This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/E46FAFCCF56F11F0827DCE92DAE4EC9C.roa
File:                     E46FAFCCF56F11F0827DCE92DAE4EC9C.roa (raw, json)
Hash identifier:          a1ThNJz9d1adFsYYPdRNFgqHPUPC6XUR4XTr2I70j94=
Subject key identifier:   4E:3B:99:EA:D8:21:88:0D:89:1C:A9:18:3B:45:45:D4:5C:A2:BC:72
Certificate issuer:       /CN=F3652210AF/serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
Certificate serial:       04
Authority key identifier: 75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/E46FAFCCF56F11F0827DCE92DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 19:48:57 +0000
ROA not before:           Mon 19 Jan 2026 19:48:53 +0000
ROA not after:            Thu 31 Jan 2036 19:48:53 +0000
asID:                     37049
IP address blocks:        196.32.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AF, serialNumber=75519AF48BCFD3BA46851652DF54B8B7EB88EDFF
        Validity
            Not Before: Jan 19 19:48:53 2026 GMT
            Not After : Jan 31 19:48:53 2036 GMT
        Subject: CN=696e8aa9-ea41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:a2:c0:c8:7f:1d:01:88:93:41:22:e8:90:
                    1e:83:b2:1c:82:5b:b2:76:73:74:71:d5:8e:62:ab:
                    af:ea:c0:20:b2:66:3a:69:3f:01:8b:ae:64:81:2c:
                    72:9d:4b:96:ef:96:b7:05:39:1f:27:85:40:b3:1f:
                    5a:82:6a:fd:20:81:b9:06:1e:bf:51:20:c0:be:4f:
                    47:63:1e:9a:6b:a9:cd:2d:60:3e:8e:4d:d5:76:d3:
                    2e:b9:cd:c1:a0:ca:6e:22:65:81:b3:b8:a0:50:ad:
                    f4:77:d4:b5:cf:65:60:33:7a:af:52:86:c7:b0:b3:
                    91:f4:e9:82:9a:e9:b2:37:d3:02:42:d1:b1:81:bf:
                    20:51:5a:fe:59:64:0f:2a:6b:b2:43:2c:d4:fa:6f:
                    0d:f6:ec:9a:a1:81:36:c5:94:51:4b:1c:db:ea:56:
                    88:96:b7:20:49:a9:56:76:67:73:a5:81:80:28:42:
                    73:9e:bc:ab:a6:4e:1c:47:9b:be:9b:11:1f:9e:f2:
                    e7:1e:a9:0c:d7:a2:52:34:bb:d9:7c:c9:bd:54:8a:
                    7e:5f:39:df:46:fa:84:26:13:a2:15:1f:38:31:ee:
                    43:1d:da:de:f5:92:ea:9b:e9:0a:b9:e6:4d:d2:7e:
                    a6:41:40:81:4e:68:9f:9a:57:35:f0:8b:db:fa:08:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3B:99:EA:D8:21:88:0D:89:1C:A9:18:3B:45:45:D4:5C:A2:BC:72
            X509v3 Authority Key Identifier:
                keyid:75:51:9A:F4:8B:CF:D3:BA:46:85:16:52:DF:54:B8:B7:EB:88:ED:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/dVGa9IvP07pGhRZS31S4t-uI7f8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dVGa9IvP07pGhRZS31S4t-uI7f8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/010E0928F53C11F094A518DBDAE4EC9C/E46FAFCCF56F11F0827DCE92DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.32.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:e6:05:ea:b7:5c:ec:9d:8e:78:a6:8c:af:bf:ab:95:ae:
         b2:ad:c7:1f:8a:34:7e:9b:e4:3c:2a:4f:e4:28:e3:40:92:66:
         1a:c8:c2:19:43:c9:48:eb:e6:4f:aa:ad:56:1e:38:0e:52:0c:
         d0:a3:69:ad:59:28:ef:26:5f:67:37:8b:cc:2c:c4:f6:00:83:
         65:d5:d4:6c:85:61:0f:b7:90:fc:4d:69:3a:1d:a4:5d:7a:c9:
         cb:ca:d9:11:29:6e:78:bf:be:41:1d:d8:73:24:ba:08:e1:62:
         c4:a6:23:92:75:2e:4d:57:4a:33:e2:d7:7e:43:eb:b0:36:07:
         ce:85:ea:87:25:24:0d:19:a3:b3:f0:de:20:dd:f3:5e:74:ff:
         c2:a2:d3:09:0c:a3:6b:8c:86:22:e9:9f:d7:55:01:03:3d:81:
         40:61:af:4f:cc:cc:bd:db:bd:d3:ec:6c:4e:c2:e3:ed:55:87:
         a4:11:c1:7a:2c:95:26:5c:ab:63:65:13:10:f2:7b:21:c4:88:
         21:05:81:20:8e:8c:cf:62:2f:3b:db:fe:c1:3e:d5:e2:52:a6:
         95:49:ab:3d:c0:40:92:72:98:fc:54:96:74:96:ce:b6:ca:31:
         9a:86:c2:ab:a8:88:ab:f1:02:1b:7a:96:31:c3:ab:47:71:0a:
         91:c3:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:58 2026 by rpki-client