This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/377F8AB4FF9F11F0848280B7DAE4EC9C.roa
File:                     377F8AB4FF9F11F0848280B7DAE4EC9C.roa (raw, json)
Hash identifier:          gFLOPNqksbsyHx1yrYoxHSQi3UU734l3ljRLt/JU9Nc=
Subject key identifier:   33:15:AA:30:F1:3F:F9:44:A6:1B:56:6D:A7:59:23:BB:BB:F3:97:74
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       0317
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/377F8AB4FF9F11F0848280B7DAE4EC9C.roa
Signing time:             Sun 01 Feb 2026 18:52:55 +0000
ROA not before:           Sun 01 Feb 2026 18:52:50 +0000
ROA not after:            Fri 14 Jan 2028 18:52:50 +0000
asID:                     328286
IP address blocks:        102.164.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Feb  1 18:52:50 2026 GMT
            Not After : Jan 14 18:52:50 2028 GMT
        Subject: CN=697fa107-0c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:97:0a:70:a4:58:63:8d:fb:a8:6f:39:24:
                    18:ee:42:da:ef:a2:a2:7a:e7:a4:4f:d9:96:83:6e:
                    d7:e1:24:62:d7:fd:a7:a3:dc:07:b0:be:10:17:5c:
                    da:fd:6f:16:1b:a2:f2:92:4d:6e:aa:c1:de:09:4f:
                    fc:80:e6:c3:34:0d:3d:36:dd:4e:fc:85:8d:1e:a1:
                    c1:97:8b:1c:8d:f8:00:d3:a5:35:03:cf:58:56:2f:
                    49:c9:db:33:71:f4:90:d6:9a:ec:80:ca:8c:ee:3f:
                    7d:8c:6b:11:1b:f1:e7:38:f9:97:bf:33:b0:ce:2b:
                    20:5b:e4:5e:f4:80:08:38:ad:b0:63:d2:d1:d3:79:
                    66:60:da:04:ea:3b:20:e8:02:9f:97:4d:22:b5:9d:
                    04:79:89:af:e7:e5:84:e3:ba:74:9a:15:9f:86:13:
                    ae:83:c8:a1:a9:55:51:61:8d:3e:f7:2a:7f:6a:cc:
                    4a:1b:77:ed:0a:66:7a:fc:12:47:7a:80:63:38:2d:
                    a3:04:1c:fd:3f:e4:3d:d3:f6:9b:a4:c4:54:e2:f6:
                    c6:1b:f6:1c:0d:0e:a6:d5:b9:57:2e:19:c6:c5:5f:
                    c0:57:6e:2c:22:b6:58:32:77:6d:dc:23:95:97:c1:
                    46:15:c3:e7:94:3d:2f:cb:57:cc:bb:2e:99:2c:8a:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:AA:30:F1:3F:F9:44:A6:1B:56:6D:A7:59:23:BB:BB:F3:97:74
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/377F8AB4FF9F11F0848280B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:13:1d:d8:c8:fe:83:95:84:24:fb:1f:f0:09:25:d0:3c:bf:
         c8:a3:a9:5b:b7:63:7d:ef:cc:2d:fe:e8:ee:81:1b:1d:10:94:
         29:79:53:ba:57:b8:3a:c2:5a:59:6a:b9:f9:0d:09:f0:b0:77:
         d2:6e:20:2b:98:c7:82:67:45:2e:70:cc:a3:c8:b7:6a:e1:1d:
         5e:4d:23:2b:0d:58:27:a2:a3:85:0d:59:a5:c1:74:57:56:ce:
         e1:14:8a:91:bc:88:00:85:f5:44:53:c5:d0:31:58:2c:4a:9b:
         07:36:97:68:a9:e7:a0:b2:98:36:4f:6d:63:f4:9c:8d:87:cc:
         a5:f5:e3:91:1e:37:ee:63:9a:e9:4f:b2:9f:68:a3:fc:ed:ce:
         5d:c0:23:76:2f:7f:6b:3c:01:92:b8:35:f7:70:43:66:c0:4f:
         78:84:6b:15:d5:6f:13:70:78:62:a4:c0:ff:33:a5:e7:ce:32:
         ac:a3:f5:cc:17:ca:fe:bc:b4:ab:9a:62:05:f2:af:85:9a:73:
         ba:1a:73:56:4b:f7:5e:52:75:8d:3b:40:e6:d3:a8:25:6f:13:
         31:fc:95:2b:3f:a4:a6:5a:bc:e5:78:8e:5d:38:eb:03:86:d6:
         22:e3:91:14:91:f1:f1:fd:79:80:0f:87:d6:1a:c6:e1:e0:34:
         e3:28:01:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxQUVBRjExMC8GA1UEBRMoMEY0MTI1QUQyQ0QyQkQ4QjNBRTE2MkYzRTMyMkU1
RjU4MTA0NzU1QzAeFw0yNjAyMDExODUyNTBaFw0yODAxMTQxODUyNTBaMBgxFjAU
BgNVBAMTDTY5N2ZhMTA3LTBjM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJLpcKcKRYY437qG85JBjuQtrvoqJ656RP2ZaDbtfhJGLX/aej3AewvhAX
XNr9bxYbovKSTW6qwd4JT/yA5sM0DT023U78hY0eocGXixyN+ADTpTUDz1hWL0nJ
2zNx9JDWmuyAyozuP32MaxEb8ec4+Ze/M7DOKyBb5F70gAg4rbBj0tHTeWZg2gTq
OyDoAp+XTSK1nQR5ia/n5YTjunSaFZ+GE66DyKGpVVFhjT73Kn9qzEobd+0KZnr8
Ekd6gGM4LaMEHP0/5D3T9pukxFTi9sYb9hwNDqbVuVcuGcbFX8BXbiwitlgyd23c
I5WXwUYVw+eUPS/LV8y7LpksivJDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMxWq
MPE/+USmG1Ztp1kju7vzl3QwHwYDVR0jBBgwFoAUD0ElrSzSvYs64WLz4yLl9YEE
dVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQyNUJFNDY1L0QwRWxy
U3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QwRWxyU3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQy
NUJFNDY1LzM3N0Y4QUI0RkY5RjExRjA4NDgyODBCN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFmpGAwDQYJKoZIhvcNAQEL
BQADggEBABQTHdjI/oOVhCT7H/AJJdA8v8ijqVu3Y33vzC3+6O6BGx0QlCl5U7pX
uDrCWllqufkNCfCwd9JuICuYx4JnRS5wzKPIt2rhHV5NIysNWCeio4UNWaXBdFdW
zuEUipG8iACF9URTxdAxWCxKmwc2l2ip56CymDZPbWP0nI2HzKX145EeN+5jmulP
sp9oo/ztzl3AI3Yvf2s8AZK4NfdwQ2bAT3iEaxXVbxNweGKkwP8zpefOMqyj9cwX
yv68tKuaYgXyr4Wac7oac1ZL915SdY07QObTqCVvEzH8lSs/pKZavOV4jl046wOG
1iLjkRSR8fH9eYAPh9YaxuHgNOMoAd8=
-----END CERTIFICATE-----
Generated at Sat Feb 7 02:39:48 2026 by rpki-client