This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa
File:                     FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa (raw, json)
Hash identifier:          krRtEvxWWCuCwrpIVIl6JLjXUIjvI/lJBnWBVzu/tKA=
Subject key identifier:   8D:51:F3:EE:DE:7A:D0:76:39:69:DC:69:2E:92:30:32:B9:3F:55:9B
Certificate issuer:       /CN=F3693B0EAF/serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
Certificate serial:       02
Authority key identifier: 8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 11:51:11 +0000
ROA not before:           Mon 12 Jan 2026 11:51:06 +0000
ROA not after:            Tue 01 Jan 2030 11:51:06 +0000
asID:                     329538
IP address blocks:        102.205.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693B0EAF, serialNumber=8F2A064EC419457F36BAB11CDF70F3CCD1B87872
        Validity
            Not Before: Jan 12 11:51:06 2026 GMT
            Not After : Jan  1 11:51:06 2030 GMT
        Subject: CN=6964e02f-157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:59:68:37:dd:79:46:03:e1:03:f4:3d:95:
                    eb:d7:92:c6:27:9e:cf:3e:b8:81:11:78:68:10:ed:
                    d8:8c:2a:69:52:31:5a:bf:86:38:63:77:97:79:b6:
                    73:19:64:33:2f:b5:7e:bd:04:38:48:b7:fb:70:a3:
                    fd:d0:27:1d:ed:a2:b4:0f:54:9c:36:f4:af:ab:1d:
                    7e:89:f5:6a:a1:89:6d:86:66:53:1f:c3:0d:5c:ed:
                    bc:32:e9:44:6f:c6:fb:1c:3c:fe:c6:b7:73:6c:30:
                    dd:b0:37:6c:2e:e5:63:de:7c:45:f9:00:7d:eb:e3:
                    51:e8:45:f1:b8:e6:fa:a9:06:b7:57:05:44:97:42:
                    cb:60:d6:1f:8f:f8:12:59:f6:64:ae:ba:df:9e:76:
                    fe:84:d0:59:b6:57:9f:b6:bd:39:01:5d:d2:87:9f:
                    4a:5c:f1:00:7e:c0:35:49:f7:f4:aa:f7:73:93:6a:
                    45:9e:68:da:bf:ce:a2:e8:6f:8f:b9:b0:35:da:da:
                    55:92:09:c4:d9:25:24:95:a7:84:af:b7:76:19:3e:
                    c8:ed:28:b5:f3:bd:25:ad:2f:75:1d:55:9f:0e:cd:
                    e7:aa:bb:19:52:72:26:a4:1c:e4:10:fb:d1:01:7d:
                    ab:a3:74:6f:1c:b0:eb:16:41:a0:d4:00:32:83:87:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:F3:EE:DE:7A:D0:76:39:69:DC:69:2E:92:30:32:B9:3F:55:9B
            X509v3 Authority Key Identifier:
                keyid:8F:2A:06:4E:C4:19:45:7F:36:BA:B1:1C:DF:70:F3:CC:D1:B8:78:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/jyoGTsQZRX82urEc33DzzNG4eHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jyoGTsQZRX82urEc33DzzNG4eHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693B0E/F2C8350EEFAB11F0B070BDD0DAE4EC9C/FCEEFBDEEFAC11F0808042D5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.205.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:40:30:90:55:1f:6c:7f:0b:bf:e2:1a:87:4a:c7:97:25:91:
