This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa
File:                     CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa (raw, json)
Hash identifier:          ByzttdB9J3NGHz1Z3lKqffInl1ohB/rmI07GuVpfCBk=
Subject key identifier:   C1:47:0E:45:03:3D:83:B9:95:0D:5B:41:02:DF:CA:5D:50:40:95:49
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0228
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 17:50:07 +0000
ROA not before:           Fri 16 Jan 2026 17:50:03 +0000
ROA not after:            Tue 01 Jan 2036 17:50:03 +0000
asID:                     328910
IP address blocks:        2c0f:2100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Jan 16 17:50:03 2026 GMT
            Not After : Jan  1 17:50:03 2036 GMT
        Subject: CN=696a7a4f-8683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:1c:16:30:0c:45:13:0d:15:1e:59:3f:52:
                    6a:ab:2a:95:07:a3:41:ff:65:79:25:2e:f7:60:21:
                    fc:4a:bb:8a:be:ca:5f:a9:a5:35:f1:89:1f:a0:dc:
                    0f:33:8e:c9:c6:78:a5:ea:5c:9c:d1:36:f1:96:d2:
                    b9:8f:66:f1:6d:0e:91:a3:8e:fd:5f:55:20:28:3e:
                    8e:ec:0a:8f:9c:e5:e2:a7:a1:15:d4:53:e7:35:bf:
                    bf:e7:0e:80:99:4a:cf:ef:76:32:bc:7b:02:f9:e8:
                    f3:e6:58:8d:6e:da:66:12:5e:9d:50:b9:3a:ac:a4:
                    5d:73:5b:04:ca:a6:8f:5c:d2:30:17:a7:07:b6:8b:
                    b8:f4:32:6d:97:ef:55:12:35:32:40:46:8e:58:14:
                    34:3f:03:71:5a:4e:6d:5f:60:ed:49:d1:c0:eb:27:
                    e1:a5:1b:78:18:c3:5c:00:72:42:25:ea:86:4d:6a:
                    0b:f9:63:0e:4f:3a:30:7b:24:0d:00:d2:0c:28:76:
                    b3:40:1c:d6:0d:9d:92:f6:1c:9e:a5:eb:80:aa:3b:
                    af:bb:ed:de:a5:ac:41:4d:0e:a0:9b:0d:00:1f:25:
                    58:eb:3e:13:6e:22:98:46:48:8c:dd:72:60:60:fa:
                    12:f3:14:2a:53:52:40:72:5a:14:e0:f7:39:14:40:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:47:0E:45:03:3D:83:B9:95:0D:5B:41:02:DF:CA:5D:50:40:95:49
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2100::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:be:8f:66:ea:61:d0:2d:20:f8:81:35:10:77:06:ba:2b:
         21:d6:ca:30:73:42:cb:e1:3e:f8:a6:96:a5:5e:59:7b:53:4d:
         67:83:06:a8:dd:2c:2b:0a:f5:d3:c1:48:22:0d:8f:15:2b:b6:
         2e:5c:19:ef:d6:28:3d:23:1a:89:80:bd:bc:8e:39:bd:ee:17:
         64:75:c1:6e:20:6a:3d:dd:de:34:e8:79:cf:1b:bc:4f:60:fc:
         27:70:3b:49:e0:a8:a7:9b:a4:e3:5e:52:82:bd:ba:c7:51:f1:
         73:26:02:c5:60:c4:dd:df:e3:e9:6f:94:d2:aa:43:8e:24:84:
         35:a0:2e:63:63:c1:e3:d4:e7:47:b7:75:3a:17:6f:9a:8e:1b:
         82:cb:ba:7d:2f:eb:f2:34:90:0e:bf:2b:8a:b3:42:0c:13:e0:
         76:d7:7b:b6:0d:21:39:11:39:ec:37:2a:64:a5:15:0e:a1:5d:
         26:ac:3c:70:97:62:82:60:26:83:7f:3a:b8:33:4a:fc:e1:be:
         b9:63:8b:94:e1:01:e3:ef:9e:a9:4f:6b:5c:b1:3a:83:05:f3:
         92:42:b3:c4:15:e6:f2:91:44:df:90:ea:2d:99:a3:43:b3:35:
         1c:83:b9:a2:7b:a1:9f:b7:a4:3c:69:db:5b:65:79:80:8a:d9:
         95:4d:47:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTg1ODNBRjExMC8GA1UEBRMoRkJGNEM3Q0Y1RUM4NjJENDJEQzgxMEEwNDMwMDIx
MUJBMkI3QzUwODAeFw0yNjAxMTYxNzUwMDNaFw0zNjAxMDExNzUwMDNaMBgxFjAU
BgNVBAMTDTY5NmE3YTRmLTg2ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwdBwWMAxFEw0VHlk/UmqrKpUHo0H/ZXklLvdgIfxKu4q+yl+ppTXxiR+g
3A8zjsnGeKXqXJzRNvGW0rmPZvFtDpGjjv1fVSAoPo7sCo+c5eKnoRXUU+c1v7/n
DoCZSs/vdjK8ewL56PPmWI1u2mYSXp1QuTqspF1zWwTKpo9c0jAXpwe2i7j0Mm2X
71USNTJARo5YFDQ/A3FaTm1fYO1J0cDrJ+GlG3gYw1wAckIl6oZNagv5Yw5POjB7
JA0A0gwodrNAHNYNnZL2HJ6l64CqO6+77d6lrEFNDqCbDQAfJVjrPhNuIphGSIzd
cmBg+hLzFCpTUkByWhTg9zkUQDT9AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUwUcO
RQM9g7mVDVtBAt/KXVBAlUkwHwYDVR0jBBgwFoAU+/THz17IYtQtyBCgQwAhG6K3
xQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2MkU5NTFBLy1fVEh6
MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1fVEh6MTdJWXRRdHlCQ2dRd0FoRzZLM3hRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjU4NTgzLzZFNTU4OTQwNEU0QzExRUZCM0YwNjdBRjc2
MkU5NTFBL0NCMkVERUZDRjMwMzExRjA5QkJBODJCNkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsDyEAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzG76PZuph0C0g+IE1EHcGuish1sowc0LL4T74ppalXll7U01ngwao
3SwrCvXTwUgiDY8VK7YuXBnv1ig9IxqJgL28jjm97hdkdcFuIGo93d406HnPG7xP
YPwncDtJ4Kinm6TjXlKCvbrHUfFzJgLFYMTd3+Ppb5TSqkOOJIQ1oC5jY8Hj1OdH
t3U6F2+ajhuCy7p9L+vyNJAOvyuKs0IME+B213u2DSE5ETnsNypkpRUOoV0mrDxw
l2KCYCaDfzq4M0r84b65Y4uU4QHj756pT2tcsTqDBfOSQrPEFebykUTfkOotmaND
szUcg7mie6Gft6Q8adtbZXmAitmVTUcj
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:25 2026 by rpki-client