This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
File:                     705538E8F23411F0ABE2AFDCDAE4EC9C.roa (raw, json)
Hash identifier:          +jhpv0hpOYh5YDao9lohBm7A/3HpwqG1brbR9Ufglgk=
Subject key identifier:   21:E8:39:28:76:79:8C:99:90:59:4F:B6:A6:E0:09:1C:CF:72:B8:99
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       03B4
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 17:05:49 +0000
ROA not before:           Thu 15 Jan 2026 17:05:43 +0000
ROA not after:            Thu 30 Dec 2049 17:05:43 +0000
asID:                     328228
IP address blocks:        81.91.224.0/20 maxlen: 20
                          81.91.224.0/20 maxlen: 24
                          81.91.224.0/24 maxlen: 24
                          81.91.225.0/24 maxlen: 24
                          81.91.226.0/24 maxlen: 24
                          81.91.227.0/24 maxlen: 24
                          81.91.228.0/22 maxlen: 22
                          81.91.228.0/24 maxlen: 24
                          81.91.229.0/24 maxlen: 24
                          81.91.230.0/23 maxlen: 23
                          81.91.230.0/24 maxlen: 24
                          81.91.231.0/24 maxlen: 24
                          81.91.232.0/23 maxlen: 23
                          81.91.232.0/24 maxlen: 24
                          81.91.234.0/24 maxlen: 24
                          81.91.235.0/24 maxlen: 24
                          81.91.236.0/24 maxlen: 24
                          81.91.237.0/24 maxlen: 24
                          81.91.238.0/24 maxlen: 24
                          81.91.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Jan 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: Jan 15 17:05:43 2026 GMT
            Not After : Dec 30 17:05:43 2049 GMT
        Subject: CN=69691e6d-c3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:9f:f2:96:64:ab:5b:47:60:46:ad:1f:35:
                    df:54:70:22:38:ce:e4:5a:77:94:6f:42:9a:26:b4:
                    e8:f3:a3:a1:25:e5:29:8a:5c:47:9a:8f:7a:94:70:
                    e3:da:7e:0d:02:85:55:8d:26:66:73:f2:e5:0a:ca:
                    cf:e9:ad:a4:c9:0c:43:c3:1f:a3:f0:4b:0b:9b:c6:
                    03:9d:63:9e:6a:49:84:cd:fa:0a:67:82:d9:aa:83:
                    24:d9:e5:79:ee:fa:07:2f:1f:c3:85:7c:03:98:da:
                    62:ca:4b:d9:9b:f9:88:f7:fa:78:ae:2b:a0:97:ee:
                    37:fa:a1:db:ce:03:89:ea:41:61:a9:f7:f5:88:34:
                    b6:23:94:68:39:4f:c0:57:bf:f9:54:41:31:4c:a8:
                    2d:b0:f0:44:b3:db:63:9b:6f:4a:2c:26:f3:69:b3:
                    ae:d2:52:75:d4:96:f7:f7:43:ce:4e:1e:19:b2:5a:
                    38:6b:2a:e7:62:7f:96:93:9b:df:98:0e:ba:14:3d:
                    42:bb:24:00:af:0c:f2:d8:b2:23:6f:89:aa:40:ae:
                    66:31:b2:24:31:92:0f:8b:33:4d:c7:ec:36:13:de:
                    11:6b:9d:c9:4e:6f:61:61:1a:d0:2a:ba:7e:6b:8e:
                    61:b7:ae:30:b0:36:a2:5f:9a:7d:a6:f2:2e:8f:a5:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E8:39:28:76:79:8C:99:90:59:4F:B6:A6:E0:09:1C:CF:72:B8:99
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.91.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:48:49:05:9f:6e:20:6f:4b:48:0f:8e:a3:61:6f:73:15:22:
         d3:06:90:ae:bc:fc:ce:20:b2:84:e6:ff:bb:09:5a:21:4b:1a:
         4c:40:46:cd:df:90:d0:74:27:c5:0c:5c:d7:ef:03:a7:0b:1e:
         e4:eb:a3:3b:16:cf:08:e0:33:9a:c8:96:97:d5:9c:a5:7f:e4:
         ee:67:6d:2e:99:d8:9f:06:4d:f3:8f:f3:48:1f:65:8a:fd:26:
         d3:32:b5:b0:69:0e:6b:41:3f:04:3a:0e:50:a4:4a:c5:59:da:
         bc:25:45:2f:ac:32:09:08:56:75:9b:97:41:e9:9b:10:4c:3b:
         59:e5:89:f2:05:07:e8:db:fe:0e:bd:6f:7e:e7:bf:15:7f:0b:
         88:46:5a:9e:3e:d6:8c:6c:f9:23:70:40:c8:58:9b:60:3c:a1:
         c4:c7:c5:27:da:31:d7:01:eb:db:ae:2b:0e:19:9e:85:5f:64:
         0e:84:9a:25:4d:4a:ab:04:7d:3d:49:10:38:ab:9f:b0:d5:30:
         41:0e:29:d5:43:3d:33:8d:e1:54:4b:ce:42:3f:8a:28:e6:21:
         03:02:01:07:e3:6c:95:5a:5a:36:1f:6c:6e:49:cf:ba:69:54:
         92:2a:c4:c3:73:02:4f:9c:ed:7d:cd:1a:bc:0b:30:65:be:70:
         ca:01:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:24:38 2026 by rpki-client