This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8116CE4F08811F0870D579BDAE4EC9C.roa
File:                     C8116CE4F08811F0870D579BDAE4EC9C.roa (raw, json)
Hash identifier:          ygOkRryHJY5w331euNI2kmroB52qy8nm86Tavn60XeQ=
Subject key identifier:   7F:3A:76:7A:BA:84:BA:5F:88:66:E1:20:16:E6:E6:F6:25:AC:BF:11
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       1709
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8116CE4F08811F0870D579BDAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 14:04:31 +0000
ROA not before:           Tue 13 Jan 2026 14:04:27 +0000
ROA not after:            Thu 13 Jan 2028 14:04:27 +0000
asID:                     212669
IP address blocks:        102.129.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Jan 2026 01:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5897 (0x1709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Jan 13 14:04:27 2026 GMT
            Not After : Jan 13 14:04:27 2028 GMT
        Subject: CN=696650ef-9f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:21:32:82:d9:d3:29:06:54:f9:c7:b2:4f:
                    09:17:47:82:8b:a6:83:c1:fe:d2:25:5e:a1:fc:32:
                    7c:39:e6:a4:d9:d8:bd:f4:15:8f:b3:ef:37:f7:66:
                    b8:fc:e4:9d:9f:6d:1f:d5:7a:fb:64:d1:e5:d8:b5:
                    af:a1:0b:51:03:42:ff:12:c5:3c:e4:6f:43:f5:a6:
                    0e:48:1a:78:2b:7d:a8:aa:2e:96:23:ff:1c:23:92:
                    94:b6:c0:e6:63:ea:fd:1c:fc:05:8b:9b:8a:a8:68:
                    8c:a6:36:90:09:94:13:2b:22:db:f7:bb:72:12:0d:
                    5e:3a:92:d0:64:3e:16:84:0d:c0:df:86:f9:16:82:
                    2b:6c:41:4a:37:71:41:c1:33:35:08:88:90:d4:6d:
                    78:94:80:92:ff:04:74:0d:1d:b9:a4:cd:2a:d1:42:
                    49:11:fb:ec:a4:26:a0:37:93:de:09:f1:f1:52:20:
                    1e:5e:e4:ab:43:f0:8e:bb:1b:96:3d:f0:ba:f8:86:
                    d9:ee:e2:58:44:33:bc:e0:7c:b8:e0:c3:93:89:d7:
                    0d:9d:b1:b8:b9:57:d1:60:0d:11:2e:83:17:46:fe:
                    07:5d:ee:71:40:bf:2f:34:3b:b0:0b:3a:04:4c:22:
                    5f:de:2d:c7:de:9f:eb:5a:7f:04:10:17:f6:a8:a5:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3A:76:7A:BA:84:BA:5F:88:66:E1:20:16:E6:E6:F6:25:AC:BF:11
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/C8116CE4F08811F0870D579BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.129.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:89:ba:2e:10:0b:e7:65:94:ef:f3:4b:0d:30:60:37:e9:6c:
         e9:a3:b3:c1:2c:ea:51:1f:34:83:d5:a2:b2:97:d6:26:e9:58:
         ef:57:bc:9c:db:11:8e:f7:76:24:bb:ca:9a:e4:8f:50:56:1d:
         c0:b6:ad:10:b5:f1:dc:0c:0c:16:84:b1:75:0f:e2:ab:7f:5f:
         a5:dc:1b:f9:a0:5a:da:8a:28:4c:4b:cc:7a:15:a2:88:b4:ab:
         2e:2b:b4:05:7c:4f:bb:70:f2:ed:b8:23:22:67:f3:8b:6b:f1:
         93:c5:55:21:fc:dc:08:a6:5a:88:40:66:99:f2:ab:4f:3a:4c:
         78:98:a6:48:cb:48:8e:07:8c:f0:be:a1:bd:99:21:d1:7a:5d:
         90:a1:ac:0e:0d:17:91:f5:82:23:4e:58:f2:e3:6f:df:81:b7:
         91:7b:68:e1:76:fa:0f:8f:49:72:e4:de:27:0b:18:e8:21:33:
         e7:bb:b6:71:cf:ae:67:14:88:4b:05:f5:6f:fe:67:30:fe:8a:
         a9:df:e4:d6:a1:0d:20:3b:f2:0b:fe:45:ee:8b:8c:07:63:90:
         65:5c:1a:a5:a9:0d:b0:fc:b1:8c:f9:8c:b7:e2:9e:16:f1:75:
         0a:21:70:45:52:17:b3:9f:08:ff:ab:bd:31:2e:d2:8b:16:bc:
         21:f4:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 15:33:00 2026 by rpki-client