This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2E629470C89111F09FB590CBDAE4EC9C.roa
File:                     2E629470C89111F09FB590CBDAE4EC9C.roa (raw, json)
Hash identifier:          EFh5M3QCNjeimEXA/mXdWrIx1eozgW+kjskB/TPAG8g=
Subject key identifier:   DF:63:63:12:D5:ED:CC:6B:00:9E:81:28:03:28:FD:2A:4F:1D:05:F5
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       0697
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2E629470C89111F09FB590CBDAE4EC9C.roa
Signing time:             Sun 23 Nov 2025 17:23:53 +0000
ROA not before:           Sun 23 Nov 2025 17:23:48 +0000
ROA not after:            Fri 30 Nov 2035 17:23:48 +0000
asID:                     328840
IP address blocks:        2c0f:4e00::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Nov 23 17:23:48 2025 GMT
            Not After : Nov 30 17:23:48 2035 GMT
        Subject: CN=69234328-8a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:b9:e5:8b:bd:7c:18:46:a8:9e:78:04:dc:
                    03:8c:1b:27:e3:34:92:e4:fb:a4:44:7d:61:ea:59:
                    a2:63:a8:6a:2e:13:ce:e3:96:32:07:89:3e:61:ba:
                    64:48:52:7b:35:10:a7:36:b9:99:bd:54:9f:33:b3:
                    eb:57:f7:de:af:7e:42:7e:60:50:73:7a:31:18:7b:
                    7a:35:77:0c:16:d0:2a:6a:b4:3a:40:07:fb:ed:cb:
                    d1:7a:91:90:14:da:6f:78:70:c2:6f:2b:a1:85:a4:
                    97:4f:87:71:d0:a5:dd:1f:78:26:d8:b4:a7:8f:e7:
                    4c:82:df:6b:1a:c3:a3:40:7d:ba:d5:3a:11:5f:79:
                    97:4c:28:77:79:d2:a7:bb:8d:73:d2:67:2a:de:50:
                    a9:76:25:71:35:5b:b1:67:57:ea:be:db:ed:29:d8:
                    3c:f6:cc:48:21:3c:ac:6b:4c:09:b8:33:8b:50:41:
                    ab:ec:ab:a4:04:2c:66:49:0f:d3:20:12:39:a9:74:
                    39:b7:41:f4:9d:69:e4:19:0d:fc:c9:3d:76:97:10:
                    84:90:cd:35:23:ca:b6:53:0c:1c:35:47:a2:af:17:
                    00:1f:de:86:18:88:c6:3e:21:fe:3c:d9:4c:21:48:
                    47:48:ca:fb:c6:e5:cc:5d:27:43:8a:2e:0d:03:7b:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:63:63:12:D5:ED:CC:6B:00:9E:81:28:03:28:FD:2A:4F:1D:05:F5
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/2E629470C89111F09FB590CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4e00::/34

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:02:d6:43:ef:0a:59:70:e6:78:22:b4:83:45:fb:a0:09:
         6a:61:94:b6:71:93:41:5c:1d:c6:cd:cc:78:b7:be:59:19:e2:
         d1:60:e8:3b:1e:b8:bb:44:aa:b5:3c:f4:ae:3d:3f:38:96:f7:
         63:70:41:f1:04:38:e4:c0:f1:5a:73:99:4b:0f:e5:b1:dc:d3:
         fe:75:b6:ed:5c:78:01:3d:0a:c3:12:93:12:51:89:5f:90:bf:
         90:b4:d8:87:7b:b7:69:a2:c7:50:1a:37:69:0f:10:88:32:06:
         0b:85:8b:a2:7d:ab:a3:84:9d:81:a9:b1:62:43:75:6f:ac:8b:
         ee:34:76:d1:6a:5d:9f:33:8c:ca:48:6a:fc:e6:2f:a3:58:d3:
         11:f2:5d:ed:2f:cb:b0:bf:d7:30:ea:ce:e8:9a:42:7a:5d:74:
         27:e5:3b:87:be:2d:fb:75:dc:67:11:bb:48:1f:e7:fe:dd:aa:
         bd:df:2f:3f:dc:78:92:ac:42:b0:75:ef:89:4e:be:21:9e:1a:
         9e:fd:7a:7e:d2:7b:ba:3c:4b:6d:95:4f:61:c1:20:8e:92:ed:
         2e:0b:f7:d4:00:b7:5c:48:9c:cf:11:ea:dd:8b:69:db:59:f3:
         b8:e4:e7:8e:54:ed:32:c8:58:3c:cc:73:9f:b5:ad:63:f3:f4:
         92:7b:4e:09
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0
OTg0MkM4RDZBMDAeFw0yNTExMjMxNzIzNDhaFw0zNTExMzAxNzIzNDhaMBgxFjAU
BgNVBAMTDTY5MjM0MzI4LThhN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPrrnli718GEaonngE3AOMGyfjNJLk+6REfWHqWaJjqGouE87jljIHiT5h
umRIUns1EKc2uZm9VJ8zs+tX996vfkJ+YFBzejEYe3o1dwwW0CpqtDpAB/vty9F6
kZAU2m94cMJvK6GFpJdPh3HQpd0feCbYtKeP50yC32saw6NAfbrVOhFfeZdMKHd5
0qe7jXPSZyreUKl2JXE1W7FnV+q+2+0p2Dz2zEghPKxrTAm4M4tQQavsq6QELGZJ
D9MgEjmpdDm3QfSdaeQZDfzJPXaXEISQzTUjyrZTDBw1R6KvFwAf3oYYiMY+If48
2UwhSEdIyvvG5cxdJ0OKLg0Dez8FAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU32Nj
EtXtzGsAnoEoAyj9Kk8dBfUwHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI
1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy
R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4
QTAxNENFLzJFNjI5NDcwQzg5MTExRjA5RkI1OTBDQkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYsD04AADANBgkqhkiG9w0B
AQsFAAOCAQEAFm4C1kPvCllw5ngitINF+6AJamGUtnGTQVwdxs3MeLe+WRni0WDo
Ox64u0SqtTz0rj0/OJb3Y3BB8QQ45MDxWnOZSw/lsdzT/nW27Vx4AT0KwxKTElGJ
X5C/kLTYh3u3aaLHUBo3aQ8QiDIGC4WLon2ro4SdgamxYkN1b6yL7jR20WpdnzOM
ykhq/OYvo1jTEfJd7S/LsL/XMOrO6JpCel10J+U7h74t+3XcZxG7SB/n/t2qvd8v
P9x4kqxCsHXviU6+IZ4anv16ftJ7ujxLbZVPYcEgjpLtLgv31AC3XEiczxHq3Ytp
21nzuOTnjlTtMshYPMxzn7WtY/P0kntOCQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:18:17 2025 by rpki-client