This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/7CA19D6E010A11F1B33B93F5DAE4EC9C.roa
File:                     7CA19D6E010A11F1B33B93F5DAE4EC9C.roa (raw, json)
Hash identifier:          eBGoqpMded71txXxv9Heybn7AQTKDKjxLftIRu9jW6g=
Subject key identifier:   4D:C8:79:78:66:30:33:E4:C5:EC:77:9A:83:85:F8:97:C6:7C:93:F2
Certificate issuer:       /CN=F366628AAF/serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
Certificate serial:       04
Authority key identifier: 4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/7CA19D6E010A11F1B33B93F5DAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 14:13:18 +0000
ROA not before:           Tue 03 Feb 2026 14:13:13 +0000
ROA not after:            Fri 28 Feb 2031 14:13:13 +0000
asID:                     329505
IP address blocks:        102.203.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366628AAF, serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
        Validity
            Not Before: Feb  3 14:13:13 2026 GMT
            Not After : Feb 28 14:13:13 2031 GMT
        Subject: CN=6982027e-f98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:72:99:45:c3:7d:a8:f8:5b:b7:46:1b:a6:
                    84:36:01:65:92:79:5a:4f:a8:47:2f:d2:3e:6e:5a:
                    3b:f7:bf:1b:2d:5f:c3:f0:cb:1f:59:ec:8b:1a:74:
                    da:a5:a4:fb:b6:45:5b:ba:24:19:f2:62:88:47:82:
                    40:4a:25:8a:2f:5b:39:b3:07:8a:66:dc:9a:e5:c8:
                    20:17:ca:d8:03:a4:b7:c7:7b:4d:e7:3f:df:ac:b9:
                    99:27:3e:ee:47:4e:0f:ea:24:cb:c6:d2:08:0c:1b:
                    1f:ce:4f:02:21:5b:15:d1:f8:99:19:39:cd:b8:d2:
                    b3:5a:d9:b3:46:36:57:7b:16:a8:23:5f:07:29:51:
                    02:45:d7:64:08:e4:74:eb:a7:db:5b:53:dd:25:84:
                    6a:32:77:f0:a9:13:9c:26:ca:87:0a:38:de:9e:45:
                    77:a7:52:89:60:10:ed:89:d2:04:5e:4a:94:e2:3b:
                    b0:eb:7b:79:6f:34:77:b7:4c:d5:98:74:81:27:a8:
                    6a:2e:b6:2c:ff:f1:b1:3e:bb:b8:86:db:de:a2:18:
                    ea:3b:fc:e7:61:1d:6b:c8:c6:02:14:f3:d8:76:d6:
                    cb:90:5f:0f:ac:49:08:85:92:44:92:46:74:42:b6:
                    89:a2:d8:d4:e7:e8:46:95:2b:0c:69:8b:f5:e1:4c:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:79:78:66:30:33:E4:C5:EC:77:9A:83:85:F8:97:C6:7C:93:F2
            X509v3 Authority Key Identifier:
                keyid:4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/7CA19D6E010A11F1B33B93F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ce:59:8b:be:c4:c1:8c:25:23:61:88:cb:0c:64:12:9e:e8:
         98:d8:37:cf:03:34:31:83:5b:db:44:f7:de:16:a6:5b:80:26:
         2a:f4:f7:9a:bb:65:5a:83:38:fd:85:df:ef:1d:d7:3f:dd:d6:
         68:db:5f:4f:6e:8e:84:ad:6f:26:58:04:13:b8:ca:23:06:d0:
         38:ad:cb:d4:d2:03:e0:8c:26:60:cd:0e:99:58:e9:d9:bc:8d:
         8c:6b:5f:3a:c0:d8:c6:b5:7e:12:3a:41:15:41:b4:88:33:f5:
         39:7c:66:7c:94:7e:1b:6c:fa:00:b9:5a:21:04:34:07:e3:c4:
         d4:22:49:e9:36:00:ad:f0:83:fd:c7:cd:d5:0e:ee:34:de:14:
         11:bf:b6:cf:fb:20:18:90:63:ca:49:3e:53:4d:ee:39:83:73:
         6f:a6:c7:4d:6b:13:e4:6e:e5:ca:b2:18:98:9c:2c:1f:fc:81:
         de:f4:e7:e5:ca:e6:86:40:70:21:03:ff:d3:27:a8:83:bf:e5:
         4a:87:3b:de:d0:f4:25:3a:ac:3f:f6:0f:6a:e5:f5:60:3e:e0:
         0b:cf:bd:a5:c8:ad:49:71:a1:52:6d:c2:73:eb:a4:ec:95:d7:
         64:01:75:3e:a0:e9:fb:4c:f9:b6:95:6a:8f:3f:22:32:ec:9d:
         3f:78:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:13:01 2026 by rpki-client