This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6CA20C4065C11F1A5B624B0DAE4EC9C.roa
File:                     E6CA20C4065C11F1A5B624B0DAE4EC9C.roa (raw, json)
Hash identifier:          Gd2xHR5MrllFbVPa4lpvAdDxVd4ISBV8kfcG+rYXWak=
Subject key identifier:   3F:C2:18:63:E0:EA:B1:62:39:22:F3:AF:7B:80:AC:00:DE:1A:D4:EF
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       174A
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6CA20C4065C11F1A5B624B0DAE4EC9C.roa
Signing time:             Tue 10 Feb 2026 08:45:51 +0000
ROA not before:           Tue 10 Feb 2026 08:45:41 +0000
ROA not after:            Thu 10 Feb 2028 08:45:41 +0000
asID:                     61317
IP address blocks:        102.165.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Feb 2026 01:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5962 (0x174a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 10 08:45:41 2026 GMT
            Not After : Feb 10 08:45:41 2028 GMT
        Subject: CN=698af03f-798e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:8a:70:bc:6c:fa:75:db:db:8a:f9:e1:56:
                    45:88:9d:1a:7e:db:f7:93:21:b4:aa:db:dc:39:c4:
                    81:f1:58:33:ed:07:e6:3f:8e:e9:94:af:7e:26:61:
                    28:5b:09:1c:63:d3:2e:fe:bd:3f:96:5e:1a:57:16:
                    f5:32:1e:4a:12:ec:53:65:32:97:c3:00:50:87:91:
                    20:b6:a0:de:72:d8:8b:7b:f8:a1:65:81:73:16:82:
                    3f:d3:e9:e2:af:d1:23:53:6d:cc:01:7a:28:b7:05:
                    89:26:06:8a:e6:98:20:7a:be:90:ed:42:a5:2f:5d:
                    97:b0:cf:e1:e2:fc:9f:86:c4:c9:c0:e4:fc:c5:ba:
                    fb:e6:71:28:4a:12:15:a2:dc:12:ea:b4:8e:42:c8:
                    09:01:dc:67:83:e2:df:56:54:77:c3:09:84:d3:10:
                    80:52:78:63:d6:c3:86:90:69:f2:65:2b:a2:18:77:
                    4b:d7:71:2b:dc:36:31:71:b2:fa:96:b7:f0:94:4d:
                    32:4d:eb:31:8b:1d:0b:09:1b:da:48:ca:b7:81:8d:
                    e2:1b:1f:c6:ab:cf:c5:63:62:dc:76:d0:0d:9b:85:
                    63:78:23:46:5b:9a:e3:c4:bd:a7:05:6d:1c:0f:ee:
                    28:35:d3:b0:f8:5c:8b:02:6c:df:0a:a6:3f:9f:34:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:18:63:E0:EA:B1:62:39:22:F3:AF:7B:80:AC:00:DE:1A:D4:EF
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E6CA20C4065C11F1A5B624B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:c2:79:0f:fb:ef:82:96:26:aa:1a:54:9e:f3:49:3d:f4:
         7e:ef:91:5c:29:79:07:0c:21:d3:50:84:8a:4d:70:88:e0:3d:
         f4:1f:aa:f2:3a:70:3e:43:b6:3d:50:84:99:a4:7c:45:2f:b9:
         d2:9f:d3:a6:de:9c:6d:fc:88:91:9f:c5:4c:a2:fa:d3:40:91:
         b1:49:ef:e0:8d:1c:73:45:55:e1:fa:e7:ff:70:fa:1f:2b:5c:
         a1:bd:60:8f:35:97:d6:a4:d1:5f:45:b1:fb:04:67:c9:0c:1f:
         95:ac:0e:53:1c:3b:49:d7:af:75:70:5b:3b:3f:cb:92:83:d8:
         6a:8e:f3:0b:24:8b:39:01:69:46:f0:e5:7a:ce:bf:a8:a7:15:
         f2:dd:5b:51:65:e2:1a:28:d4:b9:5d:a3:4f:37:e6:79:2b:c9:
         65:ff:8d:fd:12:ce:bd:97:38:7d:41:39:42:43:2a:c6:5b:d5:
         14:56:eb:3c:ff:e0:6f:86:c0:97:a4:5c:95:73:32:8d:61:1f:
         cf:8b:fd:bc:9b:2e:f3:c9:f9:f7:0e:d6:b8:a7:c1:83:50:4c:
         8d:0e:48:f7:25:4d:0d:57:7e:b9:e6:8e:34:34:25:3e:aa:37:
         e7:91:e5:a6:f5:6b:53:e2:8a:25:31:c8:51:f4:3c:e8:1d:46:
         a7:ee:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 15 17:59:20 2026 by rpki-client