This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8E97B04FDD911F08C5DAAD9DAE4EC9C.roa
File:                     B8E97B04FDD911F08C5DAAD9DAE4EC9C.roa (raw, json)
Hash identifier:          ru0ONt2ignJVLw+hJpf+vEowifZ07Z5FU02W9LXR0OU=
Subject key identifier:   0E:DB:F1:E4:85:54:7A:0C:6B:04:09:42:84:95:E1:E3:62:AA:3A:42
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1724
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8E97B04FDD911F08C5DAAD9DAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 12:46:40 +0000
ROA not before:           Fri 30 Jan 2026 12:46:35 +0000
ROA not after:            Sun 30 Jan 2028 12:46:35 +0000
asID:                     58061
IP address blocks:        102.129.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Feb 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5924 (0x1724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jan 30 12:46:35 2026 GMT
            Not After : Jan 30 12:46:35 2028 GMT
        Subject: CN=697ca830-8b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c6:7e:fe:9d:f3:df:0d:db:5e:c7:13:ed:db:
                    0e:cd:25:05:70:39:76:43:95:b1:33:d3:6f:b2:f1:
                    7c:7a:8e:17:b7:76:6c:90:87:1b:09:72:8a:d5:4a:
                    a2:9b:5e:32:fa:33:c8:67:8a:1b:d3:97:9b:b8:f8:
                    12:ec:99:d8:14:04:bb:4e:e5:9b:7b:19:d2:33:3d:
                    7b:f3:ef:80:f9:08:bf:24:36:b7:dd:70:ee:5a:3b:
                    cd:c3:76:2e:d2:77:13:fe:09:dc:06:7f:05:63:5e:
                    16:57:56:48:c6:8c:15:72:cd:cc:62:89:bd:bc:14:
                    50:11:cb:3f:30:48:62:5e:c2:f0:91:46:1b:2e:94:
                    b0:0c:1f:46:1b:9e:26:5f:df:f8:82:6f:45:4c:1b:
                    b9:c0:7c:47:aa:d4:12:62:9c:77:b9:37:d7:18:e1:
                    c7:d7:4a:68:0f:37:8e:63:fe:6c:60:7b:c8:8e:27:
                    45:41:cb:00:a7:ef:4f:b9:8f:e6:58:9e:6d:28:81:
                    47:be:76:f6:21:0e:bc:26:dd:53:09:8f:25:41:c6:
                    90:bd:25:7b:4d:58:90:dc:6e:4e:e1:39:f8:df:e0:
                    50:8b:64:64:0c:9b:3b:ce:6a:a3:c8:c5:ee:c5:0d:
                    ab:32:d4:c8:ac:13:95:e7:98:95:f9:1c:5d:a6:72:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:F1:E4:85:54:7A:0C:6B:04:09:42:84:95:E1:E3:62:AA:3A:42
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/B8E97B04FDD911F08C5DAAD9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:4a:cb:b1:3e:9c:8b:79:6d:b8:e1:2e:fb:46:3f:d3:d4:
         ec:85:ed:a1:e1:ad:7f:05:93:70:ba:1d:a0:83:38:da:50:cf:
         58:2b:24:07:40:b1:95:31:ea:c2:20:38:78:7b:45:5e:ba:19:
         52:3e:fa:cc:4e:1d:08:6e:63:6e:ae:3b:5f:16:13:59:b8:19:
         bc:fc:d7:fc:7f:c2:5f:10:ae:7b:13:b3:ce:10:c3:fe:9c:78:
         48:a2:2d:41:d8:17:fa:d2:09:9b:74:3e:31:97:1e:01:eb:08:
         7a:8c:5e:54:a9:a0:83:28:96:38:86:28:90:0d:f3:b8:b4:8d:
         3e:1b:fb:93:14:ee:bf:6e:24:17:f8:38:40:f7:c2:85:f3:f5:
         51:f5:7f:91:2c:68:36:51:55:fb:b4:7c:e4:a9:42:73:60:fb:
         7d:ac:3d:a9:c8:32:e0:0e:8b:f8:bd:38:26:90:dd:8f:8d:84:
         4c:8b:25:60:ac:bf:84:03:c1:08:89:09:11:42:3c:6d:d3:4d:
         bd:ff:1b:4f:46:d4:a8:83:f9:62:87:96:28:df:ad:ea:46:cb:
         fa:65:5a:22:83:a9:0f:77:07:62:e0:8f:6f:35:06:73:d0:93:
         96:75:b8:ad:5b:18:b7:5b:3f:1b:d8:7f:f0:9a:45:b4:44:1a:
         27:f0:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 17:48:46 2026 by rpki-client