This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/435ED2CAE17911F084BC019DDAE4EC9C.roa
File:                     435ED2CAE17911F084BC019DDAE4EC9C.roa (raw, json)
Hash identifier:          vNhsZp/zDkpr67H4ibJLept1kdXINL2xycl2Qp9adbA=
Subject key identifier:   5C:8A:A4:20:C2:1B:53:F4:38:4E:31:35:6D:6D:9C:C7:EC:98:D2:02
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       086D
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/435ED2CAE17911F084BC019DDAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 10:05:39 +0000
ROA not before:           Thu 25 Dec 2025 10:05:34 +0000
ROA not after:            Wed 28 Jan 2026 10:05:34 +0000
asID:                     141718
IP address blocks:        102.177.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Dec 25 10:05:34 2025 GMT
            Not After : Jan 28 10:05:34 2026 GMT
        Subject: CN=694d0c73-06eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:a8:37:ef:cc:b0:9d:c8:45:97:da:75:f9:
                    92:be:28:5a:89:02:45:ab:84:c3:f1:06:14:c6:74:
                    39:b6:24:11:8c:9b:78:c5:48:de:a3:32:4a:c0:c3:
                    63:ed:f8:64:5c:ca:e5:91:2f:6d:2d:c2:b4:82:6f:
                    e4:6a:0d:18:58:d1:7a:1a:04:26:f2:56:97:29:2a:
                    70:af:7e:47:66:4a:0b:e0:16:1c:97:57:fe:d3:f2:
                    0b:eb:57:df:e7:5a:c1:45:39:22:81:e5:2c:a0:93:
                    eb:27:3a:5b:ca:5d:f5:af:f7:8e:3a:e0:88:c6:29:
                    f3:96:e4:a2:09:e4:60:73:39:57:cb:02:61:30:0c:
                    0a:c5:9a:54:a6:96:e5:43:4f:0c:a6:b0:d2:df:6b:
                    57:cb:75:85:1a:13:f9:0f:5a:39:05:71:3b:7f:54:
                    21:43:f6:8f:72:dd:6a:92:04:eb:6c:53:8d:56:44:
                    2a:62:23:7f:68:e4:b8:e4:a8:05:45:ed:50:00:38:
                    fa:b5:e6:53:71:a1:cc:b9:b8:1d:a9:1d:fe:0c:1c:
                    2e:5d:02:03:58:49:2d:2b:d9:db:4b:4c:a9:cc:7c:
                    c3:03:85:d8:81:bb:e5:19:c4:18:6b:25:4c:d5:a9:
                    62:44:a1:c3:e6:46:cb:6f:da:a3:ca:c7:8c:44:1c:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8A:A4:20:C2:1B:53:F4:38:4E:31:35:6D:6D:9C:C7:EC:98:D2:02
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/435ED2CAE17911F084BC019DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:81:e6:92:49:48:8a:1d:ea:16:a9:1b:de:18:8f:db:2d:32:
         3b:61:48:3f:c7:18:7c:2a:83:a5:99:96:aa:20:4a:3d:de:11:
         f5:55:0b:55:4b:46:d1:40:35:b3:99:aa:9a:78:1d:a1:62:14:
         69:1b:21:a9:1e:34:37:d1:13:f3:7f:87:77:ed:ad:c2:03:ab:
         2f:27:27:5c:f6:6c:53:d5:7a:8a:62:aa:69:5d:a7:16:e5:f7:
         4b:74:09:97:c7:6b:2d:3e:f3:7b:69:c2:3a:7e:06:71:8c:a5:
         fc:15:75:53:e0:13:c0:9d:9d:50:d5:eb:86:38:e2:de:1f:8c:
         d6:80:75:2a:8d:0f:2f:e9:1d:7e:59:be:0e:09:b5:17:31:c0:
         8a:58:dd:97:dd:b9:d0:79:77:67:ce:7e:aa:48:25:ec:7d:3b:
         cb:a1:c2:35:43:ba:87:6e:ed:48:57:60:51:27:23:6b:60:c8:
         23:50:13:19:26:f1:f2:ad:5f:45:a0:08:23:85:e9:3c:d0:b3:
         6a:8f:f5:77:40:25:3b:fe:5a:24:6b:d3:6a:f6:b7:f7:79:f5:
         19:62:b3:9c:9d:e6:35:3f:b2:f4:ba:3a:75:e0:d5:67:81:8e:
         bc:f4:86:4d:ba:46:09:bf:76:0d:cd:62:47:fe:e2:8b:16:af:
         ed:da:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:44 2026 by rpki-client