This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AE3B800065C11F1918A0FACDAE4EC9C.roa
File:                     4AE3B800065C11F1918A0FACDAE4EC9C.roa (raw, json)
Hash identifier:          GjPRnfeT0gXvLpsZiCair/Y8wSGo+GObm5JZCvYuNTs=
Subject key identifier:   5E:EB:93:B9:42:A1:73:61:A1:FA:A7:80:EA:37:D7:59:AC:86:29:4E
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1747
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AE3B800065C11F1918A0FACDAE4EC9C.roa
Signing time:             Tue 10 Feb 2026 08:41:29 +0000
ROA not before:           Tue 10 Feb 2026 08:41:24 +0000
ROA not after:            Thu 10 Feb 2028 08:41:24 +0000
asID:                     61317
IP address blocks:        102.165.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Feb 2026 01:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5959 (0x1747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 10 08:41:24 2026 GMT
            Not After : Feb 10 08:41:24 2028 GMT
        Subject: CN=698aef39-7612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:88:13:84:ae:e9:3b:77:1e:38:d2:47:30:
                    f1:34:8c:98:7d:8d:99:23:3a:26:c7:03:9a:6d:24:
                    ff:f8:f5:99:97:fb:64:39:4c:03:87:b8:45:19:b7:
                    6a:1c:5e:bc:90:99:04:3a:00:60:48:c3:77:f4:3f:
                    e0:eb:c7:9c:05:6c:cb:b4:61:42:df:d4:37:04:ed:
                    83:f3:d9:92:6c:82:3b:c4:6c:ac:6f:6f:3e:4c:55:
                    86:37:a1:50:26:c2:d3:ac:21:c8:7d:a2:eb:13:31:
                    f1:f4:58:e6:d2:8d:de:f5:1d:2d:e5:fa:40:bd:de:
                    da:c3:98:fd:2c:70:ae:c5:f8:21:d4:1c:bd:29:89:
                    9c:45:3d:4c:cd:ca:23:c5:e6:9e:2c:f8:e3:84:83:
                    1a:e7:3b:3c:e5:68:e1:fe:b1:41:66:2d:b0:c0:76:
                    0e:d3:ed:35:3f:b2:79:39:b8:56:8f:fa:bf:37:49:
                    60:77:8c:79:d3:b1:a2:d7:d8:b6:37:6b:66:89:fd:
                    94:2e:1c:68:d0:2a:0b:c1:3d:1f:f1:38:22:97:05:
                    e8:b0:51:b9:2e:e4:e7:98:ad:99:83:8f:fb:19:5e:
                    19:85:dc:c1:fb:27:cb:98:ec:27:fe:fc:ac:6e:98:
                    f7:63:d7:7c:6f:68:74:81:e2:8c:a8:07:68:39:13:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EB:93:B9:42:A1:73:61:A1:FA:A7:80:EA:37:D7:59:AC:86:29:4E
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4AE3B800065C11F1918A0FACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:72:74:c4:76:c5:37:d1:1f:22:44:cb:21:31:71:77:fb:b8:
         7e:ed:4b:d6:a1:65:31:af:3c:0e:4b:0b:27:e8:f9:80:61:66:
         1b:0b:fd:b8:96:53:4a:c3:89:f9:8d:6b:b3:bd:51:da:70:a0:
         7e:b0:60:53:42:48:59:fd:f0:25:16:cd:d8:6c:ba:f6:b4:72:
         51:a8:d5:64:ec:9c:26:59:cd:fd:a9:2c:5b:cf:01:60:da:d2:
         d9:d2:d9:a4:b6:98:d6:f6:ab:5f:14:dd:81:f1:a8:83:04:15:
         59:05:b4:42:ac:ac:d2:d0:de:60:8e:b8:5d:20:70:ea:c7:73:
         76:32:5b:10:de:30:bb:30:37:d1:22:14:93:fa:0c:b5:66:2e:
         24:16:96:96:a4:20:6d:a9:dd:c5:fa:17:e7:4b:6b:f6:3d:5e:
         7c:a3:81:8b:c6:9d:45:61:80:7d:05:bf:e6:7d:18:5e:49:25:
         4b:86:84:e4:03:51:35:4a:12:a2:4a:35:a2:d5:f2:a9:1e:a0:
         ce:f8:71:a3:e2:15:bf:71:98:8b:86:40:41:a1:52:b7:04:ba:
         48:98:8b:29:49:1c:bd:5d:1d:0d:43:17:07:b1:44:ea:30:d5:
         ba:a1:ed:69:e1:d3:d7:f0:e5:d8:1d:39:63:35:da:b9:95:f6:
         f5:1e:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 15 17:57:01 2026 by rpki-client