This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/4E125C00FAC411F08DFCF0E5DAE4EC9C.roa
File:                     4E125C00FAC411F08DFCF0E5DAE4EC9C.roa (raw, json)
Hash identifier:          zhpsFFfJy0rDDOkB91cAHS513yglblay1GukI7BbG8U=
Subject key identifier:   A7:AF:5B:5D:C7:6B:2E:05:A0:B7:E6:14:84:25:4E:46:9F:06:CC:27
Certificate issuer:       /CN=F36D76CBAF/serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
Certificate serial:       04DE
Authority key identifier: E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/4E125C00FAC411F08DFCF0E5DAE4EC9C.roa
Signing time:             Mon 26 Jan 2026 14:35:48 +0000
ROA not before:           Mon 26 Jan 2026 14:35:43 +0000
ROA not after:            Tue 26 Jan 2027 14:35:43 +0000
asID:                     37642
IP address blocks:        154.66.108.0/22 maxlen: 22
                          2c0f:f130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D76CBAF, serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
        Validity
            Not Before: Jan 26 14:35:43 2026 GMT
            Not After : Jan 26 14:35:43 2027 GMT
        Subject: CN=69777bc4-90a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:35:a8:f8:9a:eb:4a:81:f3:46:ad:77:4c:
                    d3:4c:19:7f:20:49:83:d4:93:19:20:fe:e0:b3:f5:
                    97:93:07:a6:2d:2d:39:d7:f3:7c:22:16:06:57:f7:
                    cd:f7:a8:66:66:83:6c:55:bd:38:04:47:b2:fd:de:
                    a7:d3:00:fa:ed:c0:f7:9a:62:64:d0:5e:9a:ce:b0:
                    59:33:0e:e0:4a:06:54:b4:b5:05:21:83:fa:51:3b:
                    87:dd:70:0d:34:4d:6f:5f:8e:0f:30:d6:cf:39:42:
                    78:ef:38:ed:e2:84:1e:8a:19:2c:fc:41:5d:a9:18:
                    d2:da:ac:8a:b5:7e:9e:46:05:80:3a:24:c4:10:13:
                    2f:98:94:1f:a1:bd:50:e6:96:6a:5d:66:56:14:51:
                    3b:f5:50:76:4a:76:4b:6a:29:4a:06:91:ae:2d:4f:
                    4c:7f:89:35:f5:06:ee:75:38:b7:2d:c1:bc:88:ef:
                    f4:47:ba:d9:c0:d4:e2:25:6b:44:f3:58:ba:d0:4e:
                    0d:ec:96:8e:cd:36:81:ac:6a:cf:b4:ed:47:a6:f8:
                    ae:92:2f:6c:e6:a2:11:be:ee:bc:02:a2:e5:08:13:
                    08:62:66:48:a7:b0:7a:0c:85:33:c8:f9:37:b6:b9:
                    0f:8a:84:a1:1e:17:17:a0:b1:b1:14:c2:51:82:93:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AF:5B:5D:C7:6B:2E:05:A0:B7:E6:14:84:25:4E:46:9F:06:CC:27
            X509v3 Authority Key Identifier:
                keyid:E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/4E125C00FAC411F08DFCF0E5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.66.108.0/22
                IPv6:
                  2c0f:f130::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:95:84:40:f1:7e:39:05:a7:3f:b4:92:8a:d9:cc:f9:3c:
         f5:a0:3f:c3:ba:3f:64:8e:69:28:46:37:61:e6:db:1e:ae:2f:
         c6:aa:9a:65:d8:14:c3:28:96:fd:44:77:38:09:a9:bf:77:6b:
         70:00:7b:e4:c7:7d:44:bd:15:9c:d6:ad:4a:78:6c:a0:c6:a5:
         74:2b:7b:69:f9:ac:cd:96:36:b4:07:72:ae:5d:14:15:da:e8:
         08:f7:5f:68:f7:0d:6b:d5:5c:cf:99:18:45:16:99:c1:3c:88:
         15:1a:05:01:4a:3d:04:5c:92:89:63:3f:41:b1:bb:c9:47:e0:
         df:db:02:85:b9:d6:8f:67:b1:b9:d9:2f:16:ae:8e:2d:73:45:
         de:73:c4:92:ad:34:a0:11:d0:3a:e7:7b:a1:e0:66:71:59:0e:
         8f:d4:b2:cf:8e:1b:c3:86:6f:09:25:2b:fe:1b:63:a9:03:d7:
         17:2c:eb:39:82:65:32:ee:2b:81:c5:36:32:1a:75:e8:bb:a4:
         29:29:26:41:c6:01:33:00:a5:6e:6a:9b:6c:6f:2d:6f:62:6e:
         1a:8b:83:68:37:0a:06:f8:e1:45:28:01:01:07:ee:74:8d:17:
         e3:62:9f:4e:3f:7c:2b:49:81:59:a1:86:e3:f1:f5:86:2c:47:
         2e:a8:eb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:58 2026 by rpki-client