This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/2FB50770E0A311F0B3D54BD8DAE4EC9C.roa
File:                     2FB50770E0A311F0B3D54BD8DAE4EC9C.roa (raw, json)
Hash identifier:          kLJPuxUduD0ZnQxiSu3uCXRQ0c8BRnVi43UrzvyNzsk=
Subject key identifier:   C4:D8:72:D9:7D:5D:EA:73:18:6C:31:6C:68:4F:36:F1:97:8B:34:33
Certificate issuer:       /CN=F36D3290AF/serialNumber=78F0FAB15B9E2F094BC604212F82F31A6B2A2D1B
Certificate serial:       02
Authority key identifier: 78:F0:FA:B1:5B:9E:2F:09:4B:C6:04:21:2F:82:F3:1A:6B:2A:2D:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/2FB50770E0A311F0B3D54BD8DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 08:33:14 +0000
ROA not before:           Wed 24 Dec 2025 08:33:08 +0000
ROA not after:            Mon 31 Dec 2035 08:33:08 +0000
asID:                     328401
IP address blocks:        102.207.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3290AF, serialNumber=78F0FAB15B9E2F094BC604212F82F31A6B2A2D1B
        Validity
            Not Before: Dec 24 08:33:08 2025 GMT
            Not After : Dec 31 08:33:08 2035 GMT
        Subject: CN=694ba549-35b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:55:9d:58:5a:38:29:eb:40:b2:66:52:4b:
                    da:6d:a9:63:3e:68:2c:4e:e2:8f:25:df:fc:82:da:
                    8f:01:47:78:d9:52:21:c1:11:c7:28:1a:c6:46:86:
                    18:ea:b9:fe:08:9a:83:c0:d7:25:b7:35:4b:5b:56:
                    10:c3:04:99:ea:71:30:75:6d:cb:9f:e8:d0:82:a5:
                    8c:88:58:4a:72:78:ad:40:9f:47:8c:85:3e:fb:a2:
                    c8:06:c4:84:98:84:5b:38:7d:1f:48:1e:b2:39:d0:
                    9c:a8:5c:29:6e:1c:29:6b:93:0f:81:6e:0f:87:76:
                    7d:08:cc:65:36:df:31:f9:c5:47:10:77:65:7e:70:
                    73:d2:37:1e:8c:15:1c:dd:fa:27:7a:db:ab:b7:72:
                    92:fb:81:04:71:76:e3:1c:35:fa:67:60:b2:90:21:
                    d8:77:e9:46:67:6d:05:ce:75:aa:93:4d:af:7e:3b:
                    dc:b8:f1:e3:c9:14:a5:53:04:ec:c2:43:69:5c:46:
                    3e:3f:3c:61:74:40:0d:1d:4e:6b:d9:be:ec:67:c0:
                    65:4e:5a:1f:e7:e4:25:8a:a8:c8:db:6e:e8:cb:6c:
                    fe:41:30:52:d2:d1:90:a1:54:90:8d:81:94:90:9f:
                    a5:7f:e7:b7:ad:a2:81:73:68:4c:a6:d0:ae:38:6b:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:72:D9:7D:5D:EA:73:18:6C:31:6C:68:4F:36:F1:97:8B:34:33
            X509v3 Authority Key Identifier:
                keyid:78:F0:FA:B1:5B:9E:2F:09:4B:C6:04:21:2F:82:F3:1A:6B:2A:2D:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/ePD6sVueLwlLxgQhL4LzGmsqLRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePD6sVueLwlLxgQhL4LzGmsqLRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3290/1131A5ACE0A211F08D09E6D1DAE4EC9C/2FB50770E0A311F0B3D54BD8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.207.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:dd:a2:ec:11:5c:61:dc:f1:c1:6e:23:de:d8:bc:57:7d:65:
         36:03:ae:88:70:34:b5:2b:5f:c2:e1:3e:c6:09:6d:dc:fc:f3:
         cb:1c:5f:74:ae:3f:6f:ce:a7:2f:d8:11:7f:a8:a7:28:b6:c1:
         c2:3c:26:3c:68:1e:8a:8f:3b:c1:05:02:bb:3f:6f:ca:52:c9:
         70:de:ce:23:88:51:34:c6:df:9e:90:2e:02:6c:9f:06:71:16:
         d9:40:1d:23:36:8c:81:c4:dc:bf:39:75:71:d3:40:e7:20:6b:
         3e:08:23:26:27:2e:19:1c:d1:d2:cf:a9:d1:dd:8f:ef:63:bf:
         80:e9:36:2c:a5:53:63:41:d4:eb:cc:fe:e6:8e:98:54:3b:2b:
         64:6d:55:f6:d1:60:bb:65:b8:62:34:b0:94:64:f6:f5:d0:59:
         48:51:f7:d3:da:f5:39:ad:0f:b2:c9:ef:4f:55:d3:f8:4f:0a:
         fa:90:77:27:fc:20:57:df:75:9e:da:40:69:54:a5:75:35:d0:
         f8:9d:eb:18:78:f1:04:77:22:5c:10:bb:53:95:7c:4b:8c:54:
         66:17:ee:b0:71:55:ed:8f:24:9d:0d:5b:e2:eb:1e:69:8e:cd:
         8f:a6:05:e4:81:25:71:7b:04:8a:d8:e3:3b:08:71:25:56:94:
         e9:27:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:40 2026 by rpki-client