This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa
File:                     B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa (raw, json)
Hash identifier:          +mmFwnc73ilgRHTfnv5GGjohhpC1WWGRkLfhPedgtjk=
Subject key identifier:   2E:6D:81:38:F0:E8:D6:92:60:ED:39:11:CC:F8:EE:A8:9B:19:F0:5F
Certificate issuer:       /CN=F3680B36AF/serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
Certificate serial:       34
Authority key identifier: 53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 08:44:19 +0000
ROA not before:           Thu 29 Jan 2026 08:44:14 +0000
ROA not after:            Wed 01 Jan 2031 08:44:14 +0000
asID:                     36926
IP address blocks:        2c0f:e9c8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680B36AF, serialNumber=53C1E6D49FD5A64E7B6001F22E3FA42C70DBA34E
        Validity
            Not Before: Jan 29 08:44:14 2026 GMT
            Not After : Jan  1 08:44:14 2031 GMT
        Subject: CN=697b1de3-2104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:35:86:de:40:22:66:34:71:c3:29:d4:65:
                    23:23:85:20:be:dc:1f:e2:7a:c2:eb:0a:46:34:bb:
                    44:46:69:00:e0:54:44:13:b7:c6:b9:e0:30:60:0b:
                    90:18:86:88:22:1c:83:c1:bc:f9:4c:97:55:3c:3d:
                    e8:3f:58:63:ea:a1:c1:62:94:4a:36:1f:a2:fa:cf:
                    ac:ec:eb:c0:b0:8d:3d:e1:72:99:71:a3:5c:80:c0:
                    72:0f:45:70:d4:11:f9:95:fb:ce:bd:29:67:28:a8:
                    0a:c2:5d:cb:de:12:c0:66:ae:ba:46:1e:a6:d2:d6:
                    32:eb:19:fa:c3:5a:2a:37:b1:db:d4:4d:dc:00:69:
                    b2:e2:3b:44:fb:f7:29:33:c6:c9:60:db:b0:8b:7d:
                    47:11:42:26:5f:5a:45:57:87:1d:ca:63:ad:83:33:
                    36:f0:58:5f:4a:c8:fb:7d:3c:62:76:51:67:45:36:
                    9a:dd:bd:b8:3d:8f:40:8b:5a:e1:79:38:0f:dd:a5:
                    3e:01:d2:01:d7:7f:dd:7b:cd:d1:cd:f1:7c:1c:d0:
                    6f:ef:0b:cc:ed:b1:39:54:35:ae:61:81:80:df:60:
                    9a:36:4c:5f:b7:e7:21:cb:58:90:cb:c0:b8:f1:d8:
                    45:b2:29:4c:de:3e:0c:77:b1:f6:11:22:0a:8d:1b:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:81:38:F0:E8:D6:92:60:ED:39:11:CC:F8:EE:A8:9B:19:F0:5F
            X509v3 Authority Key Identifier:
                keyid:53:C1:E6:D4:9F:D5:A6:4E:7B:60:01:F2:2E:3F:A4:2C:70:DB:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/U8Hm1J_Vpk57YAHyLj-kLHDbo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U8Hm1J_Vpk57YAHyLj-kLHDbo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680B36/F5EDFAE6DFD611F09ABD8DD4DAE4EC9C/B3530534FCEE11F0B6A0D0B9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e9c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:55:98:17:88:8a:fc:d8:a2:f3:e0:f9:c6:8a:d4:06:d5:
         25:aa:4e:c5:cc:b1:82:fb:79:a1:4d:ee:6d:9f:91:ef:eb:73:
         aa:f7:af:11:14:c9:b2:dc:81:9c:66:3e:63:06:9b:83:0d:a4:
         88:be:f3:83:07:d5:a4:35:8b:ab:87:7f:7a:f7:e1:f0:16:21:
         56:eb:d8:ea:d2:95:4c:ab:c0:ae:66:e9:49:1e:fc:ea:37:61:
         52:24:e7:da:fe:5a:43:b7:7b:e8:19:fd:ab:02:4a:49:6e:b0:
         20:d5:17:f8:55:92:f5:d7:27:e1:bb:2a:29:7a:13:f8:06:e2:
         2f:08:76:17:30:77:bf:dc:1c:9b:81:38:5e:ca:be:7a:6e:7b:
         50:0e:d6:8b:74:be:bc:f4:00:43:20:61:85:81:df:51:26:5f:
         ff:7f:84:91:5c:11:dd:97:64:2b:af:56:bc:1b:0e:df:af:0e:
         c3:bd:f8:9f:f1:dc:53:e2:02:42:29:66:ed:3e:29:f6:8e:4a:
         25:a6:48:43:34:ea:07:77:a2:c8:04:a3:5f:33:d7:94:05:77:
         92:5d:9c:84:96:e8:2e:4e:38:f0:44:81:93:a5:87:c0:5a:7c:
         eb:f1:d7:c3:f2:90:fa:a6:e9:19:ab:9b:1a:cd:79:0d:df:93:
         fd:35:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:17 2026 by rpki-client