30:a3:4a:10:6d:3e:37:36:a6:aa:
         d1:95:ec:6a:9b:8d:ac:f1:e1:82:cc:5e:0e:60:42:7b:17:86:
         b8:ff:48:46:ec:88:38:a5:5c:3e:b6:9c:d1:5e:f6:1f:51:25:
         bc:a7:d5:5d:68:5b:d9:a8:17:a2:57:3a:f7:b5:9c:d8:61:ae:
         7f:38:6f:12:c1:c8:80:4e:af:ab:76:ce:2c:24:2a:2a:30:ec:
         93:a4:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:33 2026 by rpki-client