This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa
File:                     67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa (raw, json)
Hash identifier:          6+DDMWurPSS0Etmmbqp8HRbgnzyjgRHUp+NQ0zReDcs=
Subject key identifier:   0A:D2:5E:8C:E1:1B:63:C0:5B:56:AD:97:8A:F9:60:28:68:9F:AC:57
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       32
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:42:13 +0000
ROA not before:           Thu 29 Jan 2026 08:42:08 +0000
ROA not after:            Wed 01 Jan 2031 08:42:08 +0000
asID:                     36926
IP address blocks:        41.223.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:42:08 2026 GMT
            Not After : Jan  1 08:42:08 2031 GMT
        Subject: CN=697b1d64-20ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:a6:3c:9f:ad:6a:8c:da:80:3e:72:f5:5e:
                    6f:f7:50:cc:08:0e:5d:9d:a4:09:96:10:52:80:a5:
                    b3:97:bf:a0:6c:6a:d9:74:e3:dd:2e:48:1b:e0:28:
                    d0:ec:bd:a3:18:ce:39:09:14:3e:25:6a:dc:26:a4:
                    19:54:68:a8:f1:41:a1:4b:fa:0c:33:39:7b:74:64:
                    80:8d:75:89:ca:3f:39:df:01:87:97:e3:b6:7d:c7:
                    27:9c:00:67:ce:f5:35:79:3f:8f:8d:f2:a4:3f:50:
                    85:a7:cf:22:30:5f:d3:2a:4f:c6:6a:62:ec:e4:a3:
                    be:5c:58:d4:75:41:c8:0c:99:13:51:75:58:b8:b2:
                    bd:f7:a5:49:6a:10:73:fa:04:9d:a8:c4:b1:a4:f0:
                    de:a3:b2:d3:e8:e0:92:4e:dc:fd:e5:85:03:4e:6d:
                    0c:11:60:c9:34:12:aa:0e:05:ac:3f:0c:5e:b3:f9:
                    0c:c0:c3:f1:fb:89:49:f0:4b:5a:05:6a:91:0d:75:
                    6e:b4:7c:1b:6d:25:08:da:a6:3d:6c:3b:99:47:31:
                    8a:0e:b0:e0:ec:36:19:4c:7d:19:11:bd:73:9e:8c:
                    5e:41:d0:80:b3:a8:2c:a6:ca:87:ab:91:2b:37:0b:
                    61:b4:86:35:5f:09:69:ef:25:f7:89:66:75:e0:29:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:5E:8C:E1:1B:63:C0:5B:56:AD:97:8A:F9:60:28:68:9F:AC:57
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/67C4DC0AFCEE11F0B6B0F9B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:03:60:45:6a:b6:63:d5:c9:de:5e:ab:1e:6f:0d:f5:f6:50:
         30:d4:e6:92:ca:f0:73:33:f2:19:12:d5:7a:29:76:b2:0c:36:
         96:65:21:93:dd:14:0a:c4:57:f9:e4:1c:7e:05:c4:a3:54:04:
         c3:bb:bf:13:19:1f:42:cb:9a:08:98:b2:4a:49:d5:8c:72:c5:
         7b:9e:5f:d8:28:3a:e1:df:b9:cd:f7:f5:dc:7c:fa:bb:f2:f9:
         60:e3:51:81:22:d4:0a:ab:b9:fc:95:76:2c:5c:f9:b4:19:8d:
         92:f5:8d:f2:e7:29:a1:02:2f:63:bb:c2:de:f7:2b:b3:e3:45:
         d5:9e:65:c0:ca:80:10:20:6c:d4:50:7e:45:1d:52:84:94:47:
         5e:eb:82:83:23:c1:74:37:a8:c7:13:db:bd:8c:40:5b:b2:0a:
         6a:84:63:bc:7d:bb:85:c5:00:f8:d4:80:64:08:41:51:6a:7c:
         14:17:88:87:6f:3a:e4:b7:d3:cb:4f:1e:55:cf:d7:fb:29:5b:
         5f:21:bb:db:c2:2c:52:d9:05:fe:34:08:99:7f:60:b3:b1:97:
         9f:e6:89:f6:4d:cc:8d:f5:95:5d:cc:3e:42:32:1b:78:fa:02:
         42:9c:86:07:06:bf:cf:b0:4e:74:9a:d7:f2:f1:3b:64:f5:0c:
         2d:f9:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:17 2026 by rpki-client