This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/ECC7D2C2EFAB11F09BD3B8D0DAE4EC9C.roa
File:                     ECC7D2C2EFAB11F09BD3B8D0DAE4EC9C.roa (raw, json)
Hash identifier:          n0NFYC8Cu+VUEi8d2vX6CTLzOWIm2YLAsbLMVNC6dHU=
Subject key identifier:   92:A1:77:63:92:41:F8:86:92:92:6A:2A:31:B6:0E:98:28:1E:6E:B3
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       0703
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/ECC7D2C2EFAB11F09BD3B8D0DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 11:43:34 +0000
ROA not before:           Mon 12 Jan 2026 11:43:29 +0000
ROA not after:            Sun 29 Jul 2035 11:43:29 +0000
asID:                     37645
IP address blocks:        102.203.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Jan 12 11:43:29 2026 GMT
            Not After : Jul 29 11:43:29 2035 GMT
        Subject: CN=6964de66-c9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:3b:b0:44:a7:8c:ff:57:45:f2:c4:2a:30:
                    7e:a8:54:97:2b:61:04:76:5a:48:f5:22:b2:a8:bf:
                    d3:d6:c8:5c:c8:8f:6f:50:3b:3c:a6:86:84:b9:87:
                    cb:8c:49:63:bd:c7:7a:b5:9b:7c:23:b9:7e:fe:a3:
                    02:c4:84:99:e1:ca:e6:1b:e1:3e:e3:d6:04:a1:a6:
                    a7:0c:1f:93:0a:e4:64:30:61:b6:38:77:28:e3:ad:
                    b1:b4:12:05:80:9f:ea:ea:0d:c6:e0:ba:51:2a:68:
                    c6:6e:68:ed:d2:90:90:3a:b3:c6:3f:b4:81:8a:83:
                    49:71:55:24:f3:d5:b9:64:21:36:18:61:95:cb:9b:
                    34:7f:42:3d:4f:61:64:63:33:ae:43:a8:6a:fb:10:
                    10:cc:01:23:6a:01:db:23:31:69:fa:d2:91:73:cc:
                    f6:4f:d8:ec:94:eb:7f:c7:84:1d:32:ae:24:e2:23:
                    62:a1:f3:ac:1c:a2:e3:77:00:75:f4:be:fa:70:39:
                    9b:b1:df:87:86:df:20:e4:68:67:ce:c4:01:97:d6:
                    1f:2d:0f:9d:4d:9b:9e:b3:19:9d:a2:b7:90:83:59:
                    c4:de:7e:5d:d0:92:c9:cd:47:54:9a:1d:3d:6f:8b:
                    89:94:a3:92:ea:51:e0:69:9d:f5:a4:61:72:dd:61:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:77:63:92:41:F8:86:92:92:6A:2A:31:B6:0E:98:28:1E:6E:B3
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/ECC7D2C2EFAB11F09BD3B8D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:55:39:6b:b4:91:7f:37:a4:0d:3e:c3:c0:8b:3a:39:35:94:
         8d:49:d3:6c:06:8c:9b:9d:27:88:91:78:4a:20:c2:61:9f:02:
         8c:18:41:f5:e8:2b:a4:e9:a6:42:af:eb:27:99:ce:03:b6:8b:
         7d:e3:c6:a7:38:89:4d:d9:fd:8d:53:cb:ee:50:99:1a:b6:ac:
         0d:91:59:c6:bd:b2:01:44:f4:df:0c:a6:23:60:9e:34:47:12:
         22:10:ea:56:54:33:34:4e:10:53:b6:00:b7:60:0b:1b:cd:94:
         54:08:7e:b7:d7:53:9c:46:7e:d4:ab:2a:47:f9:ef:06:15:22:
         2f:a8:32:96:5f:fd:55:a4:3c:5d:d6:6b:9e:cc:c0:8a:01:dd:
         36:b2:31:72:a4:51:af:9e:f1:f1:17:ef:cb:aa:1c:9a:ed:a9:
         f0:6b:ce:e3:85:e8:6d:73:16:5d:02:c2:c5:d1:1c:09:fd:07:
         27:6c:d2:df:37:8f:1c:b5:d5:9b:68:59:06:a3:b5:a9:77:2c:
         18:2f:b8:1a:bc:7b:56:d5:ee:a7:d0:e5:ca:a1:97:eb:9a:62:
         22:d5:77:f1:75:cd:80:1a:95:e2:b5:27:5f:23:bd:ba:59:ed:
         ae:44:30:a5:02:09:9c:e6:10:c9:ea:7d:c4:9a:db:8e:a6:83:
         37:b0:63:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBwMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNjAxMTIxMTQzMjlaFw0zNTA3MjkxMTQzMjlaMBgxFjAU
BgNVBAMTDTY5NjRkZTY2LWM5ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpUzuwRKeM/1dF8sQqMH6oVJcrYQR2Wkj1IrKov9PWyFzIj29QOzymhoS5
h8uMSWO9x3q1m3wjuX7+owLEhJnhyuYb4T7j1gShpqcMH5MK5GQwYbY4dyjjrbG0
EgWAn+rqDcbgulEqaMZuaO3SkJA6s8Y/tIGKg0lxVSTz1blkITYYYZXLmzR/Qj1P
YWRjM65DqGr7EBDMASNqAdsjMWn60pFzzPZP2OyU63/HhB0yriTiI2Kh86wcouN3
AHX0vvpwOZux34eG3yDkaGfOxAGX1h8tD51Nm56zGZ2it5CDWcTefl3QksnNR1Sa
HT1vi4mUo5LqUeBpnfWkYXLdYWIdAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkqF3
Y5JB+IaSkmoqMbYOmCgebrMwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4
QTAxNENFL0VDQzdEMkMyRUZBQjExRjA5QkQzQjhEMERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmy/QwDQYJKoZIhvcNAQEL
BQADggEBAAhVOWu0kX83pA0+w8CLOjk1lI1J02wGjJudJ4iReEogwmGfAowYQfXo
K6TppkKv6yeZzgO2i33jxqc4iU3Z/Y1Ty+5QmRq2rA2RWca9sgFE9N8MpiNgnjRH
EiIQ6lZUMzROEFO2ALdgCxvNlFQIfrfXU5xGftSrKkf57wYVIi+oMpZf/VWkPF3W
a57MwIoB3TayMXKkUa+e8fEX78uqHJrtqfBrzuOF6G1zFl0CwsXRHAn9Byds0t83
jxy11ZtoWQajtal3LBgvuBq8e1bV7qfQ5cqhl+uaYiLVd/F1zYAaleK1J18jvbpZ
7a5EMKUCCZzmEMnqfcSa246mgzewY58=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:31:57 2026 by rpki-client