This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
File:                     348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa (raw, json)
Hash identifier:          N22acFSQsXyjxhKorUA5XDVJ5jLIt1Un/EsFZoIoznw=
Subject key identifier:   7D:8E:AE:10:44:67:79:0B:BC:BE:1B:B5:94:0B:10:88:E8:FA:9D:0B
Certificate issuer:       /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial:       65
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
Signing time:             Fri 19 Dec 2025 18:40:35 +0000
ROA not before:           Fri 19 Dec 2025 18:40:31 +0000
ROA not after:            Wed 19 Dec 2035 18:40:31 +0000
asID:                     329631
IP address blocks:        2c0f:78c0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
        Validity
            Not Before: Dec 19 18:40:31 2025 GMT
            Not After : Dec 19 18:40:31 2035 GMT
        Subject: CN=69459c23-ac8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:c2:6c:03:39:01:7b:51:8e:8e:b6:cd:b3:
                    16:95:36:4d:8a:be:12:51:49:92:7e:7a:ae:ea:4c:
                    09:53:e3:d0:04:4d:1d:98:85:c6:a2:75:a7:1c:2c:
                    f1:e1:9f:a0:14:81:ee:86:97:a5:10:db:72:e4:ab:
                    c7:a1:c7:97:31:d8:a9:90:76:77:9c:55:ab:d4:8d:
                    b3:22:0c:70:5f:b3:26:f2:c0:81:46:be:8c:ce:0b:
                    f2:f2:7a:ad:9d:f5:a4:ee:1e:21:8c:f4:f3:5f:ee:
                    be:94:c3:7f:c4:3d:01:e3:00:99:c5:e8:43:4d:08:
                    9e:2a:1b:5e:0a:56:00:40:73:de:63:93:a0:2d:95:
                    ad:b6:22:4b:b1:03:b0:a7:53:79:e1:d6:3b:3f:06:
                    24:9d:c2:28:2d:5d:5f:7d:f5:9a:b9:67:f3:ae:83:
                    c1:27:d0:fd:ce:97:de:2e:1d:61:b9:ea:1f:69:66:
                    93:ed:22:a5:94:11:5b:de:50:c0:01:63:92:a8:4f:
                    b2:1c:e8:fa:a2:86:03:ea:93:ec:e8:de:10:32:1f:
                    6d:d5:95:b5:b4:84:a3:97:ed:67:60:59:69:b6:c8:
                    4e:c1:0f:27:53:43:45:33:5e:30:70:77:93:19:c9:
                    8d:21:07:cd:c2:c2:89:10:03:87:5d:ec:b6:ba:8a:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:AE:10:44:67:79:0B:BC:BE:1B:B5:94:0B:10:88:E8:FA:9D:0B
            X509v3 Authority Key Identifier:
                keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:78c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:c5:6c:af:50:e2:c0:eb:0e:74:82:b9:a0:fd:61:7d:51:
         72:d6:53:c6:ed:b2:35:10:b9:3f:e4:fc:0f:6c:f0:ef:ba:08:
         3f:77:97:85:f8:b0:8b:87:7b:9f:1d:60:4e:21:7e:46:90:f5:
         b7:34:31:8c:cc:98:96:91:12:cf:06:9f:f9:de:08:24:15:3f:
         44:fc:e3:cf:5a:52:77:50:ea:2a:54:97:a7:3d:a2:ac:29:17:
         ac:a5:97:b6:f5:2f:7e:fc:54:09:ae:aa:1e:21:18:a8:44:0d:
         a2:bf:93:ff:6f:3c:11:6c:40:bd:29:54:e6:c4:2c:7b:57:8e:
         96:6c:f9:4a:a2:4a:d6:f1:1c:f8:0b:63:dc:d4:1f:c9:92:73:
         5a:cd:64:f6:5a:e4:10:3b:ae:4e:53:d0:8d:8d:23:4a:54:7d:
         16:1d:17:3f:52:01:59:3b:bd:3d:13:52:74:87:ad:71:60:76:
         13:25:bc:01:88:a0:47:d0:88:01:73:1c:68:de:3c:8f:a6:41:
         e1:b9:08:83:cf:8e:b0:62:e7:2f:cc:33:31:15:71:9c:f8:7d:
         b6:17:01:ff:a1:c5:49:b3:5f:de:9c:93:f6:2f:bd:1e:e2:47:
         0d:1b:46:26:1d:8f:fa:65:9b:1a:21:e3:15:91:6d:bf:23:48:
         ab:dd:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:56 2026 by rpki-client