This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A814A5BED61111F0B21B3C80DAE4EC9C.roa
File:                     A814A5BED61111F0B21B3C80DAE4EC9C.roa (raw, json)
Hash identifier:          awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=
Subject key identifier:   B2:DF:A7:73:C9:0B:69:64:A6:A8:6C:35:CA:62:DC:9A:93:A1:C1:E2
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       1A
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A814A5BED61111F0B21B3C80DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 21:46:17 +0000
ROA not before:           Wed 10 Dec 2025 21:46:12 +0000
ROA not after:            Fri 31 Dec 2049 21:46:12 +0000
asID:                     37069
IP address blocks:        2c0f:f0b0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Dec 10 21:46:12 2025 GMT
            Not After : Dec 31 21:46:12 2049 GMT
        Subject: CN=6939ea29-7bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:d8:f8:6e:41:2a:70:83:47:a7:e8:6e:13:
                    79:2a:f8:77:40:ef:53:3e:03:76:c6:7b:32:f5:87:
                    f6:a8:ca:b6:84:02:0e:2e:13:45:7f:7b:7c:08:3c:
                    fa:d8:cf:5e:43:e8:2f:80:3e:8d:75:f2:ba:a4:0d:
                    cd:6d:c0:68:a2:bc:ef:7b:a1:13:c4:13:91:bb:c2:
                    d7:8f:00:30:29:80:bb:b6:6e:8d:41:6e:f3:7f:d5:
                    19:0c:b3:bd:aa:58:26:24:0c:87:00:f1:34:f5:d4:
                    dd:f5:3c:2b:ba:78:61:93:9c:6c:c5:64:8b:89:81:
                    24:48:68:a1:c4:81:df:91:67:79:5f:46:e0:78:6a:
                    84:8f:2f:43:f3:ea:48:1a:6c:e7:6d:d2:76:08:e1:
                    5c:cd:f9:06:8a:f9:6e:69:62:31:06:09:61:e4:6a:
                    00:a0:bf:12:3e:69:58:b3:cd:13:e8:46:8e:4e:d5:
                    d7:3a:c3:43:5a:6a:90:ce:a6:51:50:04:8c:0a:bb:
                    7d:39:78:79:f7:09:c1:eb:38:6b:13:fe:ca:f0:19:
                    37:d8:ea:33:9d:63:4b:85:77:c7:f4:4e:1c:b3:d9:
                    0f:52:ab:d2:73:6d:b6:c3:a0:32:a1:cb:c7:87:7b:
                    95:a4:2c:e2:eb:f1:d7:11:f2:ce:37:d5:ae:0c:d2:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:A7:73:C9:0B:69:64:A6:A8:6C:35:CA:62:DC:9A:93:A1:C1:E2
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/A814A5BED61111F0B21B3C80DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f0b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:a5:a0:72:94:b2:2b:1d:dd:ce:e8:b8:4c:0d:95:ec:f8:
         9d:e9:fa:96:c4:64:4e:d8:8a:b8:48:e9:8f:f8:95:55:27:33:
         3a:58:01:bd:99:42:70:aa:48:21:ad:a6:bf:a3:ba:42:5a:b5:
         08:22:2f:4d:da:a1:a9:78:a5:fc:5a:5e:78:c8:e7:5e:94:d3:
         af:ca:ce:c3:08:95:91:c3:6a:79:e3:0a:9a:30:99:a6:35:69:
         b2:a9:20:ac:2a:77:6e:c9:54:74:4f:26:91:df:7e:cf:d1:ff:
         70:ec:1a:37:b6:7c:5f:34:de:d7:f5:0d:cc:e3:6f:f4:1b:55:
         00:d7:01:5b:87:de:ec:58:99:97:6a:0f:36:5c:f2:86:a0:a8:
         99:e4:93:41:c2:f9:45:5a:4c:80:07:e0:0e:97:2d:e2:bf:4b:
         66:ab:80:8b:03:b5:f0:0d:85:bb:36:4c:31:31:b5:00:d5:9b:
         c8:8a:93:60:0c:6d:07:f4:f2:ba:b5:72:2b:ed:d7:69:90:69:
         40:dd:e9:0b:1d:c4:6a:bf:29:ce:f2:29:dd:fe:25:33:26:54:
         50:51:6d:00:1c:00:5b:72:2b:b3:22:d4:3f:fe:0d:6b:03:eb:
         58:8f:70:9f:85:ae:f5:7d:59:05:af:1b:0b:8d:05:88:25:a5:
         f4:51:65:e7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0M2OEFGMTEwLwYDVQQFEyg5MDUwMjU3MjRCNjNDQTQ5NjU5RUMxNDA1OEZBQjBD
MTMxQzUwRTlGMB4XDTI1MTIxMDIxNDYxMloXDTQ5MTIzMTIxNDYxMlowGDEWMBQG
A1UEAxMNNjkzOWVhMjktN2JjMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANmD2PhuQSpwg0en6G4TeSr4d0DvUz4DdsZ7MvWH9qjKtoQCDi4TRX97fAg8
+tjPXkPoL4A+jXXyuqQNzW3AaKK873uhE8QTkbvC148AMCmAu7ZujUFu83/VGQyz
vapYJiQMhwDxNPXU3fU8K7p4YZOcbMVki4mBJEhoocSB35FneV9G4HhqhI8vQ/Pq
SBps523SdgjhXM35Bor5bmliMQYJYeRqAKC/Ej5pWLPNE+hGjk7V1zrDQ1pqkM6m
UVAEjAq7fTl4efcJwes4axP+yvAZN9jqM51jS4V3x/ROHLPZD1Kr0nNttsOgMqHL
x4d7laQs4uvx1xHyzjfVrgzScEECAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSy36dz
yQtpZKaobDXKYtyak6HB4jAfBgNVHSMEGDAWgBSQUCVyS2PKSWWewUBY+rDBMcUO
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFFNEVDOUMva0ZBbGNr
dGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMva0ZBbGNrdGp5a2xsbnNGQVdQcXd3VEhGRHA4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0NDNjgvNTI3NDkxRkNEMzVEMTFGMDg1ODE3OTk3REFF
NEVDOUMvQTgxNEE1QkVENjExMTFGMEIyMUIzQzgwREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP8LAwDQYJKoZIhvcNAQEL
BQADggEBADijpaBylLIrHd3O6LhMDZXs+J3p+pbEZE7YirhI6Y/4lVUnMzpYAb2Z
QnCqSCGtpr+jukJatQgiL03aoal4pfxaXnjI516U06/KzsMIlZHDannjCpowmaY1
abKpIKwqd27JVHRPJpHffs/R/3DsGje2fF803tf1Dczjb/QbVQDXAVuH3uxYmZdq
DzZc8oagqJnkk0HC+UVaTIAH4A6XLeK/S2argIsDtfANhbs2TDExtQDVm8iKk2AM
bQf08rq1civt12mQaUDd6QsdxGq/Kc7yKd3+JTMmVFBRbQAcAFtyK7Mi1D/+DWsD
61iPcJ+FrvV9WQWvGwuNBYglpfRRZec=
-----END CERTIFICATE-----
Generated at Fri Dec 12 10:27:43 2025 by rpki-client