This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/F0F91352FCED11F0817BD9B3DAE4EC9C.roa
File:                     F0F91352FCED11F0817BD9B3DAE4EC9C.roa (raw, json)
Hash identifier:          HxbFOGVGICyK7Qo30yLsCkbUxYdMBBCg5Bv1Lkdl1sw=
Subject key identifier:   22:C1:93:31:5B:B1:CB:E4:95:6B:D7:02:42:60:11:25:07:6E:12:C0
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       2C
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/F0F91352FCED11F0817BD9B3DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:38:53 +0000
ROA not before:           Thu 29 Jan 2026 08:38:49 +0000
ROA not after:            Wed 01 Jan 2031 08:38:49 +0000
asID:                     36926
IP address blocks:        154.152.0.0/13 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:38:49 2026 GMT
            Not After : Jan  1 08:38:49 2031 GMT
        Subject: CN=697b1c9d-72c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:3f:d1:f9:8b:61:59:78:f9:0a:c2:ea:df:
                    1f:41:93:ce:42:24:d5:26:47:bc:2f:ab:1e:e0:6a:
                    12:0a:cf:1b:ed:b7:6f:78:2e:ef:19:97:a0:96:23:
                    d6:a8:08:0f:7f:64:66:2d:a2:ad:16:61:5c:27:a1:
                    60:85:86:da:fe:36:cd:4b:e1:0e:20:14:dc:da:eb:
                    32:b1:22:68:67:5b:32:1a:d4:84:65:4f:ea:20:7c:
                    ab:cd:ec:96:db:01:01:14:1c:3e:91:ad:36:99:91:
                    17:b3:39:b7:3a:4a:49:65:3d:ff:a2:22:63:d9:22:
                    36:68:dc:5e:e4:5e:c6:cf:10:e5:19:66:97:27:21:
                    65:c3:5d:fa:44:bd:55:d8:3f:a1:11:64:cd:ff:37:
                    1b:22:e0:87:6a:7b:53:75:d7:81:b4:4a:1e:aa:fa:
                    5c:0b:b3:ff:1f:f0:ec:5c:f9:12:47:80:b6:9e:96:
                    b0:70:65:6d:08:9a:4c:61:e4:58:86:9a:af:32:1b:
                    50:25:49:55:4e:eb:1b:4e:c4:ae:fd:52:f1:d7:d6:
                    1f:27:d3:4a:c7:c0:02:2d:d7:85:7b:e0:5c:ed:c4:
                    73:bf:5f:33:eb:e3:ad:bf:f6:8e:12:94:31:a1:f1:
                    24:04:9e:d5:c5:62:52:38:31:b3:ec:6f:2b:f7:df:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:93:31:5B:B1:CB:E4:95:6B:D7:02:42:60:11:25:07:6E:12:C0
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/F0F91352FCED11F0817BD9B3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.152.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         40:27:a6:cf:91:4c:80:a2:94:6d:93:68:d4:7f:c2:85:c3:1f:
         48:53:81:0a:cb:c1:8d:0f:98:d4:71:7d:b3:ee:21:d6:bc:06:
         c8:84:c5:c2:80:af:33:33:16:72:15:b2:80:5f:b5:6e:7f:fc:
         a6:90:be:84:8e:f6:b1:1d:7f:72:17:f5:2c:96:75:bc:82:6d:
         79:a8:c7:1a:ab:9f:ea:5c:dd:eb:5a:ac:cb:bc:1a:78:3a:5f:
         ac:dc:94:7e:79:07:47:64:2f:a8:15:85:eb:c7:20:08:89:37:
         44:6e:4e:5c:78:36:d4:94:30:5e:7a:67:8d:39:9c:a4:be:55:
         2a:28:0f:29:a2:d5:b7:e2:14:a0:a3:0f:86:f5:81:63:ba:9f:
         d5:02:97:8a:d9:d6:b9:b7:cc:31:32:a8:4f:2e:d4:05:8e:e7:
         ef:61:27:fe:96:b5:c5:bb:b4:7e:16:03:94:81:8a:d0:af:2a:
         9e:d9:97:eb:14:e0:fa:b1:7b:57:35:a9:aa:dc:5c:de:f7:51:
         26:95:f4:78:6f:9d:b2:bd:6a:81:18:b4:4b:00:45:d3:64:a4:
         1b:bb:dd:56:07:c7:34:ca:90:67:c9:fc:6b:fb:72:4c:19:aa:
         1e:49:26:9f:33:0d:16:a0:f4:12:d0:3b:3b:eb:22:7a:5e:4f:
         1e:e7:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:15 2026 by rpki-client