This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/C41AF490F57211F0ADA5F4A4DAE4EC9C.roa
File:                     C41AF490F57211F0ADA5F4A4DAE4EC9C.roa (raw, json)
Hash identifier:          QhmPWESnb1+/6WP9zrXz6AUR4g56o3n1zihMHHPrfJM=
Subject key identifier:   B8:A6:C9:07:5B:2A:DA:7E:68:99:8F:37:6E:0B:9C:11:24:0D:2C:95
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       06
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/C41AF490F57211F0ADA5F4A4DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 20:09:32 +0000
ROA not before:           Mon 19 Jan 2026 20:09:24 +0000
ROA not after:            Thu 31 Jan 2036 20:09:24 +0000
asID:                     37049
IP address blocks:        41.222.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Jan 19 20:09:24 2026 GMT
            Not After : Jan 31 20:09:24 2036 GMT
        Subject: CN=696e8f7c-82ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:f6:55:a7:54:e3:0a:60:bb:a7:c9:a2:49:
                    e9:9a:56:ab:2b:a8:0c:46:a8:74:26:6f:37:34:e0:
                    d5:4f:01:ca:cc:2e:d6:0b:7d:ad:de:50:2a:a2:a8:
                    77:2e:c2:12:d6:11:4e:4b:de:88:b6:7e:cd:bd:e5:
                    83:66:b9:45:65:f2:2b:54:c1:0d:71:73:bc:f0:5e:
                    a1:e4:66:8f:69:54:f6:dc:10:6e:de:d4:f3:39:94:
                    95:fa:ab:98:f9:2d:c1:e1:23:a2:62:31:93:61:9a:
                    f9:8e:31:2e:bb:a2:6b:ce:da:15:d5:52:51:9b:91:
                    a0:23:2b:db:6f:ff:2e:34:65:bf:7f:d1:e2:1f:0c:
                    c7:83:5d:e3:0d:ae:e3:2e:07:57:0a:3d:9a:57:ef:
                    04:06:75:1c:55:43:0e:cc:59:24:3a:f1:c7:45:c0:
                    10:d2:2c:2b:a3:6d:49:c5:cb:53:ca:ad:6e:d6:4a:
                    75:00:61:af:56:e3:fb:12:7b:db:35:7a:98:44:80:
                    bd:06:e3:11:69:28:ac:9e:db:f2:d8:49:ed:da:94:
                    72:e0:8e:23:3e:9d:af:e5:3a:52:d6:77:15:06:5c:
                    68:51:c5:32:b2:f4:51:9c:8f:60:0f:2c:23:af:7b:
                    b8:26:1d:62:1e:ee:1a:12:18:17:f8:57:a6:f1:db:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:C9:07:5B:2A:DA:7E:68:99:8F:37:6E:0B:9C:11:24:0D:2C:95
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/C41AF490F57211F0ADA5F4A4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.222.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:7b:ab:a3:33:8f:73:cc:88:91:7f:4c:11:7b:66:c5:4f:a2:
         4a:6c:a2:58:41:40:bc:16:41:75:a3:3d:57:4c:c0:01:07:1e:
         73:37:c6:ef:0c:bd:4f:cd:1e:5e:24:ad:7c:8c:1b:47:17:d2:
         06:3e:ab:e0:12:a1:01:5a:63:99:9a:c8:f3:3b:e2:f4:53:08:
         c7:2d:dd:75:ea:ed:43:0f:17:c0:52:05:d8:03:e5:29:48:6f:
         89:6d:42:6f:e8:a7:46:e3:03:dc:89:d9:72:25:8b:69:75:ea:
         25:82:69:28:16:7a:f6:52:96:d4:77:6f:dc:1f:09:67:de:a3:
         12:10:45:4f:cb:cb:b6:7d:37:a2:ca:81:85:68:d6:9c:b9:91:
         30:2e:de:5d:93:f4:e6:8b:0d:dc:9e:cb:f4:33:75:19:6b:6a:
         d0:d5:11:3c:52:8c:05:b1:74:da:4f:1d:46:0e:4f:25:96:c0:
         d7:7d:b3:b3:03:cf:07:2f:9e:eb:f4:4b:84:e5:ae:35:18:77:
         83:da:00:10:e4:59:28:fa:ad:73:43:4e:36:34:c2:35:5a:7e:
         b3:ea:14:35:64:90:f8:8b:01:5f:ef:b1:3a:84:4e:45:26:5b:
         86:cd:35:64:2b:33:d1:34:1d:cf:c7:ec:b7:ef:f6:dd:03:c4:
         6a:00:b4:70
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MjIxMEFGMTEwLwYDVQQFEyg3NTUxOUFGNDhCQ0ZEM0JBNDY4NTE2NTJERjU0QjhC
N0VCODhFREZGMB4XDTI2MDExOTIwMDkyNFoXDTM2MDEzMTIwMDkyNFowGDEWMBQG
A1UEAxMNNjk2ZThmN2MtODJlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwZ9lWnVOMKYLunyaJJ6ZpWqyuoDEaodCZvNzTg1U8Byswu1gt9rd5QKqKo
dy7CEtYRTkveiLZ+zb3lg2a5RWXyK1TBDXFzvPBeoeRmj2lU9twQbt7U8zmUlfqr
mPktweEjomIxk2Ga+Y4xLruia87aFdVSUZuRoCMr22//LjRlv3/R4h8Mx4Nd4w2u
4y4HVwo9mlfvBAZ1HFVDDsxZJDrxx0XAENIsK6NtScXLU8qtbtZKdQBhr1bj+xJ7
2zV6mESAvQbjEWkorJ7b8thJ7dqUcuCOIz6dr+U6UtZ3FQZcaFHFMrL0UZyPYA8s
I697uCYdYh7uGhIYF/hXpvHb2GUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS4pskH
WyrafmiZjzduC5wRJA0slTAfBgNVHSMEGDAWgBR1UZr0i8/TukaFFlLfVLi364jt
/zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTIyMTAvMDEwRTA5MjhGNTNDMTFGMDk0QTUxOERCREFFNEVDOUMvZFZHYTlJ
dlAwN3BHaFJaUzMxUzR0LXVJN2Y4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZFZHYTlJdlAwN3BHaFJaUzMxUzR0LXVJN2Y4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTIyMTAvMDEwRTA5MjhGNTNDMTFGMDk0QTUxOERCREFF
NEVDOUMvQzQxQUY0OTBGNTcyMTFGMEFEQTVGNEE0REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAyneiDANBgkqhkiG9w0BAQsF
AAOCAQEAxHurozOPc8yIkX9MEXtmxU+iSmyiWEFAvBZBdaM9V0zAAQceczfG7wy9
T80eXiStfIwbRxfSBj6r4BKhAVpjmZrI8zvi9FMIxy3ddertQw8XwFIF2APlKUhv
iW1Cb+inRuMD3InZciWLaXXqJYJpKBZ69lKW1Hdv3B8JZ96jEhBFT8vLtn03osqB
hWjWnLmRMC7eXZP05osN3J7L9DN1GWtq0NURPFKMBbF02k8dRg5PJZbA132zswPP
By+e6/RLhOWuNRh3g9oAEORZKPqtc0NONjTCNVp+s+oUNWSQ+IsBX++xOoRORSZb
hs01ZCsz0TQdz8fst+/23QPEagC0cA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:03 2026 by rpki-client