This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/E930883CF5D411F08C13D08DDAE4EC9C.roa
File:                     E930883CF5D411F08C13D08DDAE4EC9C.roa (raw, json)
Hash identifier:          YuF0ZPXUrP/FErIbO1oG0qOrgfIUEuuBoE3/Li8gUZQ=
Subject key identifier:   27:50:45:74:68:15:22:94:88:6A:5E:C9:B5:39:C7:66:21:0D:FF:96
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       0513
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/E930883CF5D411F08C13D08DDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 07:52:05 +0000
ROA not before:           Tue 20 Jan 2026 07:51:58 +0000
ROA not after:            Wed 20 Jan 2027 07:51:58 +0000
asID:                     328271
IP address blocks:        102.176.180.0/22 maxlen: 22
                          102.176.180.0/24 maxlen: 24
                          102.176.181.0/24 maxlen: 24
                          102.176.182.0/24 maxlen: 24
                          102.176.183.0/24 maxlen: 24
                          2c0f:ee68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Jan 20 07:51:58 2026 GMT
            Not After : Jan 20 07:51:58 2027 GMT
        Subject: CN=696f3424-b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:9e:fe:57:c2:70:2c:50:62:64:c9:0a:22:
                    42:11:0e:02:12:c7:78:c9:a7:01:cd:6a:93:72:43:
                    35:b3:33:13:c3:17:a9:37:d1:eb:bc:29:1f:c6:35:
                    bf:1d:3f:9a:45:53:86:7a:f4:d2:f0:25:33:2d:53:
                    0a:bb:82:82:89:e4:7d:1f:59:80:0e:fb:d9:fd:85:
                    1c:ce:71:bf:35:56:28:d1:cd:ae:58:d0:fa:59:32:
                    ba:ae:b2:15:a8:d0:00:b6:07:0f:2e:ad:b5:88:bd:
                    1a:84:3e:3f:3e:ac:81:4e:99:f4:29:62:29:90:cc:
                    95:59:34:09:f3:05:85:8c:7b:dd:e4:1d:7d:3a:32:
                    e8:1f:51:0e:d7:8f:a6:55:0b:0d:64:9d:96:a7:d8:
                    aa:d6:e3:08:66:d1:c1:47:00:87:0c:bb:30:72:3d:
                    c5:4b:d8:57:97:4b:20:f6:78:f1:b3:01:06:df:ed:
                    eb:bc:e4:03:55:30:7d:f3:0c:23:86:f3:67:67:cd:
                    d1:27:14:5f:33:de:2e:21:22:0b:47:b6:6f:1a:e2:
                    aa:84:d1:32:a2:ab:9f:15:38:71:90:34:0c:6f:00:
                    91:34:e2:18:d8:2e:7d:0f:1d:ce:00:9b:98:10:27:
                    61:4b:09:20:30:e5:b1:e2:27:f9:c0:23:2a:92:f6:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:50:45:74:68:15:22:94:88:6A:5E:C9:B5:39:C7:66:21:0D:FF:96
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/E930883CF5D411F08C13D08DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.176.180.0/22
                IPv6:
                  2c0f:ee68::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:3a:ce:3c:8e:7c:4a:a0:43:ec:40:3a:0d:2f:81:aa:9c:
         2d:81:7c:e4:3f:a9:8d:f0:7a:4f:ad:eb:1f:e8:25:6a:86:bb:
         bb:6b:34:44:f1:4b:97:42:b9:8b:4e:aa:50:ad:29:39:13:9e:
         d0:18:71:07:9a:84:a0:88:0d:cd:9f:37:ad:84:48:0c:fb:f4:
         9a:bc:22:bf:95:d9:06:cb:a6:f6:91:c0:74:6e:29:d6:ea:45:
         1f:73:c6:34:ad:81:9b:05:7b:35:95:2e:50:95:ac:d6:e5:61:
         43:c6:87:b3:c2:b9:93:96:ef:cb:9f:e8:70:ed:64:6b:92:32:
         21:e9:d8:ab:36:fc:61:a1:eb:b8:31:a8:4e:29:c3:8b:2a:b7:
         27:03:b3:a6:f0:27:b5:df:8f:6c:e9:21:16:5a:42:6d:9e:e9:
         6e:70:0b:1f:a1:2b:1c:7d:fb:4d:1e:ec:c4:a7:b3:01:a5:5c:
         91:e5:01:cc:d4:b1:eb:dc:89:ee:fd:02:2a:98:5e:40:f3:15:
         e7:2d:87:fe:20:be:3f:b6:d2:16:07:66:49:0d:94:66:2c:94:
         3c:ac:84:87:88:df:2c:70:aa:59:c0:d7:69:0b:33:8a:1e:70:
         98:85:2d:e0:85:f7:4a:0d:56:5a:1b:e7:8f:1a:95:cc:a1:13:
         1c:c3:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:26 2026 by rpki-client