This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/FA23FE86EBC911F098EC42E8DAE4EC9C.roa
File:                     FA23FE86EBC911F098EC42E8DAE4EC9C.roa (raw, json)
Hash identifier:          6WEXWYnxvkmVQEP1jzW/Pz3xmGAn2g9CkuxNT4P4jmg=
Subject key identifier:   9E:2E:02:31:F9:D0:19:C0:C6:C5:27:7D:28:D0:6B:8C:63:8A:BE:27
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       0442
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/FA23FE86EBC911F098EC42E8DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 13:08:38 +0000
ROA not before:           Wed 07 Jan 2026 13:08:31 +0000
ROA not after:            Mon 07 Jan 2036 13:08:31 +0000
asID:                     327697
IP address blocks:        2c0f:3780:2210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1090 (0x442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Jan  7 13:08:31 2026 GMT
            Not After : Jan  7 13:08:31 2036 GMT
        Subject: CN=695e5ad6-f44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:8e:52:62:2e:0f:c6:ed:73:aa:71:6b:c7:
                    76:f1:a6:69:8e:6a:a2:31:9a:33:89:eb:93:7c:05:
                    da:fb:d9:6f:a6:6a:5d:74:0b:e4:87:c3:0e:83:bc:
                    33:6d:99:e6:10:24:04:21:16:bb:85:d0:fb:d9:8d:
                    87:f5:a5:64:c2:65:04:ea:56:48:47:a0:15:df:0c:
                    83:30:64:34:6a:9e:cf:3e:ba:ce:ce:48:64:9f:e6:
                    f9:2e:89:16:f9:2e:fa:83:ab:38:2e:6a:94:1b:33:
                    8c:72:c3:d0:73:ea:17:c3:ce:92:5d:73:52:13:62:
                    2c:31:34:52:ed:78:77:b5:03:d5:43:37:c8:73:ed:
                    10:47:5f:14:8f:1b:c2:3a:a7:d6:fd:69:b5:76:31:
                    10:16:99:82:45:ed:38:cc:a1:ed:1e:64:86:47:5e:
                    4a:cb:80:24:b7:d0:b6:68:ca:61:49:eb:a6:da:e1:
                    7c:a5:0c:d2:3b:66:c3:af:5e:b6:fe:19:90:1c:dd:
                    ad:8b:4e:2b:9f:63:87:15:86:89:aa:9f:7a:21:99:
                    58:fb:a3:61:da:95:41:4a:11:aa:fb:8d:b3:fc:35:
                    66:7e:bd:74:a4:59:f8:28:57:9e:29:92:0b:5b:dc:
                    d3:2d:bb:33:85:d5:c7:30:86:4d:8a:f0:1d:6e:c8:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2E:02:31:F9:D0:19:C0:C6:C5:27:7D:28:D0:6B:8C:63:8A:BE:27
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/FA23FE86EBC911F098EC42E8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3780:2210::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:d0:02:43:77:d7:b6:7f:09:8f:4e:d4:ac:93:d4:5f:03:40:
         a3:67:1e:17:7c:5e:d8:66:14:a4:73:33:5f:b0:a5:f6:e3:e2:
         ff:a1:15:96:d9:ce:86:0a:7b:8a:fc:e6:bb:c2:13:0c:e9:6a:
         db:47:8f:8e:20:1f:3b:e2:c0:85:5a:99:bd:b4:d3:41:ed:20:
         de:ff:b6:49:7e:d5:21:a2:87:1c:3d:40:4e:57:70:2f:24:0c:
         63:ee:0f:66:57:86:81:84:d8:d0:ea:23:49:40:26:4a:da:ab:
         a9:6b:7d:34:9f:81:02:3f:4a:7d:29:0c:13:c9:42:b9:44:e5:
         e1:9f:59:fb:fb:67:97:7f:05:6a:eb:60:fb:db:e3:4a:fd:e3:
         06:20:aa:b4:ae:f9:95:e5:4f:bd:43:cb:e0:d0:ba:8a:8c:15:
         1b:a4:fd:24:81:5c:74:5e:0b:49:46:d5:ea:bc:bc:74:9e:d8:
         a9:ce:9f:a4:d8:28:5d:38:54:b0:10:8e:54:5b:09:cd:91:84:
         be:e1:c7:41:96:bf:a6:54:05:d9:8b:a6:5c:7c:fe:63:2e:5f:
         0f:4a:78:de:c3:9b:56:92:2c:67:68:da:fa:42:87:d6:e3:e1:
         e2:0c:05:15:90:bd:50:f7:b3:bc:ec:f7:ef:a9:26:50:06:ae:
         8c:8d:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:28:52 2026 by rpki-client