This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/7B24675800F311F18E4DA8EBDAE4EC9C.roa
File:                     7B24675800F311F18E4DA8EBDAE4EC9C.roa (raw, json)
Hash identifier:          gxOS892rWa//UdGze2bCZeoQIzTnFobyOT8pCY9k+UM=
Subject key identifier:   DF:E7:92:92:B7:BF:5F:CF:2A:60:01:94:67:B1:06:8E:9E:FF:4D:90
Certificate issuer:       /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial:       02CE
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/7B24675800F311F18E4DA8EBDAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 11:28:37 +0000
ROA not before:           Tue 03 Feb 2026 11:28:32 +0000
ROA not after:            Sun 03 Feb 2036 11:28:32 +0000
asID:                     328721
IP address blocks:        102.222.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
        Validity
            Not Before: Feb  3 11:28:32 2026 GMT
            Not After : Feb  3 11:28:32 2036 GMT
        Subject: CN=6981dbe5-1c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:09:e2:cc:e9:82:bf:db:fc:59:73:99:0e:
                    b1:cb:5a:3a:66:08:61:d6:c4:81:aa:86:04:77:c1:
                    61:fa:45:57:cc:8a:78:54:f4:b2:74:2f:e3:41:61:
                    4a:43:6a:68:db:79:75:a6:f3:f8:b2:05:7b:25:e0:
                    25:b7:16:95:48:c5:5e:b2:f8:52:1f:19:f4:3f:c0:
                    d1:c9:6d:c5:dc:17:b8:1b:7f:f1:5a:9a:2b:54:21:
                    9b:72:36:0d:21:ae:a1:a9:b8:ab:f8:0d:18:b8:13:
                    29:43:29:5b:60:0d:4d:fd:e4:bb:c2:1f:9d:4b:b9:
                    8c:e3:ef:2a:6a:ac:82:ad:0b:11:8c:4f:58:05:98:
                    95:27:01:5c:60:cd:f1:f5:65:3d:2e:13:0d:71:57:
                    a5:93:a9:e6:9d:b5:3d:4c:d0:9f:29:b5:59:96:2d:
                    3c:5e:3b:ff:2f:b8:cd:12:4a:71:ca:69:53:5c:fc:
                    d8:87:d3:4c:63:29:af:08:07:43:c5:d3:a1:62:7a:
                    0c:0c:26:71:86:f8:17:ad:1f:27:65:5c:60:5b:a5:
                    59:4f:06:f3:70:5f:ed:db:c3:d2:b2:5b:af:e1:19:
                    fb:fb:68:84:17:42:06:9a:ba:a2:a4:a1:45:b3:07:
                    85:a8:e7:e1:52:5e:16:84:92:4e:74:4f:60:a6:e1:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:92:92:B7:BF:5F:CF:2A:60:01:94:67:B1:06:8E:9E:FF:4D:90
            X509v3 Authority Key Identifier:
                keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/7B24675800F311F18E4DA8EBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.222.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:72:3e:bf:0f:04:16:7d:23:43:0c:73:55:0c:62:1a:51:4f:
         e8:e5:a6:57:51:77:df:82:18:22:ac:4e:bf:1b:79:ab:1b:99:
         df:86:23:81:35:56:f6:d7:fe:20:38:2f:e1:db:e3:c1:51:a3:
         62:a8:e8:b0:4b:d8:6d:90:b6:09:fb:6e:13:20:3a:d8:e2:e9:
         94:76:56:00:ac:34:bb:72:3b:d3:9d:db:3a:85:a7:35:21:18:
         35:f5:ba:45:21:f2:e4:0c:cb:c0:a3:c0:04:d9:28:7e:ec:34:
         85:12:3d:b2:10:0b:55:81:9e:19:98:2e:a2:54:86:9a:c9:3d:
         a0:bb:c6:53:95:f0:b8:a5:01:87:f6:c5:a7:d8:71:b4:81:58:
         e8:62:72:c1:38:9e:d8:26:df:05:c2:f6:a2:36:c7:e4:4e:dc:
         47:fc:d9:8b:13:43:6b:6c:48:d5:a4:47:8f:bc:d9:b6:8f:0a:
         87:eb:c1:c0:21:f1:32:b0:b9:44:0d:59:b3:c8:a5:b0:f5:da:
         ff:70:7a:f5:16:ee:bd:c7:25:d2:e3:ce:7a:73:df:ee:a4:36:
         92:78:e5:7d:58:58:35:12:03:bc:ef:48:72:0a:9d:2c:91:01:
         6b:cd:b3:d6:16:06:7b:55:a4:02:97:c4:8e:38:76:de:f5:c0:
         76:67:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 03:00:13 2026 by rpki-client