This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8535F6A8E7CB11F0AF17CFDADAE4EC9C.roa
File:                     8535F6A8E7CB11F0AF17CFDADAE4EC9C.roa (raw, json)
Hash identifier:          fl1wAvivGeFtZIlR5mUmFOvdcf7hId9X89Hhhh2PWk4=
Subject key identifier:   31:EC:55:CF:16:A4:E7:72:48:86:B3:21:8A:EE:5E:15:95:48:3A:D5
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       16F2
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8535F6A8E7CB11F0AF17CFDADAE4EC9C.roa
Signing time:             Fri 02 Jan 2026 11:09:35 +0000
ROA not before:           Fri 02 Jan 2026 11:09:30 +0000
ROA not after:            Sun 02 Jan 2028 11:09:30 +0000
asID:                     7018
IP address blocks:        102.129.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Jan 2026 01:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5874 (0x16f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jan  2 11:09:30 2026 GMT
            Not After : Jan  2 11:09:30 2028 GMT
        Subject: CN=6957a76f-c014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:29:09:fe:11:05:44:e5:45:06:03:24:fc:
                    bf:8c:2e:24:3a:49:25:73:e7:f0:6c:6a:9e:2f:3a:
                    38:01:03:e2:d5:a9:38:c9:26:32:a3:84:1e:53:fa:
                    e1:32:4d:da:5e:39:54:0e:bc:7e:c1:8e:bb:84:44:
                    a0:bb:8c:8e:ae:99:3b:93:46:1a:d5:2f:8e:53:9c:
                    00:d5:1e:3b:16:a2:b3:f1:aa:17:af:16:40:92:96:
                    7f:0a:1a:61:6c:8a:27:41:cc:25:51:de:9e:43:7e:
                    f8:36:fe:fc:e8:64:87:3b:3d:d1:50:d3:cd:23:54:
                    e6:9a:28:aa:4e:40:d2:71:60:ea:20:2d:13:23:70:
                    f6:8a:49:ac:f7:c5:f6:71:71:39:dd:0a:41:55:de:
                    f2:c5:e2:49:48:9e:60:b4:65:3b:32:93:01:8b:f1:
                    e4:36:18:4b:93:87:ab:71:c6:4f:8c:a3:7d:75:a2:
                    81:80:d0:61:88:ad:77:60:98:32:2a:a6:61:57:60:
                    ec:a8:d8:3d:a1:a8:30:18:c8:49:07:4b:52:c7:bc:
                    f8:cd:31:40:19:6a:8b:12:a5:98:59:98:47:c5:3a:
                    48:3b:02:4a:0a:ff:a4:b5:cf:a0:b3:67:42:aa:01:
                    73:97:00:8b:c0:57:c0:09:35:f8:5f:a4:cb:60:90:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:55:CF:16:A4:E7:72:48:86:B3:21:8A:EE:5E:15:95:48:3A:D5
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/8535F6A8E7CB11F0AF17CFDADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:05:2a:63:83:37:2b:49:ee:f1:ed:05:cd:65:24:ed:80:
         b6:18:a6:73:e8:1e:63:de:cf:e9:fb:98:d6:65:f4:07:3d:29:
         61:ed:d4:d2:b8:ca:c8:76:76:83:25:cf:d3:34:10:59:e7:8e:
         d8:14:6e:2f:fe:d5:3e:2d:d3:ea:5c:d5:77:20:05:a3:95:94:
         87:31:93:06:ed:6b:5a:0e:3b:50:44:5b:ba:07:ea:cb:3b:3e:
         2f:51:16:b9:af:2f:0f:9e:19:4f:d5:db:cc:13:68:5b:bf:e9:
         c2:35:b2:2a:25:39:7d:ee:f7:eb:01:8b:3e:03:32:47:86:8a:
         b4:28:58:ed:b4:1a:31:68:79:89:e7:c9:71:d5:e8:2e:fd:37:
         dd:a3:9e:7b:24:90:75:5c:78:e6:79:9c:d6:20:1b:43:cf:72:
         78:67:d1:a8:50:54:9b:9c:a6:8c:27:b3:2c:ac:14:84:6a:a8:
         6d:02:aa:b2:2f:3b:68:ea:f1:ff:6b:9b:e2:6f:2e:c8:34:0e:
         a1:fa:7d:aa:c4:14:76:8d:b3:63:0a:f2:26:45:69:e0:ce:6b:
         16:1c:ca:75:47:fe:ab:d1:92:8b:fb:b6:af:4a:0e:c1:06:a3:
         4c:0b:bc:f5:6f:4a:7f:da:79:c2:cf:ba:7c:0e:40:09:90:e8:
         b4:a3:43:7e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFvIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky
NjI5QkJFRDhGQzAeFw0yNjAxMDIxMTA5MzBaFw0yODAxMDIxMTA5MzBaMBgxFjAU
BgNVBAMTDTY5NTdhNzZmLWMwMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeBykJ/hEFROVFBgMk/L+MLiQ6SSVz5/Bsap4vOjgBA+LVqTjJJjKjhB5T
+uEyTdpeOVQOvH7BjruERKC7jI6umTuTRhrVL45TnADVHjsWorPxqhevFkCSln8K
GmFsiidBzCVR3p5Dfvg2/vzoZIc7PdFQ080jVOaaKKpOQNJxYOogLRMjcPaKSaz3
xfZxcTndCkFV3vLF4klInmC0ZTsykwGL8eQ2GEuTh6txxk+Mo311ooGA0GGIrXdg
mDIqpmFXYOyo2D2hqDAYyEkHS1LHvPjNMUAZaosSpZhZmEfFOkg7AkoK/6S1z6Cz
Z0KqAXOXAIvAV8AJNfhfpMtgkAAXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUMexV
zxak53JIhrMhiu5eFZVIOtUwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+
2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4
S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4
QUVBMjI4Lzg1MzVGNkE4RTdDQjExRjBBRjE3Q0ZEQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgbAwDQYJKoZIhvcNAQEL
BQADggEBADU7BSpjgzcrSe7x7QXNZSTtgLYYpnPoHmPez+n7mNZl9Ac9KWHt1NK4
ysh2doMlz9M0EFnnjtgUbi/+1T4t0+pc1XcgBaOVlIcxkwbta1oOO1BEW7oH6ss7
Pi9RFrmvLw+eGU/V28wTaFu/6cI1siolOX3u9+sBiz4DMkeGirQoWO20GjFoeYnn
yXHV6C79N92jnnskkHVceOZ5nNYgG0PPcnhn0ahQVJucpownsyysFIRqqG0CqrIv
O2jq8f9rm+JvLsg0DqH6farEFHaNs2MK8iZFaeDOaxYcynVH/qvRkov7tq9KDsEG
o0wLvPVvSn/aecLPunwOQAmQ6LSjQ34=
-----END CERTIFICATE-----
Generated at Thu Jan 8 17:25:05 2026 by rpki-client