This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/829866E000DC11F1A19753E3DAE4EC9C.roa
File:                     829866E000DC11F1A19753E3DAE4EC9C.roa (raw, json)
Hash identifier:          1HS6F0RZVZuMJqKjNl+DcgCBA0WzymZY7YOLiv7Ko0c=
Subject key identifier:   08:26:B5:90:11:82:83:96:96:B5:B9:88:CD:31:9F:C4:15:65:A3:10
Certificate issuer:       /CN=F36FC6C8AF/serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
Certificate serial:       0233
Authority key identifier: 25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/829866E000DC11F1A19753E3DAE4EC9C.roa
Signing time:             Tue 03 Feb 2026 08:44:11 +0000
ROA not before:           Tue 03 Feb 2026 08:44:06 +0000
ROA not after:            Sun 03 Feb 2036 08:44:06 +0000
asID:                     37680
IP address blocks:        2c0f:f9a8:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC6C8AF, serialNumber=2511BAD4078D4672ACF4324299218CE4855D039D
        Validity
            Not Before: Feb  3 08:44:06 2026 GMT
            Not After : Feb  3 08:44:06 2036 GMT
        Subject: CN=6981b55b-93eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ab:a5:4b:2b:90:8e:50:c9:9f:76:38:78:1e:
                    3c:8c:95:b7:10:81:7a:01:13:35:f4:bf:5d:01:bb:
                    eb:f5:68:90:cc:5c:26:bb:f8:e7:dc:6f:38:28:6f:
                    49:72:52:72:81:9f:25:e3:07:1f:d2:7b:73:4f:aa:
                    83:d3:be:c6:79:9d:47:25:a3:42:fc:12:8e:17:72:
                    65:d8:c9:32:bd:75:f9:79:5f:12:97:11:5a:07:4a:
                    56:72:12:7e:fd:9c:f4:d5:e8:b1:06:75:43:99:08:
                    d2:6e:4c:21:e5:89:71:a5:39:14:ad:eb:0a:3f:ae:
                    b7:8b:74:7c:85:1d:fc:18:c2:53:ef:59:52:54:06:
                    dd:58:f9:a9:28:1e:63:fc:2b:6e:c5:a5:c0:48:9d:
                    f7:b1:57:75:b7:b4:64:24:7b:0d:95:f7:f1:59:85:
                    d8:a0:21:25:24:7a:4b:58:a2:18:0c:44:e8:8c:a7:
                    e6:fb:da:6b:37:a4:e5:55:3c:b8:83:a9:24:15:f4:
                    05:47:0b:15:fc:b4:a5:08:fe:99:b5:71:54:59:4b:
                    46:d0:09:05:93:61:11:30:98:1f:a5:43:5a:76:ae:
                    a3:48:4f:e2:7a:83:75:0a:0d:f1:1f:50:08:9c:0f:
                    26:7c:e8:9d:7c:19:a6:4e:bf:b4:a5:c0:83:23:8e:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:26:B5:90:11:82:83:96:96:B5:B9:88:CD:31:9F:C4:15:65:A3:10
            X509v3 Authority Key Identifier:
                keyid:25:11:BA:D4:07:8D:46:72:AC:F4:32:42:99:21:8C:E4:85:5D:03:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/JRG61AeNRnKs9DJCmSGM5IVdA50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JRG61AeNRnKs9DJCmSGM5IVdA50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/D37D2DA070E311EF84610147762E951A/829866E000DC11F1A19753E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f9a8:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:cc:e2:fd:73:90:1e:12:90:92:18:b7:41:e2:58:d9:39:09:
         db:60:54:11:69:5e:87:ec:d3:00:51:2a:f9:d7:29:d2:85:59:
         6b:55:93:52:e1:6d:f4:a3:9c:75:d4:93:12:cc:95:ad:2e:53:
         d4:26:2c:8c:60:0b:d6:45:8c:5b:87:47:35:3b:b5:33:57:0d:
         67:8c:b6:ba:e4:cd:1d:31:f8:9b:5e:33:fc:80:e9:83:3b:77:
         a8:52:f2:3f:09:94:8d:0e:53:68:22:5d:9e:53:a3:70:88:48:
         71:d3:f9:4f:55:d6:8d:c1:76:4a:6c:11:8a:cc:6b:88:a8:c8:
         c3:94:87:c2:e4:09:97:62:e9:24:f6:a4:2a:96:6f:40:0b:50:
         21:5a:c5:c1:59:b4:c8:7f:db:59:f7:b8:45:d2:1c:43:d7:fa:
         0a:dd:17:20:fb:f7:7a:1e:23:47:38:52:f5:cd:4b:29:2b:ca:
         d5:4f:fc:dc:d6:c4:a1:de:e0:91:d7:82:4e:0a:95:d5:e2:09:
         aa:aa:77:54:b5:cc:bf:13:99:6d:8f:02:e7:85:08:17:38:7c:
         bd:6e:a1:c6:fc:a4:35:56:2a:e0:51:1d:a2:ac:7d:2c:4b:2f:
         8e:2b:39:df:2a:8b:b3:8b:5d:53:72:84:12:09:6b:62:bb:a7:
         25:9e:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:55 2026 by rpki-client