This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/728FCC2EF1D811F0A90A06B4DAE4EC9C.roa
File:                     728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (raw, json)
Hash identifier:          6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=
Subject key identifier:   51:1C:80:5F:41:B3:CE:78:EF:E1:F2:A8:18:13:25:D7:21:57:A4:37
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       02
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/728FCC2EF1D811F0A90A06B4DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 06:07:19 +0000
ROA not before:           Thu 15 Jan 2026 06:07:14 +0000
ROA not after:            Wed 15 Jan 2031 06:07:14 +0000
asID:                     328719
IP address blocks:        102.219.16.0/22 maxlen: 24
                          102.222.112.0/22 maxlen: 24
                          2c0f:4240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: Jan 15 06:07:14 2026 GMT
            Not After : Jan 15 06:07:14 2031 GMT
        Subject: CN=69688417-b164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:5b:43:26:93:a0:11:1c:fd:20:f7:57:58:
                    30:76:da:b2:a3:f0:c1:97:34:3d:16:32:a6:1e:15:
                    ac:e0:99:36:e1:5c:69:05:7c:f2:fd:92:8d:f0:82:
                    08:66:d4:90:d3:c2:ae:2f:a1:e7:01:82:bb:4b:c2:
                    6e:e0:f1:11:6b:85:69:be:9d:22:55:8a:1d:58:48:
                    98:7d:4b:d5:24:71:77:65:56:54:46:1c:14:4b:2f:
                    14:9a:b5:ca:fd:20:d6:98:84:f1:18:be:a0:5b:d8:
                    19:e5:12:c1:e2:65:1a:55:d6:bd:00:3c:c1:ef:f4:
                    9b:7d:7a:6c:f7:80:7a:e0:3d:8d:35:4a:03:6b:a7:
                    1a:30:f9:16:fb:41:ea:a6:74:e6:91:79:c7:98:13:
                    f2:e3:28:e3:78:68:4a:d9:e5:92:b0:1d:49:04:8a:
                    a3:e0:5c:c4:b6:8b:1b:c5:5c:7c:f8:48:1e:3f:5b:
                    20:19:76:37:a3:cc:3d:13:34:c6:32:0f:e2:2e:b8:
                    4a:6b:48:03:f8:af:39:00:52:41:9f:7e:ed:81:29:
                    f6:1b:76:18:f6:6e:8d:b0:0e:9d:e9:b9:37:1b:e9:
                    99:e8:8e:de:42:8c:c8:bd:e3:c9:4c:67:61:ea:e2:
                    88:ef:af:03:50:3a:09:43:09:f4:18:83:f2:23:2f:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:80:5F:41:B3:CE:78:EF:E1:F2:A8:18:13:25:D7:21:57:A4:37
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/728FCC2EF1D811F0A90A06B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.219.16.0/22
                  102.222.112.0/22
                IPv6:
                  2c0f:4240::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:a2:75:68:a2:0a:e2:b6:8d:80:9d:57:88:96:dc:32:e6:08:
         7c:10:79:7a:46:15:f9:e3:e3:a8:fd:18:c6:4d:d3:5e:e8:4f:
         23:68:42:b3:95:56:6b:34:15:0e:45:ee:be:62:02:06:16:75:
         11:04:c0:dd:c8:97:d2:79:4e:9f:46:10:92:a5:29:2f:db:d1:
         b5:07:ce:f4:7e:9f:6a:9b:60:36:06:d9:c5:90:fa:0f:09:dc:
         9c:9a:36:4f:d5:2c:14:12:de:ef:81:78:6a:bc:38:3b:b4:35:
         9e:40:8d:b3:9d:75:7a:97:3a:81:85:c7:bc:3a:dc:68:84:08:
         aa:69:da:59:99:40:f7:01:f6:b5:92:e8:c2:fe:0c:68:7f:68:
         83:6b:07:9c:b2:bc:1e:9d:bf:52:68:61:d8:90:d2:54:9e:cf:
         30:ca:87:4d:4f:12:4d:bc:b6:5a:65:97:fb:b6:6f:cf:be:ef:
         1e:69:5a:d1:87:43:6b:19:60:3c:38:f1:90:43:56:c4:c1:58:
         c3:86:bb:0b:3b:ff:e7:a4:4c:76:2c:15:7a:99:23:67:55:d5:
         aa:d9:9f:8a:29:20:96:db:82:e8:8e:ec:59:9d:cb:e1:4f:40:
         8f:51:3d:78:14:0d:c8:a6:0c:93:be:79:8a:4d:e8:00:5d:68:
         92:b0:8a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:47:24 2026 by rpki-client