This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/B5869B0AC3C211F09F106C8BDAE4EC9C.roa
File:                     B5869B0AC3C211F09F106C8BDAE4EC9C.roa (raw, json)
Hash identifier:          mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=
Subject key identifier:   DC:91:FB:11:4D:F5:C7:49:AE:4C:48:31:90:A0:55:08:87:B3:20:C8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       09B7
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/B5869B0AC3C211F09F106C8BDAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 14:35:49 +0000
ROA not before:           Mon 17 Nov 2025 14:35:44 +0000
ROA not after:            Sat 17 Nov 2035 14:35:44 +0000
asID:                     327733
IP address blocks:        2c0f:ea00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 01:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Nov 17 14:35:44 2025 GMT
            Not After : Nov 17 14:35:44 2035 GMT
        Subject: CN=691b32c5-403c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:97:0d:46:fa:4e:da:80:cc:b2:d7:09:f2:
                    0f:2e:a8:b1:17:4a:dc:d4:bc:8c:52:26:bc:1a:5d:
                    2a:db:80:41:89:18:c5:50:99:9b:fe:cd:06:8c:b8:
                    23:76:cc:fa:ed:46:8a:d4:96:16:3b:cb:08:73:77:
                    80:16:7a:23:d8:7b:7b:1a:4e:49:ad:ca:87:b7:dd:
                    bb:6e:38:73:99:67:43:e4:8f:79:66:39:86:cb:b3:
                    09:53:c4:3f:88:19:c0:18:58:54:5e:61:2b:51:47:
                    22:e2:d2:5c:5a:f5:7c:90:da:67:ea:cb:65:84:b3:
                    0b:ca:47:c3:c1:e3:64:cb:0b:b9:57:53:6d:1d:c0:
                    a3:6f:5c:e0:c7:8a:81:49:21:77:ee:c8:77:17:d7:
                    ba:32:03:20:ce:62:f5:ce:aa:63:30:7a:d5:1d:b3:
                    fe:61:e1:78:d6:89:cf:8a:08:e4:6e:4a:67:13:c6:
                    3d:0f:f4:0f:fe:57:dd:fa:14:fa:cb:c8:f2:1e:73:
                    13:60:30:b2:61:0e:2c:bc:50:33:bc:7b:7c:3a:c9:
                    ff:ab:67:04:db:eb:e4:30:a5:63:4d:6b:ae:2d:48:
                    b4:a4:a9:c9:48:d1:53:97:16:6a:b9:e0:a1:7c:83:
                    fc:65:81:2e:7c:6e:2e:81:f0:43:af:2c:44:72:76:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:FB:11:4D:F5:C7:49:AE:4C:48:31:90:A0:55:08:87:B3:20:C8
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/B5869B0AC3C211F09F106C8BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ea00:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:2f:f7:90:db:30:76:6d:75:33:65:c0:a8:01:b8:03:06:41:
         9b:27:23:21:1d:ad:6f:ae:d2:dc:73:cb:7d:dc:7f:f1:aa:c9:
         1f:42:36:51:37:ee:31:7b:6b:68:58:61:61:b3:ad:ed:fe:62:
         82:80:62:85:5a:0f:a7:5c:68:85:22:93:c4:1d:1a:45:a0:51:
         ac:b6:a8:cb:6e:90:24:51:bf:10:8b:94:43:c8:6e:c2:fb:92:
         aa:fd:eb:01:23:82:3c:7c:cf:d6:19:f5:9f:6d:84:36:6a:20:
         c8:bc:dd:bd:c1:0a:e7:8a:57:96:1e:b5:3b:90:88:68:d3:17:
         e5:1f:0e:21:c7:ed:ec:b8:6a:dd:8d:bf:61:c3:7b:95:75:a7:
         ac:ff:56:ef:2e:5e:2f:68:69:13:08:58:b6:73:27:d7:9e:bc:
         1d:93:01:0b:09:13:8b:f1:1a:42:e8:a0:b4:22:b6:4c:dd:51:
         72:fb:d9:b8:26:c7:ef:5a:23:0d:a7:21:8d:66:a6:f6:61:48:
         03:e9:90:b2:6e:44:a2:32:3b:af:33:5f:9e:36:fc:f3:9f:36:
         a6:74:3f:8c:39:e6:87:64:e7:9d:58:b4:ad:92:38:25:6b:bc:
         06:b9:f6:60:29:c2:62:69:35:45:a9:c5:4c:94:bd:1c:54:26:
         0c:60:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 01:44:11 2025 by rpki-client