This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa
File:                     7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa (raw, json)
Hash identifier:          o3L0vuoDmUBUb+//mBzsTCTXHyVLpl7JtPp6VuXXuk8=
Subject key identifier:   E9:D4:FE:FD:24:6D:9E:A2:09:C6:9D:50:B0:7A:DA:E9:15:C9:56:9B
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       03FB
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 17:34:55 +0000
ROA not before:           Wed 21 Jan 2026 17:34:51 +0000
ROA not after:            Sun 20 Jan 2036 17:34:51 +0000
asID:                     329095
IP address blocks:        102.203.114.0/23 maxlen: 23
                          102.215.99.0/24 maxlen: 24
                          2c0f:940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Jan 21 17:34:51 2026 GMT
            Not After : Jan 20 17:34:51 2036 GMT
        Subject: CN=69710e3f-529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:1c:2c:1b:b7:03:da:c2:c4:95:10:31:11:
                    78:80:01:22:ab:55:3e:58:62:80:4b:0a:87:06:71:
                    53:91:03:e4:72:b8:8c:2b:22:60:21:8f:ca:80:1d:
                    a5:e2:ca:08:2e:aa:90:98:e7:61:fc:ce:89:9f:b6:
                    6d:0e:c5:5d:9c:f5:b3:5c:bf:ce:6a:25:e5:7e:dc:
                    b1:22:3f:bb:57:22:3f:85:07:1e:80:6c:d6:cb:38:
                    1b:86:51:bd:84:83:ec:86:f2:7e:8f:c6:7d:44:63:
                    cd:4d:50:5b:97:eb:bd:d5:43:55:e2:96:19:7b:c0:
                    23:7b:e9:6f:b6:58:d9:bb:ad:26:12:a9:a0:a1:bc:
                    80:92:c1:44:08:31:b7:fd:df:0e:fd:38:26:4f:8f:
                    be:df:8e:78:92:db:c7:2a:18:88:80:13:d3:4d:e4:
                    20:1e:84:ec:1a:a5:ff:f7:50:b1:87:90:df:fd:a3:
                    36:bd:7d:74:2c:58:eb:73:e2:13:76:6e:b3:74:9f:
                    08:ef:5f:8d:66:f2:10:26:76:8c:0c:a6:96:9b:75:
                    0f:b5:64:59:60:f9:8d:fd:ee:a9:59:81:9a:10:dc:
                    46:bf:d1:4b:0e:ee:cc:bd:0d:41:e5:9a:72:24:3c:
                    1f:e1:ef:8b:69:bd:c9:b6:8e:29:e8:d0:19:77:08:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:FE:FD:24:6D:9E:A2:09:C6:9D:50:B0:7A:DA:E9:15:C9:56:9B
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.114.0/23
                  102.215.99.0/24
                IPv6:
                  2c0f:940::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:8f:91:82:99:08:72:a5:fd:ee:86:12:aa:a8:9c:2a:ee:e5:
         02:3d:71:eb:0f:4f:65:71:f0:5b:7e:f4:ec:b1:2f:3f:58:e3:
         e0:f6:f7:e7:1a:2e:dc:ba:13:c0:5c:9d:70:4f:51:ae:36:fb:
         f1:9b:b2:60:0c:2f:c4:07:fa:9b:da:ed:f3:0c:fd:d9:94:74:
         d2:ff:b2:20:47:37:f4:cd:6a:90:d8:d7:ba:e4:5e:e8:b2:c0:
         df:55:52:76:35:42:f3:2a:1f:4e:22:3f:f3:52:09:33:6e:22:
         5a:4e:37:ea:e6:e4:5d:98:1c:58:98:d9:c1:83:c2:99:eb:76:
         ef:a7:e6:24:da:7f:89:90:bf:94:d9:0a:74:cb:47:46:8a:bd:
         27:de:77:88:56:4e:2d:c0:73:f9:5e:99:02:d1:08:5b:34:d2:
         15:9a:e0:cb:70:38:07:24:c2:16:bb:e7:12:f2:58:45:8e:79:
         2a:e5:49:8d:81:a4:ae:8e:bf:0f:87:c8:de:8e:f0:05:ba:28:
         30:58:fa:11:cf:72:01:d1:36:57:84:d6:b6:6f:ee:8c:d1:e1:
         b1:ba:e0:8b:00:3e:84:c8:d9:e5:80:b0:f4:0a:17:a5:dc:12:
         c3:4d:a0:73:46:16:8e:89:b4:f8:07:3f:29:67:fc:a0:ad:f1:
         df:e9:8f:73
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkVGRjNBRjExMC8GA1UEBRMoQ0UzNTNFMDYwNzIyNkM5NTFFNjBGRDY4ODBDRUND
RkI5OEQyQkM0ODAeFw0yNjAxMjExNzM0NTFaFw0zNjAxMjAxNzM0NTFaMBgxFjAU
BgNVBAMTDTY5NzEwZTNmLTUyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPThwsG7cD2sLElRAxEXiAASKrVT5YYoBLCocGcVORA+RyuIwrImAhj8qA
HaXiygguqpCY52H8zomftm0OxV2c9bNcv85qJeV+3LEiP7tXIj+FBx6AbNbLOBuG
Ub2Eg+yG8n6Pxn1EY81NUFuX673VQ1Xilhl7wCN76W+2WNm7rSYSqaChvICSwUQI
Mbf93w79OCZPj77fjniS28cqGIiAE9NN5CAehOwapf/3ULGHkN/9oza9fXQsWOtz
4hN2brN0nwjvX41m8hAmdowMppabdQ+1ZFlg+Y397qlZgZoQ3Ea/0UsO7sy9DUHl
mnIkPB/h74tpvcm2jino0Bl3CD1LAgMBAAGjggK6MIICtjAdBgNVHQ4EFgQU6dT+
/SRtnqIJxp1QsHra6RXJVpswHwYDVR0jBBgwFoAUzjU+BgcibJUeYP1ogM7M+5jS
vEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFRkYzL0FDMDg1NjQ2RjVCNTExRURBNzVDQUY0OTRBRDlFNkZDL3pqVS1C
Z2NpYkpVZVlQMW9nTTdNLTVqU3ZFZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pqVS1CZ2NpYkpVZVlQMW9nTTdNLTVqU3ZFZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJFRkYzL0FDMDg1NjQ2RjVCNTExRURBNzVDQUY0OTRB
RDlFNkZDLzdGQkE0N0ZBRjZFRjExRjBCQjkzRENDRURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAFmy3IDBABm12MwDQQCAAIw
BwMFACwPCUAwDQYJKoZIhvcNAQELBQADggEBAKCPkYKZCHKl/e6GEqqonCru5QI9
cesPT2Vx8Ft+9OyxLz9Y4+D29+caLty6E8BcnXBPUa42+/GbsmAML8QH+pva7fMM
/dmUdNL/siBHN/TNapDY17rkXuiywN9VUnY1QvMqH04iP/NSCTNuIlpON+rm5F2Y
HFiY2cGDwpnrdu+n5iTaf4mQv5TZCnTLR0aKvSfed4hWTi3Ac/lemQLRCFs00hWa
4MtwOAckwha75xLyWEWOeSrlSY2BpK6Ovw+HyN6O8AW6KDBY+hHPcgHRNleE1rZv
7ozR4bG64IsAPoTI2eWAsPQKF6XcEsNNoHNGFo6JtPgHPyln/KCt8d/pj3M=
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:59:02 2026 by rpki-client