This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/1A762274FCEE11F0A39F6FB7DAE4EC9C.roa
File:                     1A762274FCEE11F0A39F6FB7DAE4EC9C.roa (raw, json)
Hash identifier:          k3B8WZ+3jMO7LWbkb2rUTFFzzMA1baZgUheZKGM3Zb0=
Subject key identifier:   85:CE:76:3C:68:45:A9:47:F8:6C:D9:08:3B:55:2F:9B:1C:30:24:2F
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       2E
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/1A762274FCEE11F0A39F6FB7DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:40:03 +0000
ROA not before:           Thu 29 Jan 2026 08:39:57 +0000
ROA not after:            Wed 01 Jan 2031 08:39:57 +0000
asID:                     36926
IP address blocks:        154.76.0.0/14 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:39:57 2026 GMT
            Not After : Jan  1 08:39:57 2031 GMT
        Subject: CN=697b1ce3-162a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:3b:cd:71:f4:e9:5b:fc:71:7c:b2:c1:a9:
                    cb:1e:70:f9:18:ec:8b:98:36:35:45:66:fc:14:a2:
                    8c:26:db:52:2a:e3:79:e8:56:a5:db:4c:f1:60:e7:
                    28:d0:e3:ab:74:28:13:18:ab:ee:ce:2a:03:5a:21:
                    fc:7e:da:85:a3:02:4f:8f:2e:33:ae:62:3a:1d:69:
                    9f:63:b2:cd:7a:41:35:af:02:d2:92:af:68:70:d2:
                    69:dc:b8:ae:d2:15:b2:34:fa:b5:f9:4b:68:78:e8:
                    d0:94:ff:f3:a2:4f:7d:00:80:4d:77:3d:30:c7:3c:
                    ce:cb:8c:e0:f8:4e:53:e6:bc:8b:ef:e8:07:0a:69:
                    fb:0a:b5:d7:67:82:07:e8:83:e1:23:2c:37:d2:35:
                    94:5a:46:ed:5a:80:6d:d7:02:1a:c0:5f:b0:75:3c:
                    10:8d:4e:81:9d:54:00:12:39:0e:bb:f5:27:53:7f:
                    57:50:88:e9:74:c4:50:9d:a4:0d:50:47:00:ae:a6:
                    c1:78:83:98:f2:25:58:fd:93:66:59:1d:d0:ea:1f:
                    fd:2f:b1:63:fd:31:ce:5f:f0:13:a0:bf:6e:f2:9d:
                    19:b3:05:ae:8e:15:48:44:3f:55:e1:dc:24:70:6d:
                    38:df:73:0c:34:8a:b5:66:89:1f:e9:73:af:79:af:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CE:76:3C:68:45:A9:47:F8:6C:D9:08:3B:55:2F:9B:1C:30:24:2F
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/1A762274FCEE11F0A39F6FB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.76.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         c3:e2:ae:e7:16:10:68:03:41:61:2c:b1:ac:1b:b4:5c:db:39:
         45:23:cb:e8:2d:7b:9c:5e:18:e9:f5:c5:9d:f4:d9:2e:9f:97:
         6f:03:4b:4c:c3:1b:12:f0:96:f7:8e:e5:b2:c4:97:4a:0a:48:
         94:3d:63:3e:38:bb:f4:dd:ad:ee:2d:91:76:cb:46:3b:b7:c5:
         ab:b1:41:74:59:88:d8:83:a7:56:ea:4f:cf:b3:1b:b7:c1:03:
         af:2f:75:35:cf:ec:d2:ea:e3:3b:0f:64:a1:c8:73:a9:f9:f4:
         76:83:0f:89:2b:1c:d6:b4:c6:52:f8:36:86:9d:25:9d:f0:6c:
         f9:c8:4d:fa:26:8e:c8:4e:cb:33:8c:4a:2f:99:be:f8:70:c7:
         9f:a2:d0:ab:8f:c9:ad:86:b0:5f:23:e3:05:ae:e3:4b:fb:32:
         bc:54:05:e4:1f:f7:eb:90:9a:f1:1f:48:bb:45:57:d1:a0:da:
         18:01:e3:92:55:32:44:17:64:2f:80:b1:a4:70:a4:11:3c:0d:
         e1:5d:17:cc:c7:ab:b7:f7:51:73:6d:45:b3:df:ba:b6:af:3d:
         08:b2:0d:de:37:bf:f5:39:98:dd:8c:3c:21:a3:54:5d:d1:2d:
         45:a4:f4:43:aa:8f:37:7d:c9:02:b6:15:e5:ef:80:f3:17:3d:
         6b:7a:db:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:14 2026 by rpki-client