This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa
File:                     1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa (raw, json)
Hash identifier:          njBEAYyeE13L7hwKuylMPnhFqWs8iIjgMKwO4UOalDA=
Subject key identifier:   C5:C1:DE:73:0C:23:2B:97:20:56:59:E0:9F:FD:F6:CC:01:74:CE:E8
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       044E
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 13:16:40 +0000
ROA not before:           Wed 07 Jan 2026 13:16:35 +0000
ROA not after:            Mon 07 Jan 2036 13:16:35 +0000
asID:                     202023
IP address blocks:        2c0f:3781:2220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Jan  7 13:16:35 2026 GMT
            Not After : Jan  7 13:16:35 2036 GMT
        Subject: CN=695e5cb8-2ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:cc:8e:f5:6b:ea:72:6d:4d:0d:5a:e9:10:
                    c2:ef:3e:b6:5f:05:49:c1:c5:1a:94:fa:dc:be:c7:
                    bf:79:b2:52:3d:13:a8:a1:04:cb:ee:b4:1f:15:d0:
                    50:14:ee:b4:1c:28:11:b2:f5:48:02:06:bc:e1:1e:
                    ca:04:42:78:4b:8b:63:87:ce:85:13:1f:8b:fc:eb:
                    a6:65:54:70:96:66:ef:93:c2:56:ed:5b:b0:1d:6f:
                    66:90:80:2c:47:34:16:82:fe:f3:47:d3:5c:99:77:
                    9f:99:8d:72:ce:4e:3a:a4:1b:92:39:e8:1d:9f:0b:
                    56:b4:c5:e4:90:2e:bb:df:64:bf:f8:17:e5:db:5a:
                    db:14:78:54:fe:f3:44:33:ed:ae:0f:ac:d5:fd:36:
                    17:88:cc:ee:f9:cd:2e:38:b4:f2:5f:ca:09:12:ca:
                    f7:87:65:a8:85:a7:2b:3c:40:d5:0c:00:06:f3:21:
                    b8:73:30:3b:8d:77:ce:a5:88:7d:1e:dc:28:e4:fa:
                    ae:e3:f9:23:5a:ad:ce:67:8e:ae:f5:7e:f1:86:1b:
                    14:00:52:19:39:ae:da:45:2b:f0:27:71:54:e9:74:
                    ee:db:80:f9:ce:84:1e:ae:65:d9:90:d8:3a:a9:06:
                    72:94:b9:09:4a:b9:f1:f8:d1:fa:73:ea:cf:26:c5:
                    a7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C1:DE:73:0C:23:2B:97:20:56:59:E0:9F:FD:F6:CC:01:74:CE:E8
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3781:2220::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:33:26:da:99:bc:26:3e:f0:cd:2d:fe:60:f1:ac:64:0d:
         69:b1:8e:63:8f:41:7b:68:a8:0f:73:f5:f7:da:2c:dd:d1:f8:
         a1:aa:ae:9a:58:8e:46:d1:5c:d1:e4:69:61:0d:4e:8e:db:27:
         6c:d8:ad:f0:13:53:a9:f0:54:05:d0:cb:df:cf:12:1d:cf:d5:
         61:04:a4:3f:af:1f:a9:74:49:0a:06:8c:8a:11:9d:60:48:9d:
         dd:1e:79:20:1a:11:8d:cc:c6:01:99:1f:48:48:92:5a:ea:4c:
         0c:95:4c:6d:0d:28:fb:41:95:05:d6:4a:0c:e2:6b:1a:b1:1c:
         46:91:8e:5b:e8:88:bb:36:33:4b:53:f7:33:9a:96:10:ff:7e:
         c4:e8:eb:8c:fd:4c:a9:d8:eb:0a:0c:c0:92:e3:ca:6e:ab:1c:
         4a:0a:09:1b:34:4b:15:39:a5:df:d8:30:a4:35:f7:9b:c8:94:
         53:db:ba:e8:83:b0:ab:ca:18:9f:4f:c7:d3:86:ce:fb:d1:37:
         6e:93:72:32:96:5c:ae:ca:a6:22:03:8e:8f:d2:2b:bd:7a:0b:
         97:34:8a:51:89:0b:e7:e5:93:8f:f8:08:23:73:c6:1e:d2:a4:
         08:66:33:94:9e:3e:98:8a:f5:d1:94:10:46:a4:5f:2b:55:a0:
         27:62:a0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:54 2026 by rpki-client