         24:15:fd:3b:07:a0:ee:39:17:ef:0c:e1:63:c5:9f:43:d1:1a:
         9c:78:9a:b8:9b:1d:dc:e2:d7:8f:20:61:71:fe:f2:c5:af:19:
         00:93:4b:59:e8:21:4b:50:0d:ff:2d:96:28:aa:45:4f:f3:82:
         34:b3:59:c0:d6:87:eb:f5:75:cb:9d:17:52:06:5f:40:c6:b0:
         2e:0e:ba:10:78:aa:2d:3a:59:d8:f7:f4:63:33:2e:0b:b0:1f:
         5a:4f:7c:30:fd:cc:c5:2e:f3:e4:a2:83:fd:dd:8d:d9:8d:52:
         00:c0:f6:96:d5:25:b4:bb:3b:b2:a8:d4:20:4f:87:8e:55:3c:
         e4:97:85:03:c0:90:a5:6e:4a:b0:9e:77:8a:5d:63:b6:6d:dc:
         9b:9a:90:b7:9a:14:06:12:70:4b:25:04:f6:0a:3b:ef:8b:cd:
         1e:db:ec:0a:cb:f7:08:fd:29:d1:0e:d2:c8:45:c9:6e:7f:cf:
         95:0f:da:3b:b7:a2:0b:23:a6:f0:0a:cf:06:cf:07:9c:97:9a:
         e9:7e:eb:26:9d:9c:33:2a:b7:b4:1a:62:d6:04:fb:fe:5c:4f:
         ce:cb:a2:85:43:ee:b0:41:c5:73:8c:ce:65:3b:ff:c0:b2:4c:
         a9:06:33:f0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
M0IwRUFGMTEwLwYDVQQFEyg4RjJBMDY0RUM0MTk0NTdGMzZCQUIxMUNERjcwRjND
Q0QxQjg3ODcyMB4XDTI2MDExMjExNTEwNloXDTMwMDEwMTExNTEwNlowGDEWMBQG
A1UEAxMNNjk2NGUwMmYtMTU3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALleWWg33XlGA+ED9D2V69eSxieezz64gRF4aBDt2IwqaVIxWr+GOGN3l3m2
cxlkMy+1fr0EOEi3+3Cj/dAnHe2itA9UnDb0r6sdfon1aqGJbYZmUx/DDVztvDLp
RG/G+xw8/sa3c2ww3bA3bC7lY958RfkAfevjUehF8bjm+qkGt1cFRJdCy2DWH4/4
Eln2ZK663552/oTQWbZXn7a9OQFd0oefSlzxAH7ANUn39Kr3c5NqRZ5o2r/Oouhv
j7mwNdraVZIJxNklJJWnhK+3dhk+yO0otfO9Ja0vdR1Vnw7N56q7GVJyJqQc5BD7
0QF9q6N0bxyw6xZBoNQAMoOHFP0CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSNUfPu
3nrQdjlp3GkukjAyuT9VmzAfBgNVHSMEGDAWgBSPKgZOxBlFfza6sRzfcPPM0bh4
cjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTNCMEUvRjJDODM1MEVFRkFCMTFGMEIwNzBCREQwREFFNEVDOUMvanlvR1Rz
UVpSWDgydXJFYzMzRHp6Tkc0ZUhJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvanlvR1RzUVpSWDgydXJFYzMzRHp6Tkc0ZUhJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNCMEUvRjJDODM1MEVFRkFCMTFGMEIwNzBCREQwREFF
NEVDOUMvRkNFRUZCREVFRkFDMTFGMDgwODA0MkQ1REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmbN3DANBgkqhkiG9w0BAQsF
AAOCAQEAmUAwkFUfbH8Lv+Iah0rHlyWRJBX9Oweg7jkX7wzhY8WfQ9EanHiauJsd
3OLXjyBhcf7yxa8ZAJNLWeghS1AN/y2WKKpFT/OCNLNZwNaH6/V1y50XUgZfQMaw
Lg66EHiqLTpZ2Pf0YzMuC7AfWk98MP3MxS7z5KKD/d2N2Y1SAMD2ltUltLs7sqjU
IE+HjlU85JeFA8CQpW5KsJ53il1jtm3cm5qQt5oUBhJwSyUE9go774vNHtvsCsv3
CP0p0Q7SyEXJbn/PlQ/aO7eiCyOm8ArPBs8HnJea6X7rJp2cMyq3tBpi1gT7/lxP
zsuihUPusEHFc4zOZTv/wLJMqQYz8A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:33 2026 by rpki-client