This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/29B3171AEF8811F0BB16757ADAE4EC9C.roa
File:                     29B3171AEF8811F0BB16757ADAE4EC9C.roa (raw, json)
Hash identifier:          UeMfwysq4fMk8KdXIaNOZ7RRQtyobub2EXlkTuucJo4=
Subject key identifier:   07:16:2F:CF:C6:7C:12:9D:1D:2F:0B:9B:56:A1:B2:1A:84:D6:D1:D3
Certificate issuer:       /CN=F363D052AF/serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
Certificate serial:       0C
Authority key identifier: E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/29B3171AEF8811F0BB16757ADAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 07:27:35 +0000
ROA not before:           Mon 12 Jan 2026 07:27:30 +0000
ROA not after:            Wed 31 Dec 2036 07:27:30 +0000
asID:                     329654
IP address blocks:        102.204.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D052AF, serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
        Validity
            Not Before: Jan 12 07:27:30 2026 GMT
            Not After : Dec 31 07:27:30 2036 GMT
        Subject: CN=6964a266-367b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:c9:64:52:2c:37:7c:3b:3c:55:cb:b4:7a:
                    dc:f0:41:2b:87:81:68:0b:c6:c8:7f:1e:69:20:6e:
                    7f:8d:8e:6e:74:fa:a5:7c:24:76:78:8d:8c:ba:27:
                    6e:9f:c9:f4:41:18:44:9f:ff:d5:39:be:9b:fc:22:
                    8a:3f:26:89:bf:26:7e:46:54:26:ce:3a:0e:71:10:
                    52:6a:a8:cd:8e:5e:c8:ed:89:f5:d5:09:8b:80:b5:
                    27:ae:4f:66:0c:04:44:95:ff:44:88:a8:05:7b:a0:
                    fd:e0:cb:45:53:d5:22:9a:53:41:c3:6c:3c:b8:cd:
                    ec:2b:14:fa:ea:d2:52:a2:10:21:51:48:c6:89:01:
                    b4:41:8b:85:e1:c7:3d:8f:9a:64:2f:51:c3:d3:a5:
                    04:d5:7b:d3:a0:86:22:5f:6d:05:48:cb:4b:81:ca:
                    2c:d6:72:fc:a7:50:52:93:f6:e9:ff:ad:cc:6c:18:
                    d5:bf:e6:4f:b9:a6:08:5e:ec:b6:5e:44:7f:17:46:
                    2b:56:17:d0:ec:83:0c:bd:11:04:74:3a:82:d8:be:
                    d1:6b:e2:45:a6:0c:80:ab:1a:83:56:cd:79:03:ed:
                    78:7b:5c:4e:7f:52:48:ba:c7:08:63:46:42:92:d7:
                    bb:a4:85:89:39:81:6a:b7:ce:c7:8e:d7:c2:c3:25:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:16:2F:CF:C6:7C:12:9D:1D:2F:0B:9B:56:A1:B2:1A:84:D6:D1:D3
            X509v3 Authority Key Identifier:
                keyid:E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/29B3171AEF8811F0BB16757ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:d6:83:e2:a2:9c:4b:c6:2f:72:55:41:2c:51:b2:b0:c4:
         ce:56:f4:c0:15:e0:d5:75:55:b4:b9:3d:44:8b:54:b9:c9:b6:
         a0:2e:e3:99:41:48:ea:38:71:cb:35:36:47:49:2e:30:2b:e7:
         29:51:e6:82:ec:0d:37:9c:66:87:57:c5:3a:69:3b:3f:04:48:
         6e:81:b5:24:56:fe:84:b5:1d:fb:a5:ec:cf:ef:ba:b7:23:d1:
         94:7b:e8:e8:42:70:ac:ed:2f:9a:52:36:2a:f5:06:f3:37:8e:
         30:7b:d3:1d:a7:c3:aa:70:3e:6f:89:e8:fb:d6:df:1c:30:69:
         ad:d2:65:a4:e4:ca:22:a2:81:7d:dc:6e:5f:16:b1:4d:c0:23:
         54:3c:60:38:7e:a7:a9:be:bd:d9:a1:1f:c5:a3:24:d2:c3:b3:
         43:82:55:b4:34:5d:14:db:15:1d:ae:38:95:ea:dd:3c:8c:b0:
         da:80:b3:70:15:c3:02:de:67:2d:03:da:69:a4:d4:1f:b0:bd:
         1b:99:94:ea:d0:a9:15:5c:8f:79:cc:f9:42:c8:02:5a:62:15:
         ef:7f:d1:e0:f3:22:76:ed:b6:17:33:89:83:e9:5d:03:b9:3f:
         cb:a2:ff:e6:a5:08:a1:45:54:44:94:86:7d:dd:31:94:75:47:
         30:96:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:53 2026 by rpki-client