This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/92DED7E4FDB411F09FE4837CDAE4EC9C.roa
File:                     92DED7E4FDB411F09FE4837CDAE4EC9C.roa (raw, json)
Hash identifier:          srYqEe2mgDwJI6jUbBY0cU5cWPseHn/svqYOhlLojDc=
Subject key identifier:   BE:E3:F6:1F:1E:AE:C4:25:7B:B8:AA:0E:2E:FE:6C:72:6A:EC:3C:DC
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0472
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/92DED7E4FDB411F09FE4837CDAE4EC9C.roa
Signing time:             Fri 30 Jan 2026 08:20:45 +0000
ROA not before:           Fri 30 Jan 2026 08:20:41 +0000
ROA not after:            Thu 10 Jan 2030 08:20:41 +0000
asID:                     37148
IP address blocks:        102.203.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Jan 30 08:20:41 2026 GMT
            Not After : Jan 10 08:20:41 2030 GMT
        Subject: CN=697c69dd-db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:93:23:41:28:0c:e1:2d:9d:13:ca:eb:f7:
                    cc:22:db:8a:5b:f4:ca:ae:de:52:57:5e:ce:f8:72:
                    36:75:7f:5d:f9:0d:cd:3d:18:32:35:6d:89:e3:e5:
                    dc:e4:8a:53:ad:14:c3:ba:35:99:63:7b:23:0f:13:
                    2f:d9:cb:8b:a0:c7:d6:18:ed:16:c7:73:0c:ba:be:
                    82:0b:05:1d:58:2b:c8:02:c5:30:ca:d8:d4:cc:ad:
                    5d:a0:e0:43:6b:24:89:bf:d1:06:a6:6f:38:3b:f9:
                    ab:5d:97:91:ff:4e:35:10:99:04:0d:95:86:01:cb:
                    c9:3b:21:9b:d0:8b:e5:43:ac:42:55:b6:43:72:c9:
                    c1:d3:ee:a6:88:11:ac:5b:84:38:ae:e1:55:1e:7f:
                    a1:c1:76:3f:51:03:5a:cf:db:5b:da:f4:94:95:1b:
                    4e:59:5f:7f:bb:68:c6:6e:cc:96:15:d2:36:c3:49:
                    c6:10:95:2b:42:44:b6:da:d4:54:f6:21:ed:cd:92:
                    c2:63:db:e8:4b:99:cb:3a:62:76:a4:8a:f1:fe:7a:
                    a5:05:5f:24:5d:c5:d3:19:52:62:d3:c3:ce:f7:c2:
                    8a:ce:b0:3a:4f:1c:f4:82:82:ac:90:4d:91:aa:ad:
                    89:1a:fb:1e:66:24:79:f4:b4:bc:1d:7b:54:7c:59:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E3:F6:1F:1E:AE:C4:25:7B:B8:AA:0E:2E:FE:6C:72:6A:EC:3C:DC
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/92DED7E4FDB411F09FE4837CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:9d:21:2d:22:1b:e2:17:12:d4:3c:b8:10:34:5e:00:c8:
         5d:50:b5:8a:aa:1a:77:61:72:32:92:88:8c:ff:0c:09:9b:8b:
         73:39:91:8e:87:d6:68:c8:51:22:bb:be:03:cf:ff:e8:94:57:
         48:46:d4:b6:6f:62:0e:8e:f6:86:66:82:1b:8a:c6:e2:c2:b8:
         90:3a:66:65:67:cb:89:46:d1:df:51:f7:62:99:e1:ef:b9:40:
         46:42:90:9e:53:cc:1a:f9:83:e7:7e:f1:02:79:5d:62:e0:97:
         83:cd:06:e3:3b:9d:35:91:d2:5f:9d:90:3d:0e:89:59:b8:dd:
         69:6a:d1:22:58:8c:dc:4d:f3:26:5c:b6:92:09:27:1e:a0:03:
         8d:cb:e6:dc:53:f9:e0:2a:ac:4b:9f:1f:57:4c:4d:a9:04:08:
         e8:31:38:51:f7:70:c4:75:77:ac:3d:54:cc:74:0a:29:d8:63:
         de:cd:e1:95:b5:5e:7d:4e:70:fc:52:d7:2b:41:5b:e5:7e:9a:
         76:ca:c8:ab:62:fd:fb:6c:70:42:8b:40:f2:c8:67:e9:7c:81:
         79:45:89:56:39:d0:5e:87:4e:48:3c:ee:18:f1:ef:c3:6c:50:
         f5:c8:5a:61:40:60:2a:a2:10:61:14:7b:dd:93:22:81:29:6c:
         08:95:9b:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBRjExMC8GA1UEBRMoODMzRDRBMjRFMzlDREM5NDJDQkM1NzgyNTQxQjgx
RDRERDk2QUVBODAeFw0yNjAxMzAwODIwNDFaFw0zMDAxMTAwODIwNDFaMBgxFjAU
BgNVBAMTDTY5N2M2OWRkLWRiNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzhpMjQSgM4S2dE8rr98wi24pb9Mqu3lJXXs74cjZ1f135Dc09GDI1bYnj
5dzkilOtFMO6NZljeyMPEy/Zy4ugx9YY7RbHcwy6voILBR1YK8gCxTDK2NTMrV2g
4ENrJIm/0Qambzg7+atdl5H/TjUQmQQNlYYBy8k7IZvQi+VDrEJVtkNyycHT7qaI
EaxbhDiu4VUef6HBdj9RA1rP21va9JSVG05ZX3+7aMZuzJYV0jbDScYQlStCRLba
1FT2Ie3NksJj2+hLmcs6YnakivH+eqUFXyRdxdMZUmLTw873worOsDpPHPSCgqyQ
TZGqrYka+x5mJHn0tLwde1R8WW4vAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvuP2
Hx6uxCV7uKoOLv5scmrsPNwwHwYDVR0jBBgwFoAUgz1KJOOc3JQsvFeCVBuB1N2W
rqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYxMjIyNDY4L2d6MUtK
T09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d6MUtKT09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYx
MjIyNDY4LzkyREVEN0U0RkRCNDExRjA5RkU0ODM3Q0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmy2gwDQYJKoZIhvcNAQEL
BQADggEBAJHDnSEtIhviFxLUPLgQNF4AyF1QtYqqGndhcjKSiIz/DAmbi3M5kY6H
1mjIUSK7vgPP/+iUV0hG1LZvYg6O9oZmghuKxuLCuJA6ZmVny4lG0d9R92KZ4e+5
QEZCkJ5TzBr5g+d+8QJ5XWLgl4PNBuM7nTWR0l+dkD0OiVm43Wlq0SJYjNxN8yZc
tpIJJx6gA43L5txT+eAqrEufH1dMTakECOgxOFH3cMR1d6w9VMx0CinYY97N4ZW1
Xn1OcPxS1ytBW+V+mnbKyKti/ftscEKLQPLIZ+l8gXlFiVY50F6HTkg87hjx78Ns
UPXIWmFAYCqiEGEUe92TIoEpbAiVm78=
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:58 2026 by rpki-client