This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/F073103AED8511F098246590DAE4EC9C.roa
File:                     F073103AED8511F098246590DAE4EC9C.roa (raw, json)
Hash identifier:          7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=
Subject key identifier:   AD:D7:DB:2F:32:AC:FB:A7:F6:68:16:FB:11:F6:1F:5A:A3:E2:47:AF
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       06F1
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/F073103AED8511F098246590DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 18:06:37 +0000
ROA not before:           Fri 09 Jan 2026 18:06:32 +0000
ROA not after:            Tue 08 Jan 2036 18:06:32 +0000
asID:                     5536
IP address blocks:        102.218.128.0/24 maxlen: 32
                          102.218.130.0/24 maxlen: 32
                          102.219.22.0/24 maxlen: 32
                          102.220.125.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Jan  9 18:06:32 2026 GMT
            Not After : Jan  8 18:06:32 2036 GMT
        Subject: CN=696143ad-d9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:6d:bb:c3:54:2c:56:ba:4e:4f:db:53:5f:
                    fc:a9:82:16:3f:41:fc:34:3f:ed:66:b1:b2:61:0d:
                    a3:59:91:de:d6:96:e4:e9:7b:b3:9e:8a:87:28:fd:
                    62:fb:e1:d9:fc:7a:7f:11:51:d0:9a:89:7c:8c:a3:
                    bf:2b:c8:c2:a7:c5:0b:b3:19:a9:c0:ab:af:18:b9:
                    f0:79:a7:99:0e:e1:c7:7d:2b:c5:f5:7b:e8:e8:45:
                    f9:8d:96:38:38:fe:99:b5:fd:dc:46:dc:d4:92:1b:
                    cc:51:12:71:0c:01:86:7c:f7:8f:81:b9:94:9d:ce:
                    1e:61:70:7f:78:4d:c7:f8:03:a8:4d:b9:49:35:26:
                    f7:fb:19:18:4a:23:fb:2d:27:82:e3:a2:d8:a0:20:
                    de:5a:90:57:bd:ca:f4:d0:f5:3a:a3:d6:c0:ed:b9:
                    f3:80:0e:fd:7e:0c:9c:e7:3b:37:1c:8d:ca:de:fc:
                    7e:82:ba:8c:3d:8a:ea:99:6a:70:e8:52:95:70:ee:
                    36:c2:96:f2:98:70:5f:53:01:25:12:33:b4:ed:0f:
                    0b:54:57:49:ae:6d:58:22:0c:32:6a:05:21:63:01:
                    30:8e:0b:18:d4:31:ec:fe:52:6f:d4:10:ec:47:f1:
                    4c:d8:11:a9:9f:9b:ab:0e:e4:89:dc:10:6d:1a:2d:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D7:DB:2F:32:AC:FB:A7:F6:68:16:FB:11:F6:1F:5A:A3:E2:47:AF
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/F073103AED8511F098246590DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.128.0/24
                  102.218.130.0/24
                  102.219.22.0/24
                  102.220.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:dd:0f:74:76:9a:a0:b9:50:66:70:79:9d:de:fd:26:f3:0a:
         46:ef:d9:4d:3e:21:d6:b6:11:46:a9:53:95:c5:ca:a5:eb:ab:
         2c:46:40:d0:37:ef:d9:d1:f9:34:c8:1e:4f:a5:22:cb:93:e8:
         3d:16:fc:54:f7:e2:99:38:f9:2f:10:e3:9c:24:11:e2:ed:2a:
         9a:8b:48:7a:f5:1c:81:ce:6d:9c:24:56:75:0f:3f:8f:55:44:
         e6:42:ce:95:6d:76:e4:6d:96:b5:af:ff:ac:64:51:29:33:57:
         9a:5a:44:b1:f9:fe:13:7a:df:39:1f:15:77:6a:6f:f7:99:73:
         a5:b5:7f:b6:dc:b8:69:4a:58:ec:11:12:34:00:a1:81:e7:e2:
         72:da:da:89:ab:0f:65:e5:49:98:2d:73:e9:46:ac:af:63:56:
         ba:12:b1:8e:bc:a3:40:f2:6a:41:cf:b2:22:a0:bb:97:c3:1d:
         84:77:e0:69:cf:18:6d:db:2d:8d:dc:ac:84:16:93:6e:67:b3:
         51:1e:62:37:1c:ca:1b:02:81:47:3d:10:e9:7c:ec:bb:58:99:
         33:0a:2d:b4:ed:4c:21:8a:3a:3c:74:c4:d7:f0:41:8a:b7:a0:
         8f:0e:8c:39:45:db:b6:8c:38:72:b0:a6:14:fe:83:cd:16:59:
         70:30:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:46 2026 by rpki-client