This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/D20BE91AEF8711F08AAED0F6DAE4EC9C.roa
File:                     D20BE91AEF8711F08AAED0F6DAE4EC9C.roa (raw, json)
Hash identifier:          yZfvb8UOSgRJZB74a1hDNJSjGzrfQDLIyxiVRfuPTBg=
Subject key identifier:   43:96:EC:3B:AE:CA:19:69:4A:76:28:BF:A2:17:3B:51:43:07:B6:94
Certificate issuer:       /CN=F363D052AF/serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
Certificate serial:       09
Authority key identifier: E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/D20BE91AEF8711F08AAED0F6DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 07:25:07 +0000
ROA not before:           Mon 12 Jan 2026 07:25:02 +0000
ROA not after:            Thu 31 Dec 2026 07:25:02 +0000
asID:                     329654
IP address blocks:        102.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D052AF, serialNumber=E6E2C47B90973D3A888CD803D7584D04227D574A
        Validity
            Not Before: Jan 12 07:25:02 2026 GMT
            Not After : Dec 31 07:25:02 2026 GMT
        Subject: CN=6964a1d3-ec2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:78:3f:31:8d:68:2c:99:58:b4:42:f4:75:
                    e7:fe:cc:4f:58:99:f7:05:7a:d6:2f:22:1d:51:aa:
                    f8:13:55:4a:78:c9:44:06:db:8e:f2:bc:27:6b:75:
                    75:d0:3d:ad:2d:24:d9:71:9f:47:fe:7c:4a:de:33:
                    db:60:12:4e:ec:1d:b4:bd:14:b5:b6:c4:7b:48:43:
                    0f:20:e3:57:74:4d:86:c5:ca:74:20:10:ac:fb:a0:
                    e0:29:4d:68:97:45:19:95:5a:f3:ad:03:3a:47:7a:
                    7a:b0:46:4d:ed:13:da:55:a8:ba:63:d6:70:b4:e7:
                    75:3e:a8:09:9d:dd:3a:06:c0:c7:94:76:7f:55:0a:
                    9f:bd:45:3f:e2:95:c8:07:5b:5a:50:1b:ea:65:33:
                    e5:08:a5:f6:4c:4d:2c:a9:3a:8f:57:c8:fb:e8:c6:
                    3d:ac:89:cf:31:82:b8:53:76:c4:4f:bf:e5:77:70:
                    b4:6b:be:3c:b9:1e:24:4d:8a:34:ad:3f:8b:43:c5:
                    b2:68:a9:d7:9a:c7:57:8b:88:28:24:03:d6:25:ca:
                    1a:28:c8:2b:87:82:8a:90:f0:aa:50:6b:da:73:dd:
                    09:be:5a:da:4f:c5:29:e4:7e:e5:d5:54:9f:e1:f4:
                    fd:65:9a:24:93:d8:e3:6c:9e:c7:01:c9:3e:b6:5c:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:96:EC:3B:AE:CA:19:69:4A:76:28:BF:A2:17:3B:51:43:07:B6:94
            X509v3 Authority Key Identifier:
                keyid:E6:E2:C4:7B:90:97:3D:3A:88:8C:D8:03:D7:58:4D:04:22:7D:57:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/5uLEe5CXPTqIjNgD11hNBCJ9V0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5uLEe5CXPTqIjNgD11hNBCJ9V0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D052/E36D61D2EF8411F0BE241BE6DAE4EC9C/D20BE91AEF8711F08AAED0F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:19:68:59:07:72:df:59:d7:cc:4c:18:9f:bf:42:a6:10:
         94:8a:3a:bc:64:c6:ff:6b:51:e5:08:d7:49:a0:54:0f:45:1a:
         5f:3d:7b:15:0e:9e:3e:a4:f7:55:fc:b2:d9:26:99:d7:2d:fa:
         8f:6b:58:61:7c:19:a9:c2:f9:83:80:40:d9:5b:46:21:5f:95:
         a8:df:75:b7:19:6b:45:9a:c9:70:12:23:6d:5c:27:19:70:d8:
         04:86:ca:01:6c:1d:8c:ab:a7:ed:30:1b:32:72:d0:ab:a0:3e:
         df:67:a8:bd:8f:e2:d3:ce:37:a9:b3:cf:ee:44:e5:c0:ab:9a:
         22:2b:e4:12:8e:46:2a:ee:d0:68:34:d4:32:12:0b:e5:09:de:
         81:2c:7c:ba:2e:e1:84:43:64:ad:4c:ff:03:a2:68:da:86:8d:
         33:16:9b:aa:d0:89:d7:1b:be:e3:ca:ed:0b:a4:1a:c2:2b:4f:
         28:3b:76:81:a1:ad:ba:4a:71:f5:b4:f8:29:80:51:f8:77:8d:
         5e:a4:d3:b8:f8:fc:36:3a:0a:8a:b2:21:57:b8:b5:f3:d5:ce:
         67:dd:c8:8f:b8:43:63:c7:7c:fb:fc:9e:83:5a:57:67:2a:cf:
         1d:94:42:fa:22:95:ad:a1:27:e3:4f:aa:90:68:d1:4d:93:8f:
         3d:a6:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:32 2026 by rpki-client