This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/E6F5F3EEFD0A11F091407DE4DAE4EC9C.roa
File:                     E6F5F3EEFD0A11F091407DE4DAE4EC9C.roa (raw, json)
Hash identifier:          Ay/eaGIY/MRLvugExT0hgGdZK6KZS6LU5kgZ/HIoaMw=
Subject key identifier:   F9:E1:35:CA:5A:AE:D6:65:60:CC:91:7A:46:74:63:E1:62:94:2F:75
Certificate issuer:       /CN=F36A1FBCAF/serialNumber=D85FE68144BD630368581F9711215A724556D4D4
Certificate serial:       25
Authority key identifier: D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/E6F5F3EEFD0A11F091407DE4DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 12:06:12 +0000
ROA not before:           Fri 30 Jan 2026 12:06:06 +0000
ROA not after:            Wed 31 Dec 2036 12:06:06 +0000
asID:                     37662
IP address blocks:        2c0f:3fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 06:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1FBCAF, serialNumber=D85FE68144BD630368581F9711215A724556D4D4
        Validity
            Not Before: Jan 30 12:06:06 2026 GMT
            Not After : Dec 31 12:06:06 2036 GMT
        Subject: CN=697b4d34-c5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:c9:4b:35:98:f5:ac:42:99:1a:76:a5:7b:
                    ad:2f:74:04:11:e4:c1:57:00:93:aa:4a:2e:40:70:
                    30:a8:3b:e1:aa:9d:eb:36:1f:3e:c4:70:19:0b:42:
                    64:ba:21:3b:1f:f9:ae:70:25:ad:19:cf:40:39:cf:
                    ce:c9:87:51:ea:1d:68:a5:fb:d1:56:35:0f:a8:06:
                    69:0e:38:8c:d2:5d:bd:88:6b:f1:13:c6:c6:03:5e:
                    76:67:05:8e:13:85:04:d8:bb:f5:72:cd:c7:50:dd:
                    2f:40:fd:20:22:e0:78:c8:f0:29:3e:5f:37:62:2e:
                    bb:11:f8:0f:7f:da:22:74:31:66:97:ff:56:37:28:
                    c5:ed:3d:f6:62:e7:fa:4b:a5:87:c7:41:3e:50:10:
                    3b:87:22:f6:21:01:d4:99:05:61:d9:eb:81:5b:96:
                    08:3d:4f:86:24:0e:93:5d:a0:64:a4:27:37:9d:b3:
                    3a:24:e8:3c:c6:83:a0:c5:d9:b6:1b:36:c6:10:e2:
                    53:5a:20:34:81:6c:17:ae:2f:fc:c2:ef:d9:de:a0:
                    3d:c4:81:3d:b9:f1:a3:a2:b1:ad:35:ad:b8:a2:aa:
                    85:e4:44:b8:f8:40:dc:40:36:b9:1f:39:d0:8c:15:
                    20:60:0e:f1:f0:2b:2e:68:d6:9d:67:60:dd:f2:47:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:35:CA:5A:AE:D6:65:60:CC:91:7A:46:74:63:E1:62:94:2F:75
            X509v3 Authority Key Identifier:
                keyid:D8:5F:E6:81:44:BD:63:03:68:58:1F:97:11:21:5A:72:45:56:D4:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/2F_mgUS9YwNoWB-XESFackVW1NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2F_mgUS9YwNoWB-XESFackVW1NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1FBC/D9D9581CECA811F0BDD8D2C3DAE4EC9C/E6F5F3EEFD0A11F091407DE4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:52:d1:d6:1c:06:d0:9b:e9:3b:7e:23:27:23:d8:ec:b0:
