This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa
File:                     F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa (raw, json)
Hash identifier:          w6gvWanr3TgG7meRgmSObxkcZzrvD0UBJOndkTrbcL0=
Subject key identifier:   40:72:57:F0:EF:D7:5A:10:6F:A4:77:74:AD:2B:36:F1:67:B0:44:A6
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       0238
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 07:18:54 +0000
ROA not before:           Sat 24 Jan 2026 07:18:50 +0000
ROA not after:            Wed 31 Mar 2027 07:18:50 +0000
asID:                     329472
IP address blocks:        102.206.104.0/22 maxlen: 24
                          102.208.48.0/22 maxlen: 24
                          2c0f:54c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Jan 24 07:18:50 2026 GMT
            Not After : Mar 31 07:18:50 2027 GMT
        Subject: CN=6974725e-d23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:31:75:bf:bf:d8:b4:75:83:a5:79:11:a0:
                    fc:a5:a4:dd:8b:09:10:00:d7:2d:f9:07:46:d1:62:
                    a5:7e:d4:4a:f0:71:05:7a:39:03:99:ef:1a:59:bd:
                    a6:d0:af:bf:e3:79:3e:84:bf:97:1d:eb:06:71:fd:
                    19:44:dd:9b:9c:64:72:ac:a3:02:c2:7c:60:93:ca:
                    c3:37:ab:7e:d4:fa:9a:70:c4:c6:17:a7:53:fc:48:
                    90:cc:fc:6b:94:64:2c:fa:f4:40:ad:c0:60:29:b7:
                    55:f6:50:7a:db:83:bf:35:8f:14:a3:ea:b1:8e:f5:
                    bb:cd:ec:85:b2:bf:ec:b1:39:47:cb:b6:f0:cb:b3:
                    85:33:04:c2:1f:f1:d0:b1:81:97:41:ac:68:a4:7d:
                    de:8b:e5:6a:b8:4f:c0:67:1d:ee:dd:bf:fa:9a:f3:
                    64:5e:e9:41:df:12:7c:59:9c:99:51:04:1d:5d:d2:
                    b4:88:6f:7e:04:84:e5:48:94:a8:50:51:5b:ca:cc:
                    cf:e2:4c:df:fa:a2:ad:3f:69:bd:97:25:fc:4f:ee:
                    4e:fc:41:68:ee:fc:95:e6:d2:9a:52:b9:eb:0e:6b:
                    52:6d:96:1a:5e:06:a3:f4:bc:0b:91:29:fe:d4:e0:
                    c7:bf:ad:2f:0a:08:b1:9c:ee:67:0e:15:3d:59:12:
                    73:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:57:F0:EF:D7:5A:10:6F:A4:77:74:AD:2B:36:F1:67:B0:44:A6
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.206.104.0/22
                  102.208.48.0/22
                IPv6:
                  2c0f:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:03:da:79:a0:0e:55:e7:4e:13:a7:31:a4:84:99:38:2f:09:
         e4:b8:d2:09:a1:3b:6d:0c:3f:8d:b4:8e:09:53:47:4b:91:ef:
         2c:80:19:45:fd:24:7b:7c:e0:8e:99:95:9a:63:c1:28:b9:5b:
         a5:05:32:b8:0d:af:f5:4d:75:52:72:56:a5:a5:bf:1e:09:91:
         47:a8:98:58:65:70:42:60:98:46:85:ef:db:42:83:b2:58:1b:
         c8:4e:4f:cc:b1:3b:5f:60:97:82:2d:37:f4:19:94:fb:67:7e:
         dd:a8:ea:5b:ff:3f:f1:f8:be:02:18:9e:e3:0b:90:d8:09:54:
         c7:36:50:b6:08:17:94:8b:68:61:34:48:61:e7:ce:51:60:e6:
         78:c4:b8:6d:80:12:61:15:e2:0a:01:2d:3b:33:84:bb:61:fa:
         71:e9:a9:0a:0e:85:75:61:53:10:45:fd:d7:f9:3c:a7:a8:58:
         59:86:aa:d6:90:e4:5f:8e:23:8c:7d:4f:91:d9:44:95:19:61:
         da:11:82:11:f0:d8:99:c3:22:36:74:c5:4e:c5:0a:e9:f2:26:
         1f:47:8d:fc:b9:ca:84:cb:36:1c:aa:c7:9b:44:1a:20:c3:f2:
         6e:64:18:4e:38:c0:db:1f:14:00:18:30:53:a5:c5:15:52:16:
         0e:84:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:46 2026 by rpki-client