This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa
File:                     6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa (raw, json)
Hash identifier:          4C7RxLwmS+HXtTI3Lpt4dwbN1rnFWByFUC0JY7JL8FA=
Subject key identifier:   72:B6:FE:8B:DE:CD:C5:BF:7C:4D:34:69:ED:7E:AA:C8:D0:2A:7D:C2
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       0452
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 13:19:04 +0000
ROA not before:           Wed 07 Jan 2026 13:18:58 +0000
ROA not after:            Mon 07 Jan 2036 13:18:58 +0000
asID:                     202023
IP address blocks:        2c0f:3781:2240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Jan  7 13:18:58 2026 GMT
            Not After : Jan  7 13:18:58 2036 GMT
        Subject: CN=695e5d48-0a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:5c:84:71:53:b6:85:8e:8d:ea:5c:45:90:
                    5f:62:26:0e:45:22:39:7a:9d:c6:f1:e5:07:0a:0b:
                    12:b7:2b:2e:53:ab:e6:3d:6d:c4:88:9a:2a:7b:19:
                    e1:4f:0a:95:bf:b9:0f:d1:7b:6d:79:70:29:13:f4:
                    e8:b4:94:15:36:3b:6a:f3:2c:53:fe:ae:ff:c5:c6:
                    10:b5:1f:f0:cf:74:26:78:47:db:4c:f4:84:0d:78:
                    1a:e7:16:ab:8b:17:77:11:09:98:29:47:12:7c:8c:
                    f8:3d:8f:78:88:53:53:ff:0b:5e:2b:b1:e7:79:4c:
                    4b:92:00:ff:6e:95:dc:88:56:a6:a0:59:16:22:28:
                    dc:c0:34:79:8c:48:f9:f6:aa:61:60:31:63:e4:a5:
                    13:2d:af:75:5f:76:1d:10:cf:75:1c:26:0b:b0:49:
                    c8:3e:a0:39:14:81:4d:09:32:da:21:55:4e:4e:98:
                    f8:2d:c8:af:18:59:eb:f1:8b:ca:bc:d8:37:09:3b:
                    16:62:f3:2b:a1:2d:ae:87:b7:33:b1:48:dd:31:4b:
                    31:cc:07:dd:40:d8:6c:61:c3:0c:e7:22:3a:a3:d0:
                    2a:8b:37:4b:58:84:ea:c4:b1:ed:f0:33:37:35:a7:
                    57:a4:fc:04:e6:2f:af:f4:9c:b1:68:c1:7e:27:48:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B6:FE:8B:DE:CD:C5:BF:7C:4D:34:69:ED:7E:AA:C8:D0:2A:7D:C2
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3781:2240::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:cb:b8:be:8c:53:28:56:3f:d3:2a:5b:8b:4d:03:28:e6:ea:
         d4:21:02:d9:e5:e2:12:6b:6f:df:1d:e3:a9:58:94:3b:e4:9a:
         36:b5:53:45:87:e3:8d:8b:3d:50:d0:c7:9b:21:2c:77:23:e3:
         c0:a6:94:95:8b:56:28:bf:18:f9:0d:d0:80:c3:c8:49:26:5f:
         32:5a:0d:08:3f:1b:fc:7d:07:4c:a2:1a:f5:d2:9a:f6:0b:e5:
         26:cf:c2:5f:23:be:de:6d:bf:2b:07:48:f3:eb:0b:e0:89:39:
         8c:f2:21:41:00:5c:f3:f8:e9:31:92:3f:a4:36:31:f0:48:67:
         bc:32:13:c6:6c:e7:58:a1:d2:9e:3b:52:35:45:c5:d8:39:92:
         cf:63:7f:6b:11:de:4b:39:ec:41:e6:37:c4:fc:e6:e0:aa:ee:
         c6:e9:1a:6b:9e:e5:5c:5b:c5:c0:ac:89:24:c7:cd:34:cd:43:
         8d:90:25:2f:db:82:60:1d:45:3d:a3:0e:02:65:b3:57:a0:a4:
         43:b2:28:42:ef:bc:fd:29:f6:f4:08:80:92:75:64:fb:a5:46:
         6e:dc:f9:8b:df:6f:33:fc:2d:79:e2:56:44:29:3f:80:69:23:
         5c:24:d6:91:34:89:99:58:d6:14:4c:32:69:86:8a:4c:6c:d6:
         45:4f:2c:d7
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyMUFBRjExMC8GA1UEBRMoM0RBM0REQUU0RkQ1NzRCREZBREIyRkU3NTI0RDVE
MzAzNzQxMzUyQzAeFw0yNjAxMDcxMzE4NThaFw0zNjAxMDcxMzE4NThaMBgxFjAU
BgNVBAMTDTY5NWU1ZDQ4LTBhNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwrlyEcVO2hY6N6lxFkF9iJg5FIjl6ncbx5QcKCxK3Ky5Tq+Y9bcSImip7
GeFPCpW/uQ/Re215cCkT9Oi0lBU2O2rzLFP+rv/FxhC1H/DPdCZ4R9tM9IQNeBrn
FquLF3cRCZgpRxJ8jPg9j3iIU1P/C14rsed5TEuSAP9uldyIVqagWRYiKNzANHmM
SPn2qmFgMWPkpRMtr3Vfdh0Qz3UcJguwScg+oDkUgU0JMtohVU5OmPgtyK8YWevx
i8q82DcJOxZi8yuhLa6HtzOxSN0xSzHMB91A2GxhwwznIjqj0CqLN0tYhOrEse3w
Mzc1p1ek/ATmL6/0nLFowX4nSDKpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcrb+
i97Nxb98TTRp7X6qyNAqfcIwHwYDVR0jBBgwFoAUPaPdrk/VdL362y/nUk1dMDdB
NSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMjFBLzJGMTM3M0JFQkNEQTExRURBQ0E1Q0FBRkYxMjIyNDY4L1BhUGRy
a19WZEwzNjJ5X25VazFkTURkQk5Tdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BhUGRya19WZEwzNjJ5X25VazFkTURkQk5Tdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQzMjFBLzJGMTM3M0JFQkNEQTExRURBQ0E1Q0FBRkYx
MjIyNDY4LzZGNDhCQzBBRUJDQjExRjA5NEI2RDRGMERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQsDzeBIkAwDQYJKoZIhvcN
AQELBQADggEBAGfLuL6MUyhWP9MqW4tNAyjm6tQhAtnl4hJrb98d46lYlDvkmja1
U0WH442LPVDQx5shLHcj48CmlJWLVii/GPkN0IDDyEkmXzJaDQg/G/x9B0yiGvXS
mvYL5SbPwl8jvt5tvysHSPPrC+CJOYzyIUEAXPP46TGSP6Q2MfBIZ7wyE8Zs51ih
0p47UjVFxdg5ks9jf2sR3ks57EHmN8T85uCq7sbpGmue5VxbxcCsiSTHzTTNQ42Q
JS/bgmAdRT2jDgJls1egpEOyKELvvP0p9vQIgJJ1ZPulRm7c+YvfbzP8LXniVkQp
P4BpI1wk1pE0iZlY1hRMMmmGikxs1kVPLNc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:29:10 2026 by rpki-client