This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3AD8C49EDE4011F0AFD4DFDEDAE4EC9C.roa
File:                     3AD8C49EDE4011F0AFD4DFDEDAE4EC9C.roa (raw, json)
Hash identifier:          G87flQpVZziyxR4HUQfs9iisrBLn87SHIeY2KFzvxOM=
Subject key identifier:   64:91:16:D0:61:84:00:58:D7:07:31:EC:1C:61:7E:DF:4A:8C:F9:44
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0861
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3AD8C49EDE4011F0AFD4DFDEDAE4EC9C.roa
Signing time:             Sun 21 Dec 2025 07:39:50 +0000
ROA not before:           Sun 21 Dec 2025 07:39:45 +0000
ROA not after:            Wed 28 Jan 2026 07:39:45 +0000
asID:                     211826
IP address blocks:        102.177.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Dec 21 07:39:45 2025 GMT
            Not After : Jan 28 07:39:45 2026 GMT
        Subject: CN=6947a446-4668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:7a:f3:59:8b:fb:02:1d:d0:59:2a:a9:08:
                    b7:48:ec:f9:1e:1d:bb:c4:58:2c:5d:96:d5:3d:e3:
                    45:e5:ad:30:2a:e7:e5:9d:5a:a7:8b:34:8d:12:c7:
                    34:fb:7a:7c:7a:a1:55:90:af:21:1b:e7:c1:ca:8d:
                    41:45:8a:f9:a8:a2:0f:31:10:0e:1b:42:6e:80:ba:
                    d5:72:94:91:28:01:73:a6:66:30:8d:ee:f8:aa:96:
                    c3:f2:47:d6:c5:70:2f:78:29:22:08:0d:01:74:d5:
                    b3:b3:09:d4:b1:2a:55:62:79:88:f8:b9:ee:18:15:
                    18:d8:05:f2:43:ef:a6:3f:dc:be:e8:7c:47:85:e2:
                    e8:35:fa:aa:86:23:d4:ff:03:3d:34:a4:d8:f9:37:
                    9c:48:72:a2:0c:0d:93:83:da:ea:97:27:8a:75:1e:
                    7c:07:16:fb:85:d7:ca:18:6b:ee:88:ea:ce:ca:f4:
                    20:01:e1:12:de:ae:35:7f:84:46:cb:e8:e2:f7:1c:
                    e8:aa:59:c1:35:fd:3d:f2:65:d0:55:b6:7e:ab:6d:
                    40:79:30:1b:26:70:26:7a:e8:a5:39:20:8d:43:fb:
                    6b:d1:3d:b9:a5:04:74:8d:2c:24:7f:81:74:df:cf:
                    f3:ab:90:64:6d:b8:d4:89:b8:26:86:21:a9:51:af:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:16:D0:61:84:00:58:D7:07:31:EC:1C:61:7E:DF:4A:8C:F9:44
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/3AD8C49EDE4011F0AFD4DFDEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:6b:cb:a5:c7:15:f0:c4:14:cd:81:26:98:69:fc:42:0f:
         d2:56:b6:e0:eb:dc:ae:06:64:81:6f:ed:61:52:d6:75:ce:df:
         25:bf:e7:63:cc:f3:14:b1:57:cc:bf:b7:21:bf:ad:fd:dc:9e:
         fb:e2:13:cc:a5:9a:02:9f:0a:34:2d:5f:32:d3:bd:21:c4:c4:
         f6:26:c5:f6:a1:e4:30:19:ec:d0:da:c7:ba:a6:64:45:dd:79:
         6a:f1:b0:df:8e:e0:4e:f4:ee:db:1d:47:99:43:34:5d:79:17:
         25:f1:01:d0:59:70:40:ce:61:e3:21:a0:40:77:8c:9c:99:75:
         b1:bd:a3:41:b4:f8:70:8c:6a:11:11:31:27:7e:0d:e1:8b:1a:
         3e:6e:fa:a5:9e:fe:80:1b:42:94:d1:e5:3d:95:37:21:26:3f:
         75:32:67:c7:a8:b8:61:f3:91:5d:5e:1b:69:3d:5d:84:36:06:
         76:f7:3f:8e:e4:71:6a:db:8b:40:18:9c:bc:d3:68:fb:fd:17:
         f8:d2:cb:7c:97:0a:5e:cd:19:b2:0b:f9:fc:f3:34:79:16:64:
         c0:ae:9f:98:69:f9:e2:1c:46:0e:ad:83:2b:12:23:65:48:3b:
         0a:29:03:c2:83:c4:e8:12:fb:04:ee:ee:f9:31:1e:d7:45:fc:
         58:6d:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:20:08 2026 by rpki-client