This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/65F327B8C3C011F0ABEF947BDAE4EC9C.roa
File:                     65F327B8C3C011F0ABEF947BDAE4EC9C.roa (raw, json)
Hash identifier:          ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=
Subject key identifier:   EF:56:16:68:15:21:3F:65:A2:B5:13:8D:03:C5:AE:29:C2:51:B5:D6
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       09B2
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/65F327B8C3C011F0ABEF947BDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 14:19:16 +0000
ROA not before:           Mon 17 Nov 2025 14:19:11 +0000
ROA not after:            Sat 17 Nov 2035 14:19:11 +0000
asID:                     327733
IP address blocks:        2c0f:ea00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2482 (0x9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Nov 17 14:19:11 2025 GMT
            Not After : Nov 17 14:19:11 2035 GMT
        Subject: CN=691b2ee4-c51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:ed:8f:98:87:a3:14:01:bb:76:b1:50:79:
                    c8:4d:13:84:f7:f1:e8:3b:a3:b2:30:80:30:b0:88:
                    05:b5:c2:35:c4:b6:c2:96:20:cc:cc:c4:16:c9:06:
                    15:c6:a0:7d:3a:cf:55:95:7e:c7:5e:f5:2a:ed:1c:
                    f7:0f:95:1d:f6:f2:b7:c7:26:e3:fb:4f:1a:6e:cf:
                    4e:cd:06:a2:76:08:0d:05:96:ac:8d:3b:82:e8:00:
                    df:e6:fa:f0:75:cd:07:62:d1:e9:7c:7e:f7:29:8c:
                    35:65:88:e0:84:1e:fe:d3:07:f7:9f:06:ae:85:16:
                    91:81:81:c5:10:ba:e8:93:55:ef:03:f2:bf:e1:76:
                    65:f2:eb:8a:0c:62:95:de:2c:d1:e8:64:1a:5d:3e:
                    0f:d1:59:0f:f5:4a:5c:65:33:e6:d7:c9:b1:99:49:
                    3e:61:aa:9f:9d:23:6e:e7:fb:ce:c4:54:7f:ef:aa:
                    5b:c9:06:2d:73:72:e9:6f:db:90:18:24:66:a4:ea:
                    8e:3a:fa:3e:b6:3a:ac:ce:86:92:8c:3a:a3:46:29:
                    7e:d6:49:01:03:bb:c6:02:14:ac:63:f9:1d:d8:29:
                    73:bf:33:31:bb:08:69:60:42:7d:31:b8:07:5a:f9:
                    d3:8a:71:65:c3:99:5d:c3:9f:dc:85:0b:0b:fb:24:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:16:68:15:21:3F:65:A2:B5:13:8D:03:C5:AE:29:C2:51:B5:D6
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/65F327B8C3C011F0ABEF947BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ea00:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:dc:ea:50:b1:fa:10:6c:a8:48:c2:d1:a1:a2:05:e3:f4:
         b1:58:39:aa:92:42:c6:15:89:c3:99:ee:7b:86:3d:ec:71:33:
         83:f7:6f:ce:fe:73:60:06:df:b9:b0:f3:6f:e0:e8:cc:d1:75:
         b3:89:5e:bc:76:23:53:db:59:eb:fb:3a:47:4a:07:20:3c:46:
         2d:fd:2c:a8:ef:55:c2:0b:78:24:4b:cf:29:a0:b4:dd:db:5e:
         c4:84:21:df:65:78:5d:a0:21:a7:d2:de:40:92:72:08:4f:d1:
         28:2c:be:39:3e:df:ff:85:07:6e:68:b5:13:cb:fc:4d:a5:d4:
         e4:e2:d6:d3:08:fa:31:45:25:cd:19:19:32:f8:e1:da:96:72:
         02:af:2a:88:cf:81:e3:00:fa:2b:b1:29:dc:5e:e0:91:b8:e2:
         8d:02:87:11:c9:aa:f0:9b:67:8a:9d:15:55:9a:f8:80:6e:f0:
         54:fb:65:d4:96:f1:1b:a2:55:04:bb:99:fd:09:36:de:1d:5a:
         e7:f2:20:09:08:d8:26:a8:18:48:14:9f:93:62:b7:5f:16:2a:
         79:f7:3e:5c:d4:a3:c9:81:d2:3a:07:fa:0c:41:45:65:c6:03:
         96:06:d1:96:88:f5:77:54:17:77:22:89:24:72:84:b1:f6:8c:
         30:ae:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:44:08 2025 by rpki-client