         23:8c:9b:8b:a5:84:5b:56:46:4a:2b:38:3b:3d:98:64:46:69:
         48:4b:76:1e:12:37:65:9b:9f:42:57:e7:e1:26:7c:ec:e2:42:
         7d:58:9c:6e:b5:5a:41:5a:b1:fd:f8:b6:84:2b:63:1d:5a:7a:
         0d:e6:73:94:47:9c:80:e8:9d:9e:d8:17:c3:07:3a:ba:1f:f6:
         33:75:29:ec:e0:e6:42:63:e3:20:f2:8a:3f:45:03:17:74:91:
         fb:0f:ad:a1:bc:73:9f:82:2a:01:b1:d8:09:5f:39:89:5d:60:
         24:92:cf:6e:99:13:70:45:3e:6f:49:c6:c1:70:35:60:f7:ce:
         85:69:0d:05:3b:86:29:ee:57:a1:23:36:2e:04:63:47:85:ac:
         50:79:52:34:9c:ff:32:60:51:07:e2:ca:90:4c:ac:f9:4e:de:
         6b:9b:a1:67:6f:db:f0:77:da:c4:3d:f0:3b:13:26:9d:1d:e4:
         01:25:5b:0e:5e:ee:18:6c:a9:c0:42:86:ad:4b:67:29:c4:61:
         98:5f:f9:8a:62:29:68:db:72:b7:24:a2:15:6e:11:b0:b2:79:
         e2:b2:54:e6:38:70:1d:d5:97:12:d8:6e:57:8b:c7:ca:72:40:
         80:76:92:14
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
MUZCQ0FGMTEwLwYDVQQFEyhEODVGRTY4MTQ0QkQ2MzAzNjg1ODFGOTcxMTIxNUE3
MjQ1NTZENEQ0MB4XDTI2MDEzMDEyMDYwNloXDTM2MTIzMTEyMDYwNlowGDEWMBQG
A1UEAxMNNjk3YjRkMzQtYzVhNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzIyUs1mPWsQpkadqV7rS90BBHkwVcAk6pKLkBwMKg74aqd6zYfPsRwGQtC
ZLohOx/5rnAlrRnPQDnPzsmHUeodaKX70VY1D6gGaQ44jNJdvYhr8RPGxgNedmcF
jhOFBNi79XLNx1DdL0D9ICLgeMjwKT5fN2IuuxH4D3/aInQxZpf/Vjcoxe099mLn
+kulh8dBPlAQO4ci9iEB1JkFYdnrgVuWCD1PhiQOk12gZKQnN52zOiToPMaDoMXZ
ths2xhDiU1ogNIFsF64v/MLv2d6gPcSBPbnxo6KxrTWtuKKqheREuPhA3EA2uR85
0IwVIGAO8fArLmjWnWdg3fJHGC8CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT54TXK
Wq7WZWDMkXpGdGPhYpQvdTAfBgNVHSMEGDAWgBTYX+aBRL1jA2hYH5cRIVpyRVbU
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTFGQkMvRDlEOTU4MUNFQ0E4MTFGMEJERDhEMkMzREFFNEVDOUMvMkZfbWdV
UzlZd05vV0ItWEVTRmFja1ZXMU5RLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMkZfbWdVUzlZd05vV0ItWEVTRmFja1ZXMU5RLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTFGQkMvRDlEOTU4MUNFQ0E4MTFGMEJERDhEMkMzREFF
NEVDOUMvRTZGNUYzRUVGRDBBMTFGMDkxNDA3REU0REFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwPP8AwDQYJKoZIhvcNAQEL
BQADggEBAIOmUtHWHAbQm+k7fiMnI9jssCOMm4ulhFtWRkorODs9mGRGaUhLdh4S
N2Wbn0JX5+EmfOziQn1YnG61WkFasf34toQrYx1aeg3mc5RHnIDonZ7YF8MHOrof
9jN1Kezg5kJj4yDyij9FAxd0kfsPraG8c5+CKgGx2AlfOYldYCSSz26ZE3BFPm9J
xsFwNWD3zoVpDQU7hinuV6EjNi4EY0eFrFB5UjSc/zJgUQfiypBMrPlO3muboWdv
2/B32sQ98DsTJp0d5AElWw5e7hhsqcBChq1LZynEYZhf+YpiKWjbcrckohVuEbCy
eeKyVOY4cB3VlxLYbleLx8pyQIB2khQ=
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:12:36 2026 by rpki-client