This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa
File:                     1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (raw, json)
Hash identifier:          xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=
Subject key identifier:   BF:38:47:92:D5:23:AA:FE:58:AC:40:E1:9A:99:77:57:8E:67:EF:54
Certificate issuer:       /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial:       03D8
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 07:35:43 +0000
ROA not before:           Wed 04 Feb 2026 07:35:38 +0000
ROA not after:            Sun 03 Feb 2036 07:35:38 +0000
asID:                     328962
IP address blocks:        2c0f:eb00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
        Validity
            Not Before: Feb  4 07:35:38 2026 GMT
            Not After : Feb  3 07:35:38 2036 GMT
        Subject: CN=6982f6ce-6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:13:4e:0c:b2:90:28:eb:3b:08:eb:0e:c3:
                    19:26:16:93:0d:9f:c6:43:6d:a6:d3:0a:b2:9c:7a:
                    32:40:dc:c9:de:e2:0b:f3:ae:4c:3d:e4:fb:fe:e6:
                    0c:f2:17:4e:93:0c:38:b6:9d:0c:65:13:1a:3f:17:
                    b7:26:f5:4c:a1:0b:f8:27:53:b3:95:68:f5:32:29:
                    c3:d5:70:4d:7f:9f:24:6e:98:34:c5:04:a4:a0:3d:
                    b6:6c:c5:ba:30:6f:0e:91:b8:0f:91:09:bf:fc:9c:
                    26:25:0d:b6:32:ec:b8:7a:be:ab:0b:95:df:77:b9:
                    ac:95:54:bc:78:f1:46:a5:77:6c:1b:ea:8f:07:ae:
                    27:01:ce:52:ec:fc:95:04:ff:fa:7a:29:a2:e1:b4:
                    ed:05:e9:3b:da:15:6e:69:88:09:62:55:ed:d8:8a:
                    29:68:49:c5:e6:ad:cc:1c:2b:b2:83:f7:0e:a6:65:
                    f0:93:38:a1:b5:4a:72:05:48:91:ba:13:47:76:65:
                    c1:2f:99:95:8e:c0:3b:a6:04:aa:03:dd:0c:31:6d:
                    76:e8:eb:92:69:ef:77:67:18:d9:9a:f3:17:29:82:
                    56:20:1c:dc:14:c1:3a:75:66:95:af:97:2d:e0:c4:
                    a2:b1:ee:36:ec:e7:2c:9c:21:82:be:3c:ef:7b:f3:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:47:92:D5:23:AA:FE:58:AC:40:E1:9A:99:77:57:8E:67:EF:54
            X509v3 Authority Key Identifier:
                keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:eb00:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:a0:e7:c9:b5:03:01:a5:84:86:80:e1:f6:34:c5:d2:b7:eb:
         fc:77:41:42:0d:b8:1c:25:26:30:e5:b0:63:3e:7c:5f:95:60:
         47:e2:97:af:34:43:e8:2d:bf:d8:f8:82:6a:40:ae:8d:12:ca:
         83:8a:01:fb:19:9e:b5:29:c7:36:3c:5f:f8:59:8a:6e:c8:cf:
         81:ba:37:7a:22:38:e1:df:54:e2:a1:ec:1f:d2:9c:6d:2c:e2:
         6f:23:3e:e6:6f:49:d9:eb:f3:10:c6:ea:10:8c:c6:6a:b9:11:
         bd:3c:92:98:b5:85:5f:25:26:10:35:47:23:c5:2f:5a:cf:b5:
         f5:02:f4:90:74:b2:5d:af:1b:3c:df:64:1a:f0:65:0f:9a:b4:
         cf:08:fb:c5:06:52:4b:ce:65:c8:3c:e9:29:e5:75:55:12:cd:
         ef:dd:de:3c:5d:d8:28:42:1b:81:6c:a6:0a:da:d6:de:11:30:
         f8:53:40:30:9b:c0:68:47:82:51:2e:3a:0f:b0:36:ce:14:25:
         d7:98:fc:66:3b:2d:35:d3:a0:fb:e5:37:a3:89:99:c3:e9:ab:
         28:02:ac:b2:88:53:e8:8a:fc:93:52:ba:eb:83:3b:4d:85:5a:
         d4:7f:4b:ab:da:55:68:57:53:9c:10:08:86:5f:bd:13:a0:0b:
         3a:7d:29:ef
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2
REMzOUQ0M0QxQjAeFw0yNjAyMDQwNzM1MzhaFw0zNjAyMDMwNzM1MzhaMBgxFjAU
BgNVBAMTDTY5ODJmNmNlLTY1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnJxNODLKQKOs7COsOwxkmFpMNn8ZDbabTCrKcejJA3Mne4gvzrkw95Pv+
5gzyF06TDDi2nQxlExo/F7cm9UyhC/gnU7OVaPUyKcPVcE1/nyRumDTFBKSgPbZs
xbowbw6RuA+RCb/8nCYlDbYy7Lh6vqsLld93uayVVLx48Uald2wb6o8HricBzlLs
/JUE//p6KaLhtO0F6TvaFW5piAliVe3YiiloScXmrcwcK7KD9w6mZfCTOKG1SnIF
SJG6E0d2ZcEvmZWOwDumBKoD3QwxbXbo65Jp73dnGNma8xcpglYgHNwUwTp1ZpWv
ly3gxKKx7jbs5yycIYK+PO978zxxAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUvzhH
ktUjqv5YrEDhmpl3V45n71QwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU
PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC
UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRB
RDlFNkZDLzFDMEIyMTIyMDE5QzExRjFCQkRCMEU3RkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAsD+sAAjANBgkqhkiG9w0B
AQsFAAOCAQEAG6DnybUDAaWEhoDh9jTF0rfr/HdBQg24HCUmMOWwYz58X5VgR+KX
rzRD6C2/2PiCakCujRLKg4oB+xmetSnHNjxf+FmKbsjPgbo3eiI44d9U4qHsH9Kc
bSzibyM+5m9J2evzEMbqEIzGarkRvTySmLWFXyUmEDVHI8UvWs+19QL0kHSyXa8b
PN9kGvBlD5q0zwj7xQZSS85lyDzpKeV1VRLN793ePF3YKEIbgWymCtrW3hEw+FNA
MJvAaEeCUS46D7A2zhQl15j8ZjstNdOg++U3o4mZw+mrKAKssohT6Ir8k1K664M7
TYVa1H9Lq9pVaFdTnBAIhl+9E6ALOn0p7w==
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:56 2026 by rpki-client