This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/43279162FCEE11F091E2CFB7DAE4EC9C.roa
File:                     43279162FCEE11F091E2CFB7DAE4EC9C.roa (raw, json)
Hash identifier:          8iWAoEcu2JRkaSfW7LLNHzaA85uJseksE0k+atfwJ1Y=
Subject key identifier:   E1:01:E2:36:6E:14:D1:5A:51:A2:76:B9:A7:E5:E7:52:A8:6F:7B:62
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       30
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/43279162FCEE11F091E2CFB7DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:41:11 +0000
ROA not before:           Thu 29 Jan 2026 08:41:06 +0000
ROA not after:            Wed 01 Jan 2031 08:41:06 +0000
asID:                     36926
IP address blocks:        105.230.0.0/15 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:41:06 2026 GMT
            Not After : Jan  1 08:41:06 2031 GMT
        Subject: CN=697b1d27-1003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:b5:b4:75:78:ef:b6:3e:5e:07:08:ad:69:
                    04:f2:d1:7a:6f:81:ad:c6:fc:34:1d:7a:72:3a:11:
                    72:2f:80:80:20:c3:a0:2c:bc:c0:c3:9b:73:18:25:
                    28:dd:85:0d:b2:ef:2a:dd:df:1a:af:cd:9b:14:b0:
                    ec:53:89:4a:39:ec:bf:c0:ab:1e:84:68:10:a5:58:
                    1f:94:e1:5b:33:33:51:f0:f1:1b:60:d5:3f:e4:cb:
                    b4:66:7a:6e:66:c3:da:8c:a0:6c:2d:57:4c:62:a4:
                    e0:c2:4f:df:ee:44:7e:a7:9f:40:3a:10:24:b9:65:
                    c4:b0:c3:5b:12:c7:d3:4b:47:60:e9:d3:9f:b0:b9:
                    02:4a:d9:64:ac:0a:b4:73:74:25:bb:ac:e6:b5:82:
                    81:92:73:16:0d:26:0c:ca:ba:a0:8f:3c:17:41:1b:
                    3d:e8:c1:e5:fb:88:f1:75:57:f2:de:07:5b:92:24:
                    d5:dc:95:52:bd:56:f4:ed:0b:f2:d7:6f:c9:9d:f8:
                    9b:64:b0:32:7d:67:ce:07:6c:a9:18:e6:41:2f:bd:
                    14:28:70:bb:12:8e:b5:71:b8:43:41:96:09:66:fa:
                    22:c3:7f:17:03:a9:e7:93:2d:95:49:de:8e:97:b7:
                    e9:ad:03:27:03:81:3e:ba:ef:7b:00:78:76:e5:c7:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:E2:36:6E:14:D1:5A:51:A2:76:B9:A7:E5:E7:52:A8:6F:7B:62
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/43279162FCEE11F091E2CFB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.230.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:9b:82:d7:36:cd:bb:a7:3b:09:00:b1:d1:3b:11:78:75:
         f5:37:af:2e:51:ec:4e:e0:7f:a9:c5:ac:81:9b:a6:6f:2b:d1:
         af:5c:b2:e3:29:f8:aa:b1:8b:bf:84:30:59:01:4c:1c:fb:60:
         51:61:85:11:dd:d5:35:16:13:ae:0a:f4:de:7c:d6:6e:b4:3b:
         3f:e4:62:a0:34:4b:d5:40:fc:3d:1a:32:26:69:91:c3:bf:25:
         12:f7:26:21:6f:f8:eb:e6:dc:78:bb:d2:a4:0d:9b:96:63:6c:
         6d:2a:2c:80:92:ca:b8:06:5f:70:1f:7e:06:d9:ed:3c:ab:88:
         3d:27:11:93:8b:c4:cb:7c:14:58:5d:96:1b:7f:ec:90:8f:12:
         91:5f:4c:53:df:c5:4b:39:79:ec:eb:8c:e2:b9:3e:51:3c:0e:
         27:75:d0:b4:34:3a:a2:a2:da:f9:59:1f:25:de:ab:0a:3f:60:
         d3:a6:cc:67:92:60:b6:d9:e5:51:46:bf:d8:5f:db:89:9d:83:
         3c:97:99:9a:3a:52:ca:16:c5:c8:f6:c5:d6:21:63:a3:59:88:
         37:dd:54:68:72:cd:93:73:61:05:56:31:1f:ba:2f:be:95:f4:
         b2:96:dc:3d:11:3b:7d:1c:24:18:9d:b8:b9:f8:e1:26:ac:f4:
         e4:45:8d:68
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MEIzNkFGMTEwLwYDVQQFEyg1M0MxRTZENDlGRDVBNjRFN0I2MDAxRjIyRTNGQTQy
QzcwREJBMzRFMB4XDTI2MDEyOTA4NDEwNloXDTMxMDEwMTA4NDEwNlowGDEWMBQG
A1UEAxMNNjk3YjFkMjctMTAwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzgtbR1eO+2Pl4HCK1pBPLRem+Brcb8NB16cjoRci+AgCDDoCy8wMObcxgl
KN2FDbLvKt3fGq/NmxSw7FOJSjnsv8CrHoRoEKVYH5ThWzMzUfDxG2DVP+TLtGZ6
bmbD2oygbC1XTGKk4MJP3+5EfqefQDoQJLllxLDDWxLH00tHYOnTn7C5AkrZZKwK
tHN0Jbus5rWCgZJzFg0mDMq6oI88F0EbPejB5fuI8XVX8t4HW5Ik1dyVUr1W9O0L
8tdvyZ34m2SwMn1nzgdsqRjmQS+9FChwuxKOtXG4Q0GWCWb6IsN/FwOp55MtlUne
jpe36a0DJwOBPrrvewB4duXHgPsCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBThAeI2
bhTRWlGidrmn5edSqG97YjAfBgNVHSMEGDAWgBRTwebUn9WmTntgAfIuP6QscNuj
TjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODBCMzYvRjVFREZBRTZERkQ2MTFGMDlBQkQ4REQ0REFFNEVDOUMvVThIbTFK
X1ZwazU3WUFIeUxqLWtMSERibzA0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVThIbTFKX1ZwazU3WUFIeUxqLWtMSERibzA0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODBCMzYvRjVFREZBRTZERkQ2MTFGMDlBQkQ4REQ0REFF
NEVDOUMvNDMyNzkxNjJGQ0VFMTFGMDkxRTJDRkI3REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAWnmMA0GCSqGSIb3DQEBCwUA
A4IBAQB3sZuC1zbNu6c7CQCx0TsReHX1N68uUexO4H+pxayBm6ZvK9GvXLLjKfiq
sYu/hDBZAUwc+2BRYYUR3dU1FhOuCvTefNZutDs/5GKgNEvVQPw9GjImaZHDvyUS
9yYhb/jr5tx4u9KkDZuWY2xtKiyAksq4Bl9wH34G2e08q4g9JxGTi8TLfBRYXZYb
f+yQjxKRX0xT38VLOXns64ziuT5RPA4nddC0NDqiotr5WR8l3qsKP2DTpsxnkmC2
2eVRRr/YX9uJnYM8l5maOlLKFsXI9sXWIWOjWYg33VRocs2Tc2EFVjEfui++lfSy
ltw9ETt9HCQYnbi5+OEmrPTkRY1o
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:16 2026 by rpki-client