This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
File:                     DF36CBCABEF711F08A36B0CADAE4EC9C.roa (raw, json)
Hash identifier:          AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=
Subject key identifier:   89:83:66:72:27:8F:05:EC:AC:8A:2B:0C:4B:61:D7:BE:E2:C6:10:6F
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       06DB
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 12:13:46 +0000
ROA not before:           Tue 11 Nov 2025 12:13:42 +0000
ROA not after:            Sun 01 Nov 2026 12:13:42 +0000
asID:                     398465
IP address blocks:        196.44.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Nov 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Nov 11 12:13:42 2025 GMT
            Not After : Nov  1 12:13:42 2026 GMT
        Subject: CN=6913287a-d354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:28:a1:cd:9d:7d:92:f7:4a:0c:7a:95:79:
                    a1:b2:89:2a:d0:a8:07:11:75:ca:e6:a0:99:aa:95:
                    c3:6d:46:15:5c:89:2d:21:34:db:d3:0f:81:02:40:
                    10:51:2b:06:23:61:4f:33:97:01:47:97:8c:6f:e1:
                    d1:9b:59:b3:56:d5:95:4c:e5:04:12:0a:0b:ee:44:
                    75:5a:89:57:b0:4a:10:8a:4a:6b:7a:f7:08:e1:fb:
                    a3:52:9a:ed:99:47:63:90:15:89:1d:25:cf:40:a6:
                    57:b5:96:e4:01:0e:0e:47:ef:d9:31:6b:a2:66:40:
                    98:51:c4:f0:49:62:10:87:4a:6c:e3:4b:1b:91:c1:
                    a4:53:25:11:33:a6:c0:15:b5:cd:0f:1e:3d:ad:e2:
                    f3:3b:e9:ad:09:1b:52:30:69:3a:93:79:32:be:08:
                    9b:7d:ee:13:9d:62:a4:f3:52:0c:c8:87:cd:8a:e5:
                    f5:88:ad:19:93:42:be:27:c4:4b:db:3f:78:31:1e:
                    2f:4c:43:c9:e7:4e:6d:b4:03:6e:92:73:68:4f:62:
                    40:28:41:99:37:b7:84:f0:32:7a:12:dd:a5:6d:2b:
                    fe:40:d2:f8:e0:71:d6:db:da:a9:a5:7d:46:67:87:
                    67:e5:f4:0a:09:28:d8:07:00:31:71:0c:81:92:d4:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:83:66:72:27:8F:05:EC:AC:8A:2B:0C:4B:61:D7:BE:E2:C6:10:6F
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/DF36CBCABEF711F08A36B0CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:00:c0:cb:3e:be:e6:32:d7:c2:ce:5f:87:0c:3e:bc:58:
         11:1b:37:95:26:5a:74:22:74:c6:c3:0f:fd:8e:82:98:3e:1c:
         27:09:fc:f6:31:3b:d6:57:86:5c:18:6d:bf:e8:bc:d4:03:67:
         fa:63:74:e5:2a:88:65:d8:52:3f:d4:2e:87:17:59:29:b0:24:
         f0:21:d7:8f:8d:4b:ae:67:28:77:9d:93:75:4b:97:7a:d6:10:
         52:9f:31:26:75:69:20:da:fe:33:a4:ca:e2:e9:9f:54:df:41:
         3a:3b:9b:fd:d8:44:7a:b6:c0:c4:e0:6b:87:e7:96:55:c7:8c:
         ab:43:40:8f:87:e9:82:18:ec:0e:3a:73:ef:44:67:4a:7f:5d:
         9c:cd:33:bc:a3:da:17:5d:42:db:d3:03:0d:62:ee:1f:ad:14:
         5a:c2:a7:4e:8b:bf:ff:8b:8f:95:c4:64:1a:09:d4:7a:8a:ec:
         2c:28:53:ac:95:fd:ae:f1:ed:d6:63:a4:33:b2:25:87:c5:65:
         6b:90:a9:14:cc:02:34:e6:2e:50:db:1b:72:16:88:80:2f:16:
         4a:47:02:b4:14:e3:0d:8b:0d:25:15:81:16:bb:3a:f7:fe:19:
         14:8b:14:22:08:98:43:05:bc:c7:55:ba:11:44:79:6e:a6:4e:
         5b:2f:46:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBtswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNTExMTExMjEzNDJaFw0yNjExMDExMjEzNDJaMBgxFjAU
BgNVBAMTDTY5MTMyODdhLWQzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfsSihzZ19kvdKDHqVeaGyiSrQqAcRdcrmoJmqlcNtRhVciS0hNNvTD4EC
QBBRKwYjYU8zlwFHl4xv4dGbWbNW1ZVM5QQSCgvuRHVaiVewShCKSmt69wjh+6NS
mu2ZR2OQFYkdJc9Aple1luQBDg5H79kxa6JmQJhRxPBJYhCHSmzjSxuRwaRTJREz
psAVtc0PHj2t4vM76a0JG1IwaTqTeTK+CJt97hOdYqTzUgzIh82K5fWIrRmTQr4n
xEvbP3gxHi9MQ8nnTm20A26Sc2hPYkAoQZk3t4TwMnoS3aVtK/5A0vjgcdbb2qml
fUZnh2fl9AoJKNgHADFxDIGS1OijAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiYNm
ciePBeysiisMS2HXvuLGEG8wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4
QTAxNENFL0RGMzZDQkNBQkVGNzExRjA4QTM2QjBDQURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADELH4wDQYJKoZIhvcNAQEL
BQADggEBAJCNAMDLPr7mMtfCzl+HDD68WBEbN5UmWnQidMbDD/2Ogpg+HCcJ/PYx
O9ZXhlwYbb/ovNQDZ/pjdOUqiGXYUj/ULocXWSmwJPAh14+NS65nKHedk3VLl3rW
EFKfMSZ1aSDa/jOkyuLpn1TfQTo7m/3YRHq2wMTga4fnllXHjKtDQI+H6YIY7A46
c+9EZ0p/XZzNM7yj2hddQtvTAw1i7h+tFFrCp06Lv/+Lj5XEZBoJ1HqK7CwoU6yV
/a7x7dZjpDOyJYfFZWuQqRTMAjTmLlDbG3IWiIAvFkpHArQU4w2LDSUVgRa7Ovf+
GRSLFCIImEMFvMdVuhFEeW6mTlsvRog=
-----END CERTIFICATE-----
Generated at Sun Nov 23 05:20:22 2025 by rpki-client