This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/18CBA8E8FE2611F0832746A3DAE4EC9C.roa
File:                     18CBA8E8FE2611F0832746A3DAE4EC9C.roa (raw, json)
Hash identifier:          f0u+jlhZvZ8VvTKDrbqQ0yZ8oighlGr7Lnwhi+VzUOM=
Subject key identifier:   D9:77:EB:4D:BF:B7:6B:50:04:35:F0:21:47:1F:3E:E7:59:79:73:31
Certificate issuer:       /CN=F36ACCFAAF/serialNumber=4DE74AAB64A8AF73D5663C44069ED929C702343D
Certificate serial:       05
Authority key identifier: 4D:E7:4A:AB:64:A8:AF:73:D5:66:3C:44:06:9E:D9:29:C7:02:34:3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TedKq2Sor3PVZjxEBp7ZKccCND0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/18CBA8E8FE2611F0832746A3DAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 21:53:23 +0000
ROA not before:           Sat 31 Jan 2026 21:53:18 +0000
ROA not after:            Thu 31 Jan 2036 21:53:18 +0000
asID:                     329692
IP address blocks:        102.203.132.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/TedKq2Sor3PVZjxEBp7ZKccCND0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/TedKq2Sor3PVZjxEBp7ZKccCND0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TedKq2Sor3PVZjxEBp7ZKccCND0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ACCFAAF, serialNumber=4DE74AAB64A8AF73D5663C44069ED929C702343D
        Validity
            Not Before: Jan 31 21:53:18 2026 GMT
            Not After : Jan 31 21:53:18 2036 GMT
        Subject: CN=697d2853-b0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:0f:6a:01:c3:41:e8:e0:0d:95:7f:e7:71:
                    50:d1:20:38:24:2b:1f:52:4d:63:c6:17:3d:78:11:
                    b9:80:85:df:18:73:e3:e0:a9:62:dc:49:3e:8c:44:
                    a9:3b:f1:bd:a6:72:b5:95:7f:b7:af:2c:10:ac:34:
                    d3:19:95:27:c9:fa:fc:17:9b:39:da:97:ff:cf:89:
                    a8:f6:32:8d:2f:14:bf:26:ad:8a:91:d1:a3:66:43:
                    2b:00:3f:e1:8d:e0:20:74:b7:61:90:11:2a:a4:cb:
                    85:31:c1:3d:3f:2d:39:23:83:6f:68:05:aa:32:43:
                    01:11:54:75:50:a9:95:8d:d5:c5:d9:69:93:b5:b3:
                    ee:6d:76:7a:62:52:bb:bf:bd:44:81:d8:4f:9f:ba:
                    39:ce:71:07:4d:5c:88:08:94:45:f3:5e:63:2a:a3:
                    e1:15:4f:d2:5b:07:b5:8a:dc:7a:97:8c:0c:9f:15:
                    a4:1d:47:f3:67:6c:5f:0f:67:44:01:c0:6b:6b:d1:
                    71:93:17:aa:a9:c8:ef:67:2c:1f:47:c8:bc:cf:90:
                    d9:bc:ca:f5:8a:fa:50:88:a3:8a:ba:cc:c9:ae:26:
                    71:a9:7a:a9:33:16:3f:c2:96:81:3f:be:ff:ba:77:
                    ae:b1:0a:ae:df:50:12:39:7e:e7:64:c9:bd:f8:9b:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:EB:4D:BF:B7:6B:50:04:35:F0:21:47:1F:3E:E7:59:79:73:31
            X509v3 Authority Key Identifier:
                keyid:4D:E7:4A:AB:64:A8:AF:73:D5:66:3C:44:06:9E:D9:29:C7:02:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/TedKq2Sor3PVZjxEBp7ZKccCND0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TedKq2Sor3PVZjxEBp7ZKccCND0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ACCFA/E5E4BA54FE2111F0AB328B8ADAE4EC9C/18CBA8E8FE2611F0832746A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:1d:b4:f2:35:dd:67:36:3b:65:51:78:fa:20:ee:5f:55:
         f4:06:90:71:7f:2f:3c:49:e0:b9:60:5c:53:ff:51:03:e7:03:
         52:4d:5b:5d:4c:a3:a4:1f:9b:cf:6d:84:c2:37:da:89:95:bc:
         98:8b:5d:70:74:f0:ff:a2:d1:e3:8b:28:b7:8e:1a:32:9b:ed:
         3b:9d:cb:4a:18:8c:3e:90:ab:a6:65:d0:aa:f4:d3:70:40:bd:
         3e:5f:69:54:d3:56:6f:58:eb:00:01:49:9d:13:78:19:05:e6:
         cb:85:1a:4e:1b:66:f1:49:ea:47:a5:c9:35:61:3e:68:e1:ca:
         e1:da:f8:ac:a2:78:1c:45:0c:76:50:ef:a7:c5:5d:26:a7:a1:
         ce:47:a6:49:43:02:1c:54:d2:e3:00:f4:26:9e:61:d2:28:77:
         22:b6:25:28:95:a1:a2:b1:ec:4c:d4:de:e3:35:30:1d:48:e4:
         8b:a0:ab:3c:cb:cc:3c:dd:32:27:91:c7:2b:8c:c0:11:13:15:
         bc:6e:12:31:d2:33:a2:40:21:a4:7f:05:6c:77:72:f6:25:73:
         56:2a:ab:5d:0e:58:7f:73:78:25:71:c8:f9:25:e7:87:77:cb:
         4e:2b:dc:ac:d3:7a:41:c0:f5:5c:34:0f:a5:de:09:c7:a2:5f:
         5b:a8:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:36 2026 by rpki-client