This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A7638A7CFCF411F0BF391BDEDAE4EC9C.roa
File:                     A7638A7CFCF411F0BF391BDEDAE4EC9C.roa (raw, json)
Hash identifier:          uRFcCGOfvIfr+Tf43abUlIiB/kt42kecBcMz+0o+sSI=
Subject key identifier:   98:37:53:E0:15:5B:47:CF:97:A0:C5:17:4E:9A:49:29:F3:F3:79:80
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0369
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A7638A7CFCF411F0BF391BDEDAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 09:26:56 +0000
ROA not before:           Thu 29 Jan 2026 09:26:51 +0000
ROA not after:            Wed 31 Dec 2036 09:26:51 +0000
asID:                     36912
IP address blocks:        41.202.214.0/24 maxlen: 24
                          41.202.215.0/24 maxlen: 24
                          41.202.216.0/24 maxlen: 24
                          41.202.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Jan 29 09:26:51 2026 GMT
            Not After : Dec 31 09:26:51 2036 GMT
        Subject: CN=697b27e0-2607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:0e:48:6a:cb:43:ef:7f:96:83:88:39:29:
                    fe:4e:39:23:0d:1e:f1:84:5f:69:e2:91:b4:d8:2d:
                    b6:20:46:e5:d3:32:0c:72:e7:60:98:20:be:f9:d2:
                    ed:c5:24:03:b3:a0:f6:31:31:18:61:1f:83:77:7d:
                    68:4f:73:fa:67:35:fa:d4:f9:62:bd:9e:61:0e:15:
                    b1:61:5e:77:f2:0a:22:4b:33:58:97:53:59:46:e3:
                    ad:49:84:64:1b:65:99:d4:ed:ed:fa:00:2a:d6:b7:
                    af:94:40:ce:4f:05:e8:24:28:41:58:8e:87:24:af:
                    93:0e:a8:f5:f3:1c:b3:86:44:6a:de:ef:ed:3d:f1:
                    2d:7a:1f:31:28:bb:5c:e2:89:71:dc:c0:8a:8f:a9:
                    30:c8:80:a5:d3:5b:61:9a:7d:54:dc:2b:8e:50:66:
                    c5:15:13:13:19:99:4c:ab:6d:51:86:8c:05:e9:20:
                    c7:51:fa:f8:dc:db:e9:d7:e7:ef:09:33:43:fc:1a:
                    90:f1:b5:4f:45:4b:4b:5f:6a:8b:b1:10:a2:5b:10:
                    12:07:62:5f:51:f0:6f:e3:2d:14:5d:49:c3:3e:31:
                    71:b3:a7:3d:76:f3:fb:0b:37:71:73:aa:ac:2d:24:
                    a9:27:c6:e2:62:e2:2f:70:f9:59:8a:f5:e1:06:0c:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:37:53:E0:15:5B:47:CF:97:A0:C5:17:4E:9A:49:29:F3:F3:79:80
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/A7638A7CFCF411F0BF391BDEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.202.214.0-41.202.217.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:99:20:b4:68:08:3c:7c:3b:c0:4d:40:21:47:ea:83:06:
         d1:e3:51:7a:51:fb:b9:88:a9:e4:d7:4c:f4:a8:90:81:5d:f8:
         1a:3f:c3:7b:9f:b0:89:fd:3d:8c:80:9a:0d:8a:a4:70:ba:a6:
         59:10:0c:aa:4c:02:ef:16:b4:76:20:f3:ea:d1:11:5f:a7:62:
         27:2f:68:a6:47:57:db:01:2f:48:f4:76:ad:f3:da:36:c1:8d:
         48:97:ef:9a:18:d0:ff:18:c3:b3:bd:b5:5d:3d:c7:97:95:ec:
         48:a0:e1:2a:3b:d1:56:a1:dd:ac:bf:8a:e1:81:ce:87:7a:04:
         55:3b:f4:b4:63:9e:25:f2:be:ae:9a:66:bc:61:68:5c:8c:0c:
         9d:2b:e0:a4:68:08:e5:b9:c5:dd:f1:52:2f:44:f0:b7:7a:b9:
         11:d4:13:2c:47:aa:84:ad:f4:64:d5:1f:26:c2:e2:a7:67:82:
         36:29:6e:2a:7b:4c:6f:17:4e:07:6e:a8:c9:a3:c6:1c:02:bc:
         9f:6b:05:da:92:a3:cc:0c:35:d6:bb:06:ef:b7:c7:7f:e2:6d:
         4c:ca:4b:31:88:dd:e0:6b:23:2a:06:5d:de:56:d3:ad:8f:a5:
         df:a1:64:33:6b:3c:95:58:24:0f:ff:84:6a:17:2e:52:dd:5b:
         f5:e1:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:54 2026 by rpki-client