This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/890714D6F13C11F0A8B5B8EEDAE4EC9C.roa
File:                     890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (raw, json)
Hash identifier:          jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=
Subject key identifier:   18:10:4E:F0:06:D9:AB:A9:DB:F7:85:9F:FE:26:A2:AA:BD:D1:0B:D0
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       02
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/890714D6F13C11F0A8B5B8EEDAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 11:31:15 +0000
ROA not before:           Wed 14 Jan 2026 11:31:10 +0000
ROA not after:            Sun 14 Jan 2029 11:31:10 +0000
asID:                     329644
IP address blocks:        102.204.65.0/24 maxlen: 24
                          2001:43fc:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Jan 14 11:31:10 2026 GMT
            Not After : Jan 14 11:31:10 2029 GMT
        Subject: CN=69677e83-a2d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:f6:8e:b4:eb:4c:6d:2e:c1:b3:33:fd:f8:
                    f6:a6:31:c9:34:17:b5:b9:56:95:b2:29:8f:57:52:
                    ac:63:ad:ed:a0:a2:38:a9:c6:8f:ac:b4:31:cb:b6:
                    fc:03:61:7c:ea:68:72:ab:45:7d:35:66:61:bb:97:
                    04:68:78:f9:45:86:f8:13:13:5c:be:3d:47:17:8a:
                    1b:cd:26:af:83:fd:eb:d4:3d:42:3f:fe:f9:db:f8:
                    9c:3b:8c:d2:57:57:e2:78:4f:41:9c:73:b9:69:53:
                    97:1d:4b:be:fe:12:84:1d:e2:aa:a4:c2:b2:24:de:
                    52:f6:cf:6c:8e:89:d4:64:47:21:48:9b:8c:e3:f5:
                    19:a9:91:82:fb:6f:76:91:a7:36:d7:7b:0b:22:fc:
                    a7:60:ce:55:4d:57:87:6d:7f:57:6b:50:ea:be:a7:
                    22:02:97:64:b8:af:88:e8:90:4e:ff:23:eb:cd:b4:
                    17:fe:d3:3c:5b:da:aa:ef:4b:df:f3:7f:5a:8e:29:
                    af:eb:12:60:9b:6e:bd:40:44:a4:99:6d:3d:56:4e:
                    d0:c0:2e:e6:ef:aa:0c:06:10:0d:61:33:3c:74:e8:
                    e5:4f:58:31:76:4c:2e:a6:47:7e:f3:43:d9:ae:d7:
                    e3:c6:8c:b5:e9:f1:17:b0:f8:f1:b4:55:fc:02:12:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:4E:F0:06:D9:AB:A9:DB:F7:85:9F:FE:26:A2:AA:BD:D1:0B:D0
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/890714D6F13C11F0A8B5B8EEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.204.65.0/24
                IPv6:
                  2001:43fc:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:4b:db:de:e2:b2:1e:cd:6f:7e:58:b2:a5:75:60:92:e0:
         26:3e:e3:50:94:ef:e8:e5:29:11:20:f9:dd:91:b0:47:12:09:
         aa:3c:2b:b4:42:92:93:fe:3b:13:67:c0:9f:c8:13:c7:25:bd:
         59:1d:64:e8:b7:10:86:83:3c:4b:49:0a:74:52:e6:f6:19:d1:
         75:b7:d0:7d:6f:40:15:5c:a6:57:0e:23:cc:23:c2:51:3b:59:
         f7:b3:56:2a:9a:8b:15:cc:3c:ca:d6:6c:00:49:83:7a:d8:80:
         36:6a:32:8b:5f:d5:f9:e8:b5:5a:83:93:e5:49:10:d8:e9:70:
         34:c7:be:ef:34:d1:e3:87:dd:23:52:d1:29:53:16:e7:5d:f4:
         f5:3f:e6:75:ba:1e:ba:79:58:e8:b3:22:8f:c5:13:26:98:0e:
         4a:25:7a:ce:ba:92:7c:17:a4:b8:7f:cd:ee:51:ee:c4:a2:ff:
         72:78:f2:21:84:51:6c:b9:ee:84:30:fd:fb:74:7d:c6:e1:01:
         50:f2:e0:31:eb:07:68:7b:72:1e:e1:19:f6:05:fd:af:f7:8c:
         89:1d:8c:a8:89:44:f5:f3:c4:44:3e:da:86:5c:70:4c:40:fc:
         8a:d3:1b:3e:dd:9e:41:09:f7:3a:66:b7:b4:d7:80:0f:3a:01:
         0d:3d:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:07 2026 by rpki-client