This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/79A2B826FCED11F08EBD8BB3DAE4EC9C.roa
File:                     79A2B826FCED11F08EBD8BB3DAE4EC9C.roa (raw, json)
Hash identifier:          A6E21hHJIX9e6bqxV8HLjdqokAtD3hBxiXscbQoJ16Y=
Subject key identifier:   97:C9:7D:7F:43:C7:FE:CA:A2:8C:7A:ED:6D:D2:AC:4A:21:BF:CA:5C
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       28
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/79A2B826FCED11F08EBD8BB3DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:35:33 +0000
ROA not before:           Thu 29 Jan 2026 08:35:28 +0000
ROA not after:            Wed 01 Jan 2031 08:35:28 +0000
asID:                     36926
IP address blocks:        102.216.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:35:28 2026 GMT
            Not After : Jan  1 08:35:28 2031 GMT
        Subject: CN=697b1bd5-2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bc:7d:c9:a8:39:b4:47:04:71:5b:f6:c2:8a:
                    c0:3b:4c:5b:e9:6a:1c:37:fe:46:3a:be:92:05:8b:
                    0c:dc:f0:fd:39:b6:7d:1a:30:42:63:1c:7f:fd:e1:
                    8f:16:5b:fb:54:f7:50:2f:02:05:0a:ea:5a:65:da:
                    05:8b:4a:ce:4e:3d:b9:fe:72:6a:03:6e:3f:e2:53:
                    40:81:af:85:53:99:43:ef:f8:a0:6e:2d:14:db:b6:
                    cf:4a:61:a5:bb:c2:70:0f:89:30:85:84:50:19:7f:
                    4b:ca:d0:76:4e:8a:6d:75:5f:71:0c:44:c1:ec:9d:
                    0f:bd:1c:c5:69:10:05:aa:2f:a8:9c:51:7e:57:4d:
                    a2:f0:64:e4:75:ce:f7:bb:37:40:34:eb:6f:b4:e0:
                    e6:c8:64:ad:54:df:7a:b2:72:e2:68:01:91:f0:31:
                    bc:fd:6e:b5:2c:18:da:b7:fc:6b:ac:04:1b:3b:0c:
                    9e:24:68:ee:fe:8d:12:1f:52:73:d1:10:63:d1:fb:
                    a5:24:5a:32:56:f0:2a:1a:0c:6f:bc:e3:98:be:ec:
                    1d:11:6a:1f:4d:ac:47:6b:56:22:08:eb:26:71:df:
                    5c:61:34:1a:8a:c1:f2:fe:6f:f5:0d:ea:14:92:fd:
                    f2:48:03:7a:f1:ee:97:2a:3b:53:c6:84:9c:2a:ec:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:7D:7F:43:C7:FE:CA:A2:8C:7A:ED:6D:D2:AC:4A:21:BF:CA:5C
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/79A2B826FCED11F08EBD8BB3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.216.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:c1:8c:34:07:96:50:cc:54:15:62:78:2f:d6:08:6b:41:5f:
         77:c6:66:f7:92:56:0d:bb:70:c8:80:bd:f6:d8:af:f1:b8:60:
         c3:e3:0f:ce:98:f4:9d:d0:ec:4b:5f:1e:06:4b:9d:a6:d9:11:
         b6:d8:cf:fc:ba:ff:11:e2:f0:35:8e:1d:4f:07:5d:d2:e8:3d:
         74:7b:c4:f4:44:0d:4b:50:06:2d:38:08:8d:1a:77:92:3e:76:
         a3:60:a7:88:39:e7:85:5b:ea:1e:9c:7d:16:b2:f2:b7:e8:91:
         b5:79:90:bf:cc:b4:b3:9e:68:ff:4a:b9:d2:31:35:f4:57:2a:
         f1:63:09:59:7a:1a:ce:53:a5:b7:cb:21:38:2a:45:c4:01:81:
         16:84:49:1b:46:07:de:8e:ec:63:78:97:ca:af:e9:91:cf:0b:
         89:01:77:51:bf:c3:4a:67:52:6d:b7:53:18:c8:dc:7c:0c:fd:
         ae:54:fa:08:9e:a0:7c:98:cb:7a:01:6c:77:9c:66:d9:fa:5b:
         fd:f9:50:f5:66:1b:a2:79:ea:db:11:bb:77:a2:a0:1f:ea:eb:
         79:7e:a9:6e:57:43:f7:7f:28:e9:a8:ac:be:f2:34:b4:33:45:
         de:ca:e6:0b:db:c6:df:5d:ec:dd:27:5f:d2:a4:fb:95:70:42:
         f9:84:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:13 2026 by rpki-client