This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/E72B9468F5F311F08EFD37C7DAE4EC9C.roa
File:                     E72B9468F5F311F08EFD37C7DAE4EC9C.roa (raw, json)
Hash identifier:          1C/7HOab3vyutf0SGY+FlZjRvHSbsMFtBxbIEsIXzQY=
Subject key identifier:   72:BD:2B:E0:CD:38:5F:80:BB:EE:CA:92:E3:F8:E3:31:93:7B:B4:C9
Certificate issuer:       /CN=F362DADDAF/serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
Certificate serial:       02
Authority key identifier: A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/E72B9468F5F311F08EFD37C7DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 11:33:56 +0000
ROA not before:           Tue 20 Jan 2026 11:33:51 +0000
ROA not after:            Wed 31 Dec 2036 11:33:51 +0000
asID:                     328332
IP address blocks:        102.141.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362DADDAF, serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
        Validity
            Not Before: Jan 20 11:33:51 2026 GMT
            Not After : Dec 31 11:33:51 2036 GMT
        Subject: CN=696f6823-6334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:02:bd:95:9a:a1:81:bd:1a:28:ca:f3:16:
                    be:25:38:41:d3:eb:b8:09:6a:21:62:ab:1b:85:18:
                    aa:4f:06:4c:43:dd:47:75:67:1a:69:5a:c4:26:c9:
                    9f:b1:56:d7:10:1f:f4:82:4a:59:7e:aa:e5:dc:37:
                    33:6e:e6:20:05:76:14:9a:d5:4b:7c:c9:6f:9e:33:
                    91:fa:5c:02:f1:74:3b:3c:ce:8c:8c:69:e2:27:8f:
                    7e:22:4f:f0:c1:75:fc:d2:b0:1f:09:74:20:d5:a9:
                    11:88:c0:69:3b:8a:29:80:ae:0d:1c:13:33:80:27:
                    79:55:5d:a2:e0:e6:84:1e:ec:47:98:c2:5c:e7:61:
                    48:bd:17:16:9a:88:44:6d:79:75:23:f6:88:a0:7a:
                    c2:c9:4c:ca:3d:0b:51:c2:b5:d5:35:09:d3:63:91:
                    41:b5:ec:d6:4f:1d:f9:d9:4b:1e:19:cf:9c:1d:fa:
                    a5:f6:4b:19:12:98:12:15:c2:a2:93:14:31:c1:d4:
                    ad:3b:dc:ae:55:d5:ab:5c:71:5d:06:e9:f8:16:0d:
                    4d:0b:13:f7:d1:4a:33:f8:2d:b1:e3:e8:33:2f:a0:
                    1f:84:c9:1a:0d:b2:17:48:b7:a9:91:3d:61:b1:86:
                    f1:76:d0:5d:4c:07:47:55:8b:a4:f3:5d:08:3c:31:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:2B:E0:CD:38:5F:80:BB:EE:CA:92:E3:F8:E3:31:93:7B:B4:C9
            X509v3 Authority Key Identifier:
                keyid:A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/E72B9468F5F311F08EFD37C7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.141.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:44:a6:b9:3f:44:90:31:1c:70:fe:c6:31:e9:98:77:88:
         05:4a:ac:3e:dc:c2:b9:04:65:9f:a7:c6:3e:fa:50:86:ca:4a:
         e3:ac:dd:89:23:aa:54:ef:34:38:1b:bf:ca:69:b6:5e:1c:26:
         9c:09:2a:95:e3:81:84:1d:7b:5f:27:67:bf:60:5d:27:e7:22:
         d4:d8:9b:6f:d4:dc:6a:9a:06:2b:b1:e5:ff:da:fc:d4:1a:44:
         be:3a:0b:24:2a:d0:92:0b:28:da:d1:5e:46:06:d5:9c:03:de:
         ec:f6:75:05:1c:cc:fa:31:65:9c:fd:a4:fe:3c:cf:e5:85:62:
         fd:33:0e:3b:d4:ae:26:ba:fa:9f:8e:d5:48:21:f1:c5:d8:00:
         af:d1:12:00:b1:86:ca:97:1b:43:ef:6f:72:b0:87:12:5c:3b:
         0a:8a:f8:a5:3e:0a:17:68:db:b3:3d:8e:42:01:72:e9:0e:81:
         95:3f:46:56:8e:ce:a5:b9:85:f1:7a:a6:6c:16:ae:57:48:34:
         a7:a6:b5:91:c7:99:32:ee:63:a8:03:b1:30:f8:92:44:60:68:
         a0:92:7b:ec:71:ef:81:3c:3e:45:19:b9:72:29:45:61:91:d4:
         f3:b6:0b:de:eb:5f:77:cc:2b:9b:4d:50:1e:dc:b5:a9:39:37:
         a6:c0:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:41:58 2026 by rpki-client