This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa
File:                     CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (raw, json)
Hash identifier:          i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=
Subject key identifier:   9C:D2:62:8A:44:4A:E1:70:06:08:E2:20:E4:F8:0C:E5:DF:3F:0A:52
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       02
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 14:38:06 +0000
ROA not before:           Thu 15 Jan 2026 14:38:01 +0000
ROA not after:            Wed 31 Dec 2036 14:38:01 +0000
asID:                     329686
IP address blocks:        102.203.164.0/24 maxlen: 24
                          102.203.165.0/24 maxlen: 24
                          102.203.166.0/24 maxlen: 24
                          102.203.167.0/24 maxlen: 24
                          2c0f:43a0::/33 maxlen: 33
                          2c0f:43a0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Jan 15 14:38:01 2026 GMT
            Not After : Dec 31 14:38:01 2036 GMT
        Subject: CN=6968fbce-0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:93:2a:79:14:c0:3f:64:b4:a2:f6:9e:94:
                    3d:06:13:54:98:ce:53:08:9c:8d:a1:2c:ec:89:35:
                    98:a3:ee:e3:1f:df:28:bc:7c:c5:fb:71:71:2e:b6:
                    f8:de:05:7d:cd:42:4f:81:6e:a8:0a:15:78:ce:47:
                    b6:d0:5e:bb:85:91:30:5d:5c:7a:72:1a:4c:26:e5:
                    f5:0e:61:15:46:cc:30:0b:3f:b4:7b:8d:33:b3:57:
                    22:6d:54:65:00:6e:2e:f2:d5:22:22:45:09:a0:38:
                    d8:7b:be:89:83:06:e0:f2:9a:5f:de:9f:c2:f7:a5:
                    2a:6e:2c:df:ca:0a:14:69:66:91:7f:e5:92:10:8c:
                    ca:57:20:96:66:2d:42:f3:fa:b0:98:6a:1d:72:fc:
                    79:14:34:33:06:e9:da:d0:09:9c:7e:6b:32:dc:7d:
                    13:54:08:eb:03:7f:b7:ce:02:88:df:d8:55:bd:d6:
                    c7:f6:c9:b7:ff:3e:e0:77:5a:8a:b6:2c:d8:d0:19:
                    7a:1d:70:6e:94:dd:2c:18:11:bb:a6:a8:1f:36:34:
                    b5:6f:87:4b:81:c2:0d:91:c1:90:e0:d1:a0:9d:57:
                    a9:64:ec:06:ac:06:6b:36:13:f8:03:bb:f9:7f:03:
                    ac:bf:21:ad:ae:95:18:7a:04:45:6e:27:48:12:9f:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D2:62:8A:44:4A:E1:70:06:08:E2:20:E4:F8:0C:E5:DF:3F:0A:52
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.203.164.0/22
                IPv6:
                  2c0f:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:cb:c3:55:de:50:d5:70:f6:08:8a:58:2e:25:3a:07:d2:6d:
         3b:91:f1:3b:fe:a0:5e:79:e2:63:c1:9e:1e:f9:47:fc:af:8e:
         95:a0:fa:25:07:6f:6a:62:d8:13:41:71:36:51:b9:96:61:07:
         3c:e6:22:b6:10:bf:e3:7b:62:92:cc:89:0b:c5:be:cc:60:91:
         fb:ff:45:23:ea:c7:83:0e:03:f0:0e:51:e7:dc:27:11:20:b3:
         62:2b:b4:ce:fe:71:36:4d:30:da:cb:f6:e7:12:89:de:40:1e:
         c1:fa:11:bd:b6:40:e0:da:26:b1:7f:39:fa:74:71:c0:f3:65:
         20:dc:21:3a:28:66:fc:4b:81:8a:a1:b3:59:a4:25:68:36:7e:
         7e:76:32:51:da:21:70:ec:62:6d:a9:06:b9:cd:6e:f7:28:27:
         40:a6:b9:1a:4d:77:66:fd:27:19:a9:4d:00:1f:8c:1e:46:ca:
         6c:f5:d3:68:8b:4d:94:03:be:8f:30:50:ee:ea:79:5a:f5:5b:
         9e:ab:b8:19:6c:4d:cc:7c:a2:2a:6d:77:7d:c0:34:c1:56:2c:
         de:b1:ac:ae:81:a2:1f:ce:32:70:68:30:ea:ae:bf:93:82:c8:
         f3:c6:68:44:9c:90:96:9a:fe:50:e6:d7:4c:c2:91:53:fd:9c:
         af:aa:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:52 2026 by rpki-client