This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C47E5A0ED3E11F0A72275E1DAE4EC9C.roa
File:                     8C47E5A0ED3E11F0A72275E1DAE4EC9C.roa (raw, json)
Hash identifier:          nB5KiaQO+9VuJNjpZ9f6AXWqs3oXtXsb/43LRUuOS8k=
Subject key identifier:   65:D9:A2:27:76:CF:5A:F6:93:4A:E2:EB:FE:AB:71:80:5B:CA:04:C8
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       0470
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C47E5A0ED3E11F0A72275E1DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 09:35:37 +0000
ROA not before:           Fri 09 Jan 2026 09:35:28 +0000
ROA not after:            Wed 09 Jan 2030 09:35:28 +0000
asID:                     9304
IP address blocks:        102.211.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Jan  9 09:35:28 2026 GMT
            Not After : Jan  9 09:35:28 2030 GMT
        Subject: CN=6960cbe9-d70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:8d:c2:0d:2d:d8:31:5e:c1:da:b6:dc:c5:
                    11:80:a5:9c:bd:f4:9a:a8:17:6a:f6:31:eb:3a:85:
                    d2:82:25:e5:d6:61:d3:19:e2:93:4c:09:20:f7:42:
                    fb:1d:1d:12:c4:f7:9c:f1:01:ff:f4:fa:f7:12:cf:
                    33:2a:86:fd:92:6f:3f:26:1e:75:71:e4:ee:ff:7b:
                    13:2e:0c:70:11:f2:df:6c:70:b4:79:5d:ba:48:e6:
                    6c:31:9f:d1:49:42:cd:93:c7:d4:38:f7:ac:2f:27:
                    19:14:be:0e:9d:ec:a2:08:2d:c8:77:62:ea:b4:f8:
                    0f:e7:7d:66:5c:10:72:2d:fa:d2:8e:11:21:21:52:
                    f2:ef:4b:60:93:09:e7:cc:d0:86:df:09:0d:bd:4a:
                    9b:17:23:a1:35:ff:94:e5:9c:eb:ea:a9:9f:49:8e:
                    93:5a:a0:dc:0b:36:ef:39:26:ae:7a:71:47:eb:62:
                    e2:32:18:f1:3e:e6:7a:fc:2b:8b:ee:38:86:98:89:
                    94:62:5a:37:72:eb:d6:4f:07:cd:aa:5d:3d:0e:36:
                    86:2f:65:f3:58:97:1e:10:9c:19:4f:9b:f6:1a:74:
                    13:4c:bc:18:ca:2c:37:2f:1a:e5:11:dd:3a:79:47:
                    fd:e3:31:5c:7d:6b:38:9e:f9:3b:16:76:dc:e6:30:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D9:A2:27:76:CF:5A:F6:93:4A:E2:EB:FE:AB:71:80:5B:CA:04:C8
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/8C47E5A0ED3E11F0A72275E1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.211.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:2f:4a:5b:78:ab:34:dc:e3:8f:ce:ff:84:d2:75:6c:2b:86:
         25:20:e4:ee:8a:78:5e:45:af:7b:f4:3b:a3:4c:72:4d:5d:81:
         c2:e5:7f:5a:8c:21:dc:cd:90:96:db:e3:3e:39:85:9b:4d:c9:
         20:74:a5:8e:b3:d0:80:3c:bf:cb:ea:70:78:d9:e4:7f:13:f8:
         68:c3:87:f7:32:14:41:05:a4:4f:9a:53:63:60:fc:69:e7:0a:
         7c:61:24:68:c6:c9:fd:6a:96:ec:38:8c:02:d9:98:d6:51:02:
         57:92:70:2c:97:d6:8e:85:1e:b1:f6:7f:d3:07:65:a9:fd:c3:
         75:12:48:f3:1a:f1:6e:31:fa:c8:54:a5:31:9d:49:6b:5e:3a:
         86:df:97:1f:d9:fe:ed:c2:31:81:bd:e0:8d:df:fb:42:3b:0d:
         1e:df:9f:6e:0a:18:aa:1e:fe:11:2a:7e:84:f3:4c:38:43:f8:
         fc:64:cb:20:f6:93:bb:76:00:aa:d4:cd:98:b9:f2:fb:a0:e0:
         e7:7a:63:d8:92:57:b4:07:b7:9d:65:34:d7:47:25:42:62:2e:
         80:19:21:29:cc:69:27:e2:4d:a5:6b:6f:a8:f5:1d:ea:3e:81:
         20:7e:15:93:89:d2:64:0c:19:38:8d:f6:96:1a:90:d3:4f:10:
         72:ab:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:57 2026 by rpki-client