This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3A9BE086FDB411F099781978DAE4EC9C.roa
File:                     3A9BE086FDB411F099781978DAE4EC9C.roa (raw, json)
Hash identifier:          U6hJ3dexnNZP2bqRvlL6C7zK5n/16swAogkxNnyicoM=
Subject key identifier:   CD:58:72:A8:D7:8D:8F:72:FA:8B:95:F3:CE:9F:02:5F:13:BB:6B:A0
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0470
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3A9BE086FDB411F099781978DAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 08:18:17 +0000
ROA not before:           Fri 30 Jan 2026 08:18:11 +0000
ROA not after:            Thu 10 Jan 2030 08:18:11 +0000
asID:                     37148
IP address blocks:        102.203.104.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Jan 30 08:18:11 2026 GMT
            Not After : Jan 10 08:18:11 2030 GMT
        Subject: CN=697c6949-6779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:e1:37:68:07:5a:4d:7d:8d:c5:df:71:4e:
                    0c:14:24:61:6d:77:53:64:9c:89:bb:88:9f:39:16:
                    8c:58:92:8b:0f:33:d0:ff:40:c0:e2:1f:69:66:fe:
                    53:51:c0:96:80:44:bc:94:ce:f5:64:b6:2b:90:ec:
                    85:38:6c:f1:3b:2c:bd:02:97:43:fe:62:92:d6:27:
                    76:31:01:23:06:51:b7:5a:cb:2e:e3:28:49:ae:53:
                    e9:3f:f4:c5:af:3b:5b:18:aa:9c:6f:88:1b:fc:61:
                    fb:d7:46:bd:21:13:12:ff:74:d3:a6:e8:03:8b:ea:
                    ce:ec:d9:a1:9b:85:bf:e1:7d:8e:d9:e0:71:f4:82:
                    ef:a0:e1:f6:3b:95:89:22:33:70:86:69:f6:a7:ac:
                    38:54:cc:61:ee:36:b7:ea:2e:8c:3e:6b:35:29:57:
                    65:f4:ac:7d:25:83:b9:01:f6:5e:28:40:e8:c7:88:
                    8f:94:ac:42:74:f5:9a:f1:19:6d:ad:03:4b:b3:4c:
                    f1:1f:ce:95:d4:8e:9c:ce:5d:ff:55:28:59:59:57:
                    86:55:2a:68:67:2f:76:55:b6:b6:04:8e:de:93:a5:
                    04:9c:5f:5d:ab:6f:43:2f:60:ba:c4:4b:f2:61:05:
                    ba:95:ce:95:b6:f3:67:fc:86:c0:86:eb:10:3a:d2:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:58:72:A8:D7:8D:8F:72:FA:8B:95:F3:CE:9F:02:5F:13:BB:6B:A0
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/3A9BE086FDB411F099781978DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:d4:0a:cd:7a:d8:82:14:1d:b6:53:43:13:ef:f9:31:d6:
         77:1c:22:ef:e0:8c:02:be:99:a1:e3:78:63:4a:86:c2:0e:c3:
         02:8f:cb:c0:55:d0:f2:c0:4f:7a:f2:d2:cb:61:a8:6a:1e:f7:
         ba:0c:0c:d8:e1:a5:05:27:45:58:3a:cf:fe:3c:e1:63:d2:30:
         dc:b5:ed:89:8a:53:a1:97:6f:41:b4:55:62:30:4d:d9:05:b6:
         01:a8:27:b2:f1:b5:6d:f9:4d:23:41:80:95:34:b0:52:6a:8d:
         68:9b:5a:9a:2d:91:aa:8d:d1:f2:0c:64:e6:7c:02:f6:5c:a7:
         02:bc:b2:30:ee:2c:16:2c:18:47:ab:3f:7e:06:ef:47:dd:4e:
         45:04:cc:fc:e9:af:df:f0:09:39:8e:2c:50:94:91:41:8b:19:
         37:b6:5b:83:7d:e5:e2:ae:7e:e6:23:90:0e:68:1c:62:c8:1b:
         bf:99:6b:34:dd:b3:52:35:d1:86:67:f0:41:91:af:98:d1:c1:
         6b:ff:ea:03:eb:51:df:07:c5:dc:04:20:fa:db:df:c1:fa:a8:
         bc:89:5e:f0:fd:fa:de:dc:79:06:0e:98:fc:05:d9:97:a8:4c:
         e6:55:24:9b:af:4c:e5:c9:16:b6:18:93:55:2e:31:43:fc:20:
         28:ec:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:57 2026 by rpki-client