This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa
File:                     17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa (raw, json)
Hash identifier:          oUTiQVRlxq9bUqRcd4ce+yhUVNhKDDkTPe1EsY3iBbE=
Subject key identifier:   C9:16:C5:53:E6:4E:0F:FA:B5:C5:24:4E:28:F0:ED:E8:8B:56:AE:91
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       02
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 18:33:51 +0000
ROA not before:           Wed 24 Dec 2025 18:33:47 +0000
ROA not after:            Mon 31 Dec 2035 18:33:47 +0000
asID:                     329678
IP address blocks:        102.203.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Dec 24 18:33:47 2025 GMT
            Not After : Dec 31 18:33:47 2035 GMT
        Subject: CN=694c320f-637c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:42:73:fd:08:03:7d:21:b5:18:e3:15:51:
                    a6:81:7d:41:19:7a:8c:95:bc:d8:56:c8:a6:c4:61:
                    e3:c7:74:8c:7b:74:f7:9b:76:77:7f:e8:89:4c:c8:
                    c9:5e:d0:c5:bd:8c:27:d4:a0:af:be:ab:8d:e7:65:
                    e5:76:30:70:16:a2:1f:c4:a1:01:c2:9c:29:12:49:
                    1d:e4:cc:58:13:24:26:6b:41:0f:fd:28:42:b7:c3:
                    76:54:f6:e6:cb:d2:f7:9f:99:c3:d4:8f:e8:10:49:
                    93:cd:69:d5:9f:9f:6c:fc:ad:26:e8:f1:f7:e9:0f:
                    0b:34:69:69:ee:2e:7d:ae:59:3b:60:cd:7e:5d:a3:
                    69:71:06:08:a8:05:8d:58:86:fe:43:91:1b:90:74:
                    8e:a5:f7:39:85:11:ca:88:c4:0c:28:11:79:92:c2:
                    76:92:d2:ae:d8:7e:f1:fc:d9:2f:33:d6:d0:ec:e8:
                    e2:9c:d7:f5:56:97:a5:16:84:d2:ba:eb:2b:e5:9b:
                    dd:34:56:77:94:dd:b6:81:d9:b0:50:d8:a5:06:b4:
                    3c:21:3e:19:fc:02:09:0b:76:20:ca:e5:33:4f:fa:
                    05:bf:92:a8:1c:69:c1:ff:53:26:d5:82:8f:12:79:
                    f2:20:30:6e:d9:d3:d5:7f:de:cd:f6:84:48:23:09:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:16:C5:53:E6:4E:0F:FA:B5:C5:24:4E:28:F0:ED:E8:8B:56:AE:91
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:be:01:2b:27:54:00:2c:84:85:c0:5c:10:8b:bb:dd:9f:ee:
         26:f7:f2:38:7f:94:ed:48:ce:d2:fe:ff:69:94:21:1b:5e:02:
         51:89:6d:27:22:e2:ee:66:5a:e0:c1:95:fd:e5:83:f1:00:68:
         85:11:bc:00:a0:1e:8d:a2:60:43:2b:ee:e9:5c:e6:0b:bb:a3:
         bd:ab:8b:7a:9c:95:18:4a:ff:cf:86:6f:3e:b3:fc:f2:e4:f1:
         2c:23:e5:f7:79:d3:0d:1d:42:8f:78:83:ab:08:e6:42:cf:57:
         c7:d1:65:75:ae:08:f8:48:1a:b8:4d:76:bc:eb:f4:ed:7c:53:
         95:eb:6a:17:21:e5:cd:67:06:a1:82:39:5c:4d:3a:cf:83:35:
         d1:42:a7:b5:06:3f:74:e0:77:26:2b:50:2b:8b:f3:76:f6:ee:
         3d:e8:c1:26:36:0d:2c:3b:8c:64:db:f2:e8:65:eb:34:2d:65:
         9a:16:e3:70:5a:d4:e8:93:f9:77:22:c8:88:cc:82:b3:9c:b0:
         cf:ed:57:77:7f:77:7c:59:83:b4:87:1b:32:15:2b:37:91:4f:
         a1:0d:d2:30:19:d1:1c:f3:d5:61:72:02:43:bb:4f:95:72:e3:
         c1:79:73:aa:59:50:43:51:81:ba:75:9e:fd:7d:76:c1:a8:9e:
         b3:59:58:7a
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
OEVEQkFGMTEwLwYDVQQFEygyODMyNzRDNDMwOUIwMjdBOUJENUUwNjRCQzZFRDBD
RjNGREY5QjdEMB4XDTI1MTIyNDE4MzM0N1oXDTM1MTIzMTE4MzM0N1owGDEWMBQG
A1UEAxMNNjk0YzMyMGYtNjM3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMcbQnP9CAN9IbUY4xVRpoF9QRl6jJW82FbIpsRh48d0jHt095t2d3/oiUzI
yV7Qxb2MJ9Sgr76rjedl5XYwcBaiH8ShAcKcKRJJHeTMWBMkJmtBD/0oQrfDdlT2
5svS95+Zw9SP6BBJk81p1Z+fbPytJujx9+kPCzRpae4ufa5ZO2DNfl2jaXEGCKgF
jViG/kORG5B0jqX3OYURyojEDCgReZLCdpLSrth+8fzZLzPW0Ozo4pzX9VaXpRaE
0rrrK+Wb3TRWd5TdtoHZsFDYpQa0PCE+GfwCCQt2IMrlM0/6Bb+SqBxpwf9TJtWC
jxJ58iAwbtnT1X/ezfaESCMJT6cCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTJFsVT
5k4P+rXFJE4o8O3oi1aukTAfBgNVHSMEGDAWgBQoMnTEMJsCepvV4GS8btDPP9+b
fTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MThFREIvRUM3MkFDM0FFMEY1MTFGMDk2NDBDQUQ3REFFNEVDOUMvS0RKMHhE
Q2JBbnFiMWVCa3ZHN1F6el9mbTMwLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvS0RKMHhEQ2JBbnFiMWVCa3ZHN1F6el9mbTMwLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MThFREIvRUM3MkFDM0FFMEY1MTFGMDk2NDBDQUQ3REFF
NEVDOUMvMTdBNkU5RUNFMEY3MTFGMEExMTRFOURGREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbLxDANBgkqhkiG9w0BAQsF
AAOCAQEAkb4BKydUACyEhcBcEIu73Z/uJvfyOH+U7UjO0v7/aZQhG14CUYltJyLi
7mZa4MGV/eWD8QBohRG8AKAejaJgQyvu6VzmC7ujvauLepyVGEr/z4ZvPrP88uTx
LCPl93nTDR1Cj3iDqwjmQs9Xx9Flda4I+EgauE12vOv07XxTletqFyHlzWcGoYI5
XE06z4M10UKntQY/dOB3JitQK4vzdvbuPejBJjYNLDuMZNvy6GXrNC1lmhbjcFrU
6JP5dyLIiMyCs5ywz+1Xd393fFmDtIcbMhUrN5FPoQ3SMBnRHPPVYXICQ7tPlXLj
wXlzqllQQ1GBunWe/X12waies1lYeg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:00:29 2026 by rpki-client