This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/5EE3E842FD0211F0921310B2DAE4EC9C.roa
File:                     5EE3E842FD0211F0921310B2DAE4EC9C.roa (raw, json)
Hash identifier:          +3pu8hgu2d1LUSEPLF2AarTu3Wyji/Ubh3wBjEyoGP4=
Subject key identifier:   AA:7C:4B:62:EB:84:85:C7:39:C6:02:E8:52:AE:87:E8:57:B9:86:A4
Certificate issuer:       /CN=F36A1FBCAF/serialNumber=D85FE68144BD630368581F9711215A724556D4D4
Certificate serial:       17
Authority key identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/5EE3E842FD0211F0921310B2DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 11:05:08 +0000
ROA not before:           Fri 30 Jan 2026 11:05:03 +0000
ROA not after:            Wed 31 Dec 2036 11:05:03 +0000
asID:                     37662
IP address blocks:        102.204.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1FBCAF, serialNumber=D85FE68144BD630368581F9711215A724556D4D4
        Validity
            Not Before: Jan 30 11:05:03 2026 GMT
            Not After : Dec 31 11:05:03 2036 GMT
        Subject: CN=697b3ee3-1008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:42:a6:ed:62:e3:5d:9a:6d:a3:37:95:dd:
                    33:92:2c:48:df:7d:03:d1:70:a7:91:99:69:7d:23:
                    a6:3b:97:0f:fd:94:8e:7d:27:09:2b:11:c8:f1:0d:
                    49:74:f9:a1:6b:2b:b7:78:aa:7b:9a:fe:9c:70:c5:
                    63:2c:9d:72:f0:ff:0c:5f:57:69:cc:49:7d:8e:9f:
                    86:cd:2f:b2:e8:3e:51:51:d9:0c:52:ec:64:a7:a8:
                    d6:ef:d7:60:cf:ca:36:c2:e1:dd:0a:0d:6f:ec:4f:
                    76:0d:fc:c7:b5:f2:2e:8b:d9:eb:39:22:57:a4:96:
                    e6:94:a9:82:f5:ec:e0:51:0d:43:62:a5:90:fa:26:
                    ad:c6:36:72:b7:19:2e:1c:3b:5f:05:1f:83:d8:86:
                    85:3c:23:92:5d:42:32:1b:bd:b4:42:7e:0b:80:73:
                    4b:07:9b:56:9c:e5:d8:4f:32:ee:df:a0:98:6b:b3:
                    65:e0:81:9e:21:3a:2f:89:99:7d:c1:6c:2e:6a:c4:
                    3a:9b:74:7a:9e:36:07:8f:91:24:45:53:41:d0:14:
                    7f:b1:c6:2a:99:cb:7a:7c:bd:d6:9d:0b:5a:31:64:
                    f9:ef:8c:89:0b:fd:a9:62:59:23:08:2b:67:f5:18:
                    f3:da:3b:aa:85:20:60:60:ff:c7:24:c5:76:93:d1:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7C:4B:62:EB:84:85:C7:39:C6:02:E8:52:AE:87:E8:57:B9:86:A4
            X509v3 Authority Key Identifier:
                keyid:D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/5EE3E842FD0211F0921310B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:74:1b:f6:7f:0f:a0:56:9a:53:d4:24:0d:20:15:44:38:61:
         a0:ff:56:f5:32:7b:b8:b5:68:6c:b3:bf:52:6a:ce:c3:61:00:
         cf:70:a5:9b:4a:92:b7:db:ef:aa:0e:3b:09:2f:f0:3a:25:e2:
         c2:2b:ff:a2:a6:4d:38:18:f9:e7:74:eb:bd:d2:04:06:cd:8e:
         cb:97:64:85:32:f0:e9:05:0f:b0:86:f6:11:a0:be:87:7c:1e:
         d2:b3:2d:d8:a1:d7:ab:fc:7a:dd:39:cb:17:f1:d6:89:78:5b:
         e6:3a:f5:6b:8d:47:da:01:ee:8f:55:29:30:59:7f:bf:80:9b:
         f2:a5:02:7b:67:79:cc:ce:e5:36:b4:31:d1:54:c1:b5:bc:41:
         40:26:3e:10:97:c9:b5:61:74:b5:bf:64:5b:13:e7:a1:d2:22:
         7f:12:06:97:36:bc:7a:85:1f:34:4e:9c:02:65:74:c1:ab:05:
         74:97:11:63:c1:16:76:63:9b:85:b5:e2:97:78:52:6e:3a:75:
         8f:1e:34:d2:0c:f3:11:01:7b:bd:1d:94:51:34:9d:b1:d5:20:
         8c:4e:7b:77:34:62:b7:fe:ae:83:4e:08:6d:1a:41:83:6a:8d:
         27:54:5a:68:b9:1b:90:9f:64:a6:15:d4:51:c5:d2:31:aa:ee:
         df:9d:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:12 2026 by rpki-client