This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/D2D5989A012611F1AF5A24A3DAE4EC9C.roa
File:                     D2D5989A012611F1AF5A24A3DAE4EC9C.roa (raw, json)
Hash identifier:          b5e3Xr4FElcnG0n1zf+ZSNFE0ma2SCk8L9aDroGv95g=
Subject key identifier:   69:7C:8A:83:40:3A:DB:C9:03:D7:6D:4E:2C:38:CE:3A:37:52:DF:A8
Certificate issuer:       /CN=F36DE5F0AF/serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
Certificate serial:       0348
Authority key identifier: BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/D2D5989A012611F1AF5A24A3DAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 17:36:08 +0000
ROA not before:           Tue 03 Feb 2026 17:36:03 +0000
ROA not after:            Sun 03 Feb 2036 17:36:03 +0000
asID:                     329325
IP address blocks:        2c0f:6cf::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE5F0AF, serialNumber=BA2F5924438729C5C7BA808073761CEC347E3CBA
        Validity
            Not Before: Feb  3 17:36:03 2026 GMT
            Not After : Feb  3 17:36:03 2036 GMT
        Subject: CN=69823208-ca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:44:b3:b0:5f:15:46:5b:b6:3a:3c:73:37:
                    62:7e:64:ae:5b:b0:a4:71:8f:cc:6c:42:bc:eb:26:
                    a5:ab:92:94:74:61:6a:70:a9:5b:0c:38:9c:90:94:
                    cc:1f:f1:06:6c:3a:f3:46:14:b7:53:48:8e:c1:0d:
                    2b:25:d5:a9:42:1e:2e:be:30:58:94:60:42:d7:50:
                    a6:47:a1:6c:c5:6d:3c:ce:2e:f2:43:e3:29:05:5b:
                    f3:41:e5:d8:32:96:48:16:e1:bd:5f:e1:7b:38:b3:
                    b9:96:a9:8b:82:b3:65:3d:09:39:88:7b:4b:6f:c3:
                    80:59:49:7a:4e:db:cf:c2:d5:25:f6:60:83:90:c8:
                    c0:4d:8f:81:25:14:d4:ba:b6:42:20:e7:38:8e:e0:
                    9a:0c:99:03:ec:2b:be:bf:49:f7:31:81:0f:2b:3f:
                    a7:44:3b:60:14:b3:ad:f3:41:23:2b:50:e7:88:0f:
                    fd:e2:70:92:4c:56:42:58:bd:96:27:65:e9:38:3f:
                    41:0d:44:08:8b:d4:3f:58:e3:95:ff:7b:95:5d:3b:
                    df:9d:f1:3b:96:4d:b3:01:c9:25:bc:0f:a0:06:fb:
                    e8:d3:b9:b4:da:df:fc:42:b7:05:8a:52:51:c4:51:
                    c3:8c:4c:8b:a7:b8:34:15:4c:60:83:df:ef:83:c9:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:8A:83:40:3A:DB:C9:03:D7:6D:4E:2C:38:CE:3A:37:52:DF:A8
            X509v3 Authority Key Identifier:
                keyid:BA:2F:59:24:43:87:29:C5:C7:BA:80:80:73:76:1C:EC:34:7E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui9ZJEOHKcXHuoCAc3Yc7DR-PLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE5F0/05A7CBCC892D11EE938A0A154AD9E6FC/D2D5989A012611F1AF5A24A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6cf::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:46:00:58:21:67:fc:9c:a0:c4:7b:98:be:c0:b0:cc:e4:03:
         00:81:36:a4:30:e0:65:94:35:d6:f9:46:56:58:16:3e:05:1c:
         4f:24:86:85:3b:97:94:1b:63:e3:80:9f:19:b1:e5:96:46:08:
         23:2d:49:2d:cc:95:81:26:66:9c:68:d9:05:50:6f:ee:48:67:
         5e:73:d7:22:b0:b2:ac:ea:d2:86:34:0c:45:c6:f9:a2:41:58:
         bd:fa:67:90:cb:84:0e:2d:f9:fa:49:66:3b:f6:ec:1a:18:dd:
         1e:20:b7:94:9b:e0:c6:48:a6:49:b8:b2:bc:70:18:3a:47:f0:
         8d:51:42:39:cf:48:4b:ec:20:2f:73:cd:19:19:98:58:ab:2b:
         39:dd:64:c0:b2:5e:5f:d0:c1:24:d2:d4:48:59:6a:82:87:1e:
         f8:c5:b0:71:5b:a5:0c:55:25:48:61:8a:77:da:7b:ed:8e:f3:
         80:01:69:d2:c0:95:a2:b4:86:36:97:22:46:88:ed:5d:4f:d7:
         ae:7d:80:21:00:f1:8b:ba:c9:24:20:7e:c9:3c:4e:01:49:db:
         14:01:a1:2b:26:e6:b4:21:96:15:8b:89:4a:a5:31:ca:39:2d:
         0b:68:5e:19:3f:da:e4:cc:07:cb:64:b6:b7:13:11:4f:1c:d3:
         4b:79:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:57 2026 by rpki-client