This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa
File:                     9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa (raw, json)
Hash identifier:          mqjll+6jQ1hijD2RV9xsy1IRzti4L3oaX/Vaj5z3Cyw=
Subject key identifier:   B8:52:03:93:40:55:97:B7:6D:5D:2E:CC:A5:E5:7D:49:28:D9:04:66
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       02
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 19:46:59 +0000
ROA not before:           Mon 19 Jan 2026 19:46:54 +0000
ROA not after:            Thu 31 Jan 2036 19:46:54 +0000
asID:                     37049
IP address blocks:        41.242.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Jan 19 19:46:54 2026 GMT
            Not After : Jan 31 19:46:54 2036 GMT
        Subject: CN=696e8a33-1a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:dd:97:62:2e:b6:0f:be:1e:0f:5f:51:db:
                    fe:a5:81:ed:de:3d:a3:e8:c0:00:a8:f7:8d:bf:83:
                    a9:46:33:5d:a1:1b:90:9b:6f:59:30:94:43:5c:5d:
                    7e:07:b3:66:2d:0a:31:a8:d6:9d:42:66:46:ac:32:
                    93:ec:10:41:8c:d4:f6:4e:39:23:fb:8a:62:c4:f9:
                    74:d1:9a:d6:86:b8:94:31:48:17:0e:69:3f:a8:09:
                    a4:cc:ed:fc:79:35:b4:bd:c2:82:fd:b6:af:2e:bc:
                    10:77:5d:c2:fa:33:12:29:cc:35:9a:7f:c4:40:11:
                    d3:37:c2:07:dd:b1:cc:ef:69:01:d3:92:fe:59:17:
                    fd:22:3c:45:97:a0:9d:63:77:ba:16:f6:32:de:f3:
                    83:ac:4e:bc:ad:fc:a7:76:5c:8e:b5:77:33:32:1c:
                    1c:55:63:c5:e6:69:2f:b5:fc:ea:16:33:c8:5e:4a:
                    c5:fa:9f:44:72:d5:39:87:1c:81:18:01:1f:c1:f0:
                    27:42:4c:c6:4d:a0:a6:46:e8:2d:7f:52:65:92:dd:
                    04:8d:8b:be:dd:ce:d7:bd:aa:e1:60:fb:15:4d:56:
                    2c:be:2d:17:36:a5:fa:19:05:e0:e2:18:3d:df:09:
                    f7:02:c5:4b:4c:45:d1:3d:f6:fb:78:d0:d6:92:5f:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:03:93:40:55:97:B7:6D:5D:2E:CC:A5:E5:7D:49:28:D9:04:66
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/9DC9BF04F56F11F0B88EAF92DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.242.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:16:a2:ac:c3:3f:84:16:5c:f4:c3:62:38:7a:1c:67:5a:
         f2:35:a7:c5:37:ee:b1:eb:f4:54:8f:bc:02:2a:f1:66:7f:f5:
         ed:92:1c:86:8b:39:73:71:47:f7:00:92:9e:bb:08:b2:0b:a9:
         48:d7:d3:30:44:f7:74:44:db:a1:00:57:99:78:f1:69:b5:e2:
         25:e2:11:b1:d6:1a:30:1c:f7:6e:91:0f:04:de:02:dc:b2:1e:
         06:85:6c:ac:29:b7:18:69:b9:82:a5:b4:a6:75:80:6b:c2:e7:
         8e:e7:5f:2c:97:aa:65:fb:5d:c1:af:1e:58:67:48:66:eb:8e:
         f1:a8:dc:4f:24:3b:1f:0b:9a:63:ae:41:0e:2e:f1:ad:24:e8:
         63:92:b4:da:5c:aa:3b:84:2f:c1:37:e0:89:3d:cc:fa:14:3e:
         4c:5b:f0:47:e4:3a:af:07:30:82:9c:c1:1e:1b:15:90:fc:4c:
         00:72:a0:4a:57:15:f6:4c:b0:11:40:29:78:1a:8b:14:c5:15:
         26:ae:ae:40:fe:2e:ef:85:9b:76:41:11:49:4c:0e:74:31:24:
         71:b2:0a:40:1e:4c:46:b2:36:00:ae:91:74:b1:14:1a:d2:26:
         6f:a6:49:27:72:c0:fc:1c:c7:e1:4a:98:90:0a:f9:7a:f1:19:
         84:c1:32:7e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MjIxMEFGMTEwLwYDVQQFEyg3NTUxOUFGNDhCQ0ZEM0JBNDY4NTE2NTJERjU0QjhC
N0VCODhFREZGMB4XDTI2MDExOTE5NDY1NFoXDTM2MDEzMTE5NDY1NFowGDEWMBQG
A1UEAxMNNjk2ZThhMzMtMWEzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKFu3ZdiLrYPvh4PX1Hb/qWB7d49o+jAAKj3jb+DqUYzXaEbkJtvWTCUQ1xd
fgezZi0KMajWnUJmRqwyk+wQQYzU9k45I/uKYsT5dNGa1oa4lDFIFw5pP6gJpMzt
/Hk1tL3Cgv22ry68EHddwvozEinMNZp/xEAR0zfCB92xzO9pAdOS/lkX/SI8RZeg
nWN3uhb2Mt7zg6xOvK38p3ZcjrV3MzIcHFVjxeZpL7X86hYzyF5KxfqfRHLVOYcc
gRgBH8HwJ0JMxk2gpkboLX9SZZLdBI2Lvt3O172q4WD7FU1WLL4tFzal+hkF4OIY
Pd8J9wLFS0xF0T32+3jQ1pJf4GkCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS4UgOT
QFWXt21dLsyl5X1JKNkEZjAfBgNVHSMEGDAWgBR1UZr0i8/TukaFFlLfVLi364jt
/zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTIyMTAvMDEwRTA5MjhGNTNDMTFGMDk0QTUxOERCREFFNEVDOUMvZFZHYTlJ
dlAwN3BHaFJaUzMxUzR0LXVJN2Y4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZFZHYTlJdlAwN3BHaFJaUzMxUzR0LXVJN2Y4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTIyMTAvMDEwRTA5MjhGNTNDMTFGMDk0QTUxOERCREFF
NEVDOUMvOURDOUJGMDRGNTZGMTFGMEI4OEVBRjkyREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCnyoDANBgkqhkiG9w0BAQsF
AAOCAQEAUowWoqzDP4QWXPTDYjh6HGda8jWnxTfusev0VI+8AirxZn/17ZIchos5
c3FH9wCSnrsIsgupSNfTMET3dETboQBXmXjxabXiJeIRsdYaMBz3bpEPBN4C3LIe
BoVsrCm3GGm5gqW0pnWAa8LnjudfLJeqZftdwa8eWGdIZuuO8ajcTyQ7HwuaY65B
Di7xrSToY5K02lyqO4QvwTfgiT3M+hQ+TFvwR+Q6rwcwgpzBHhsVkPxMAHKgSlcV
9kywEUApeBqLFMUVJq6uQP4u74WbdkERSUwOdDEkcbIKQB5MRrI2AK6RdLEUGtIm
b6ZJJ3LA/BzH4UqYkAr5evEZhMEyfg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:41:34 2026 by rpki-client