This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C184DE48FCF311F098D8C0D8DAE4EC9C.roa
File:                     C184DE48FCF311F098D8C0D8DAE4EC9C.roa (raw, json)
Hash identifier:          hsBrfsye6tAWzBtuUHNAmPGil1onGCjZ9YyyLCUq1Xw=
Subject key identifier:   02:4C:14:AD:6E:73:44:50:2E:A0:BB:CE:0D:27:75:B8:D3:C7:2C:A0
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0367
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C184DE48FCF311F098D8C0D8DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 09:20:30 +0000
ROA not before:           Thu 29 Jan 2026 09:20:25 +0000
ROA not after:            Wed 31 Dec 2036 09:20:25 +0000
asID:                     36912
IP address blocks:        102.244.0.0/17 maxlen: 17
                          102.244.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Jan 29 09:20:25 2026 GMT
            Not After : Dec 31 09:20:25 2036 GMT
        Subject: CN=697b265e-454b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:27:08:ea:d0:55:c8:7e:96:32:1b:3a:d0:
                    59:00:b8:74:63:22:a1:15:fa:58:c1:f3:38:43:c9:
                    e3:51:94:bb:23:6d:8d:46:d8:76:80:67:1d:03:8f:
                    81:8a:d1:c0:a0:77:84:4e:26:fa:66:bd:dc:eb:1c:
                    1b:60:28:db:02:65:a4:d0:e5:3e:e8:a4:c1:10:3c:
                    6c:8a:13:18:0d:f0:38:95:ca:18:81:05:ef:a6:8e:
                    38:4a:6a:05:1f:16:58:22:f9:0f:49:f9:f5:bc:61:
                    8d:b7:ea:e0:df:7d:70:4c:8b:8b:53:a2:ff:d9:97:
                    5d:8f:c3:31:e5:c1:19:54:06:eb:7a:dd:a0:6f:0c:
                    96:10:a7:f0:2a:02:30:b1:e2:e6:2f:d6:ac:23:53:
                    5c:b6:05:53:ae:82:8d:39:41:7d:af:14:ba:09:1c:
                    85:8b:7a:98:a2:53:b0:2d:b5:ab:66:04:89:e4:30:
                    f9:f5:ac:60:03:83:80:52:4c:e7:c6:cf:a1:98:4b:
                    75:4f:e0:2d:69:19:65:24:5e:17:4c:7b:29:20:aa:
                    a6:a1:49:0f:41:e1:58:bf:83:09:e8:2e:36:35:6c:
                    e0:ec:a9:32:0c:bc:cd:c2:bc:d8:23:39:1e:66:55:
                    91:75:08:a0:4e:2c:21:dc:ab:b8:97:d5:90:e9:6e:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:14:AD:6E:73:44:50:2E:A0:BB:CE:0D:27:75:B8:D3:C7:2C:A0
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/C184DE48FCF311F098D8C0D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:b3:da:9b:e4:a4:f3:4e:1a:71:5f:46:40:87:ad:63:36:
         97:0f:9c:30:55:fc:17:cf:b2:93:3d:c1:71:bc:b0:e7:29:56:
         70:39:46:06:a1:5e:a8:78:d0:c1:6c:0d:29:05:97:56:7d:33:
         99:4a:7e:bb:bb:26:65:da:fc:d2:c3:00:d8:6b:b1:e4:a3:c5:
         b4:1a:b3:83:85:5b:b8:ff:ac:41:9a:c5:55:3f:70:5e:f8:54:
         0b:3f:c9:04:5d:b3:fe:1e:24:96:cf:75:ff:9b:91:c9:7c:63:
         40:11:7e:bf:38:5c:fe:40:4e:36:e4:9c:42:81:b7:df:6b:fd:
         3b:54:7e:cb:91:35:df:f7:7e:ee:82:b4:59:2e:61:2d:b7:71:
         ec:e0:a1:ac:2f:ad:f6:bd:d5:9c:e0:75:33:98:93:00:69:a4:
         61:10:fb:30:ad:50:9c:f9:c5:b5:47:37:96:83:b2:c9:b0:d2:
         47:7b:db:68:96:ae:49:e2:b2:70:1a:78:2b:1b:14:7b:e4:a3:
         89:2c:85:2e:ab:e8:8b:3e:49:bd:9b:23:d1:cc:a9:7f:b9:4f:
         2b:a3:d4:8f:b1:2b:8a:d9:04:36:e0:31:65:25:8a:7d:36:df:
         ee:90:ea:af:a9:1c:01:f7:95:09:e6:9e:38:ad:fe:24:96:7b:
         cc:e4:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:54 2026 by rpki-client