This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa
File:                     C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa (raw, json)
Hash identifier:          TZxQdHMqwlzzmOZhgJdbZKKdEmkCcevU8yASkdu/7dk=
Subject key identifier:   56:F6:F3:0F:2F:0F:06:B5:B2:6F:D2:A9:A2:F1:8F:9A:30:AD:8A:78
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       2A
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:37:35 +0000
ROA not before:           Thu 29 Jan 2026 08:37:30 +0000
ROA not after:            Wed 01 Jan 2031 08:37:30 +0000
asID:                     36926
IP address blocks:        102.0.0.0/13 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:37:30 2026 GMT
            Not After : Jan  1 08:37:30 2031 GMT
        Subject: CN=697b1c4e-8240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:9a:f6:a4:08:50:92:7f:6c:09:dc:09:10:
                    2b:c4:ae:42:10:3f:9e:cf:d9:2e:5f:35:66:17:42:
                    84:1a:b2:3d:52:fa:0a:aa:8b:7b:3e:af:02:f5:a5:
                    8b:30:7c:20:cc:be:e4:9c:e8:2d:53:9a:85:3d:59:
                    b2:ff:51:e3:6d:ab:7d:de:8b:0c:0a:5a:2e:8d:7a:
                    98:bd:c9:80:59:2c:2a:c0:bf:e2:63:e1:7c:20:53:
                    4b:a7:06:73:9b:3f:6b:a5:a9:c2:de:87:2f:79:0a:
                    a1:fe:f0:8c:2e:5b:0a:37:13:33:53:65:10:6e:18:
                    76:60:f6:f4:fd:4f:e3:ec:ae:87:af:07:6e:ce:c2:
                    af:27:6c:b8:8a:d0:23:2e:e1:35:fe:f7:69:68:8f:
                    e2:35:f0:dc:ef:27:02:09:67:3d:23:11:bd:e1:13:
                    0d:1f:a3:3c:d2:e7:6d:92:68:da:a1:ae:b5:29:35:
                    45:24:59:f0:44:65:74:af:22:b6:58:6d:52:41:fd:
                    a1:3b:c8:f9:8c:84:f1:b8:d4:1a:a7:91:8f:4c:0f:
                    a3:58:8e:d2:6a:65:a0:8c:ed:ab:4d:6b:fc:75:ab:
                    3b:d3:f6:9e:ad:48:8c:12:66:29:c8:f6:b4:e7:8c:
                    6d:5a:5e:87:e8:3d:0e:03:ef:ce:e9:0d:73:5e:88:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:F3:0F:2F:0F:06:B5:B2:6F:D2:A9:A2:F1:8F:9A:30:AD:8A:78
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/C21E2EB4FCED11F0A38CD2B3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.0.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:35:19:c4:1a:cc:2d:73:ed:ac:3b:b1:e8:4c:f6:e5:c7:
         c9:33:95:01:ea:ad:5e:d6:cf:06:78:36:da:79:b9:39:56:ab:
         a4:61:69:9a:6e:e6:41:18:36:68:99:56:1a:cf:98:c7:cb:e5:
         13:47:7b:f3:1e:6d:1e:0e:c1:78:67:25:fe:1d:25:47:f8:0c:
         cd:05:ea:89:76:1c:08:aa:9c:fe:70:99:8b:d1:b2:3f:ca:cc:
         d6:d9:93:de:4e:07:a4:2c:fc:b0:43:01:19:e6:3a:54:61:fb:
         ff:8b:85:9e:f6:75:b5:7e:a5:20:e8:e4:8f:e3:9e:ab:ca:f7:
         48:23:37:6d:c5:87:ee:c1:8a:8c:51:74:f7:12:fe:ce:e5:6f:
         d2:f5:6f:31:f3:40:49:84:b5:6c:9f:1b:27:30:c1:f6:d5:45:
         fa:fa:11:59:10:74:12:32:b5:28:b4:ed:ee:27:2d:b0:be:fc:
         66:f1:32:00:94:83:dc:74:ba:2a:20:2f:83:e4:1b:ba:e2:ca:
         55:e9:88:81:3a:f1:ec:33:e8:b4:b1:13:c2:1b:a9:c4:53:54:
         c2:e8:7e:48:c7:f5:19:35:a3:6c:22:90:3b:73:f2:cc:61:41:
         67:63:05:c8:18:eb:53:56:3d:33:dd:94:72:7c:0f:cd:9c:12:
         a1:a3:5a:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MEIzNkFGMTEwLwYDVQQFEyg1M0MxRTZENDlGRDVBNjRFN0I2MDAxRjIyRTNGQTQy
QzcwREJBMzRFMB4XDTI2MDEyOTA4MzczMFoXDTMxMDEwMTA4MzczMFowGDEWMBQG
A1UEAxMNNjk3YjFjNGUtODI0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ7QmvakCFCSf2wJ3AkQK8SuQhA/ns/ZLl81ZhdChBqyPVL6CqqLez6vAvWl
izB8IMy+5JzoLVOahT1Zsv9R422rfd6LDApaLo16mL3JgFksKsC/4mPhfCBTS6cG
c5s/a6Wpwt6HL3kKof7wjC5bCjcTM1NlEG4YdmD29P1P4+yuh68Hbs7CrydsuIrQ
Iy7hNf73aWiP4jXw3O8nAglnPSMRveETDR+jPNLnbZJo2qGutSk1RSRZ8ERldK8i
tlhtUkH9oTvI+YyE8bjUGqeRj0wPo1iO0mploIztq01r/HWrO9P2nq1IjBJmKcj2
tOeMbVpeh+g9DgPvzukNc16IZg8CAwEAAaOCAqQwggKgMB0GA1UdDgQWBBRW9vMP
Lw8GtbJv0qmi8Y+aMK2KeDAfBgNVHSMEGDAWgBRTwebUn9WmTntgAfIuP6QscNuj
TjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODBCMzYvRjVFREZBRTZERkQ2MTFGMDlBQkQ4REQ0REFFNEVDOUMvVThIbTFK
X1ZwazU3WUFIeUxqLWtMSERibzA0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVThIbTFKX1ZwazU3WUFIeUxqLWtMSERibzA0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODBCMzYvRjVFREZBRTZERkQ2MTFGMDlBQkQ4REQ0REFF
NEVDOUMvQzIxRTJFQjRGQ0VEMTFGMEEzOENEMkIzREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDA2YAMA0GCSqGSIb3DQEBCwUA
A4IBAQBfcTUZxBrMLXPtrDux6Ez25cfJM5UB6q1e1s8GeDbaebk5VqukYWmabuZB
GDZomVYaz5jHy+UTR3vzHm0eDsF4ZyX+HSVH+AzNBeqJdhwIqpz+cJmL0bI/yszW
2ZPeTgekLPywQwEZ5jpUYfv/i4We9nW1fqUg6OSP456ryvdIIzdtxYfuwYqMUXT3
Ev7O5W/S9W8x80BJhLVsnxsnMMH21UX6+hFZEHQSMrUotO3uJy2wvvxm8TIAlIPc
dLoqIC+D5Bu64spV6YiBOvHsM+i0sRPCG6nEU1TC6H5Ix/UZNaNsIpA7c/LMYUFn
YwXIGOtTVj0z3ZRyfA/NnBKho1pO
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:18 2026 by rpki-client