This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa
File:                     1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa (raw, json)
Hash identifier:          1XZwhvPB50gzM2XWj7n0L+r0jTbTyQwNMXT6DXbvlE8=
Subject key identifier:   F8:0D:2C:2B:08:28:E3:26:11:FB:3F:FD:B5:F2:34:22:2D:AA:F7:D7
Certificate issuer:       /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial:       05F9
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 11:12:50 +0000
ROA not before:           Wed 21 Jan 2026 11:12:45 +0000
ROA not after:            Mon 31 Jan 2028 11:12:45 +0000
asID:                     37154
IP address blocks:        41.72.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1529 (0x5f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AF, serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
        Validity
            Not Before: Jan 21 11:12:45 2026 GMT
            Not After : Jan 31 11:12:45 2028 GMT
        Subject: CN=6970b4b2-c532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:92:b4:35:f3:d8:b4:f6:26:0c:d4:d7:77:
                    bf:c7:c6:6d:6e:89:8d:3a:61:40:08:5f:ef:6e:55:
                    13:9a:bf:3b:4d:0f:fd:b3:83:17:8b:dc:66:ae:53:
                    e0:ef:f8:1c:59:b6:6c:f1:ba:4b:7c:a0:c8:25:ce:
                    d7:9a:1e:f6:fc:ab:1d:6b:a7:fe:e7:be:fc:c9:7e:
                    65:39:b0:a4:0e:b9:af:b6:36:3e:9a:4a:c9:6a:52:
                    ee:85:8e:bf:bf:c8:69:0f:8a:f7:af:cf:b5:5d:b2:
                    55:6b:11:88:2e:98:9a:61:7f:60:a3:12:82:ec:55:
                    a9:d7:1d:39:71:c5:e9:bc:85:c4:23:bd:ec:0a:4e:
                    a6:80:b8:08:70:5f:89:3c:91:b0:d3:e0:8c:b9:fb:
                    7b:1f:49:a9:f4:ee:38:cf:1a:39:92:29:32:72:6a:
                    33:29:37:55:08:59:76:64:1b:c1:45:bf:a9:41:9f:
                    04:6d:dd:6d:48:99:c7:d0:3f:b3:af:d5:8b:ba:83:
                    df:4f:dc:d9:9c:3b:90:34:3a:2b:51:18:dd:8d:44:
                    94:8a:9d:d1:d2:7e:fa:a3:dd:ab:17:82:10:29:5e:
                    7a:9c:6c:e5:e1:be:f1:0b:fb:b1:be:08:8c:f3:76:
                    83:75:75:46:5a:95:fd:d3:12:76:19:78:15:da:60:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:2C:2B:08:28:E3:26:11:FB:3F:FD:B5:F2:34:22:2D:AA:F7:D7
            X509v3 Authority Key Identifier:
                keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/1F5118C4F6BA11F0861C2B8DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.72.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:df:cb:35:1a:73:30:51:c5:b5:4f:59:dd:54:4c:28:f4:cc:
         df:ba:00:0f:25:dc:db:d4:ce:fa:cf:f5:b5:e3:c6:ab:29:1f:
         f8:05:4d:d1:f6:a1:d3:9a:5a:7f:79:44:4d:28:96:be:57:36:
         26:b5:02:d4:d0:d5:e7:7e:4f:7e:fe:16:9a:99:95:6e:82:cd:
         6f:a9:c3:9e:50:ec:80:23:42:ac:a6:75:d1:09:9b:fa:94:a0:
         09:93:42:ea:50:c0:db:84:20:be:56:4e:1f:91:be:d3:c4:ac:
         2b:05:26:79:cb:b9:a3:af:da:ed:ff:6c:e3:f9:0e:38:33:4f:
         d1:20:94:1e:69:16:c6:c5:e7:d5:5b:21:60:b6:ba:05:9a:18:
         ca:5f:39:22:53:f3:01:66:26:9f:23:8b:a8:f6:7c:91:b8:37:
         87:c4:21:25:a8:66:79:92:d9:af:6b:6f:02:07:44:e2:7f:1d:
         fb:b9:a7:3b:c1:da:c5:e3:9b:54:91:7e:24:75:0c:e8:76:50:
         0f:04:97:2c:27:c4:09:36:7f:e4:ef:70:57:0c:1d:e3:b8:5e:
         15:4c:77:66:88:db:8d:04:4d:b8:f1:94:85:06:cc:c3:a5:c3:
         29:94:cb:ca:d7:db:b9:9c:d1:4e:01:8c:de:37:cf:0d:3d:09:
         04:71:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:33 2026 by rpki-client