This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8DE9004065D11F187A066B4DAE4EC9C.roa
File:                     B8DE9004065D11F187A066B4DAE4EC9C.roa (raw, json)
Hash identifier:          oJmDbkSqS8Q6qPmx6Ldy1gyVwl156e7WdrFKvh0uX/k=
Subject key identifier:   34:47:B8:50:D0:55:7C:76:E6:C6:60:C0:58:F4:A1:DF:5E:14:02:8C
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1750
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8DE9004065D11F187A066B4DAE4EC9C.roa
Signing time:             Tue 10 Feb 2026 08:51:43 +0000
ROA not before:           Tue 10 Feb 2026 08:51:37 +0000
ROA not after:            Thu 10 Feb 2028 08:51:37 +0000
asID:                     61317
IP address blocks:        102.165.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Feb 2026 01:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5968 (0x1750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 10 08:51:37 2026 GMT
            Not After : Feb 10 08:51:37 2028 GMT
        Subject: CN=698af19f-43dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:a2:c1:8a:f2:55:ca:e2:06:8b:e6:82:c4:
                    13:45:23:c2:17:d3:2e:3a:81:f8:a1:a6:19:e1:c2:
                    87:83:d0:f7:c2:e1:5a:e1:fd:f1:87:f5:87:5c:6b:
                    77:b5:e3:bc:54:b8:9b:a2:56:23:f6:48:aa:df:49:
                    ca:a6:0d:06:b6:7f:77:b8:cb:26:6f:21:d3:ec:7c:
                    f2:9d:b3:94:8a:e2:39:9b:90:b9:64:16:eb:7b:8a:
                    07:93:21:fc:fa:88:35:d1:41:55:5e:fa:15:79:04:
                    22:b5:96:17:31:6f:dc:21:c5:14:f2:a3:55:25:43:
                    63:59:25:dd:36:24:95:a8:50:e2:2b:6c:06:3f:45:
                    ad:45:c3:ab:69:9a:ae:2b:d9:cf:5c:bf:a6:0e:6b:
                    d5:c3:2e:94:0f:5d:91:55:29:f2:02:f2:fb:f7:47:
                    5b:cd:00:84:55:bd:a7:e2:10:39:d0:5a:25:8d:11:
                    72:17:3e:0b:3a:01:5e:5b:51:0f:b6:0e:54:32:86:
                    34:e0:16:a5:3d:15:57:ff:0a:e5:a5:30:bc:77:02:
                    1d:b8:ce:dd:25:ee:de:56:30:6b:aa:ef:8e:7c:9b:
                    4c:5e:c4:0f:70:ef:c2:56:e6:df:86:0c:01:67:12:
                    b6:47:99:e4:24:07:91:23:18:c4:9c:7e:bc:36:dc:
                    06:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:B8:50:D0:55:7C:76:E6:C6:60:C0:58:F4:A1:DF:5E:14:02:8C
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8DE9004065D11F187A066B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:40:bb:86:1a:bb:64:1f:3b:b8:e0:70:84:33:26:19:98:55:
         d8:43:81:a1:91:4a:61:f9:4b:a5:67:60:98:e0:6e:62:dc:ec:
         35:64:89:0e:7a:53:cc:66:1a:ed:a2:3a:44:89:99:8f:88:d4:
         78:dd:61:94:f5:b8:31:90:7a:4f:0e:51:de:6e:d5:ca:72:6d:
         4a:16:ce:95:cf:cf:6f:72:57:7e:06:44:81:8c:bf:b8:8e:39:
         5c:37:14:1a:44:97:9a:4d:1a:cb:7e:e7:c4:53:0e:4f:9a:d6:
         96:9e:39:ad:0c:f1:a1:88:d7:e5:7c:c8:e9:bb:5c:22:58:1a:
         ba:bd:f9:a5:d8:0c:b6:29:56:cc:3c:84:4f:03:78:43:0e:9d:
         81:8b:c9:de:00:0b:da:4d:4d:90:dd:67:ca:99:fb:62:58:77:
         79:42:ac:2a:14:47:bc:c3:fd:f8:7a:14:cc:2a:c3:d1:21:f1:
         49:41:f4:f7:bb:42:3e:0b:23:f1:5c:d8:8a:b0:2a:3c:98:ca:
         33:b9:ed:f4:61:a1:b9:13:16:63:5b:5b:d4:9a:6d:01:c0:4e:
         6b:0a:43:c5:7a:e2:61:e6:60:c2:e0:1d:c4:28:6e:82:66:93:
         7e:00:83:74:6c:2d:6e:6a:5c:85:36:d8:1a:a3:c8:59:4c:e0:
         2d:ac:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 15 17:59:25 2026 by rpki-client