This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa
File:                     D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa (raw, json)
Hash identifier:          mi8Ptbn8iwhQRbwYylFtD3uAOG7kNqb26/g5AbK5ZUA=
Subject key identifier:   D7:82:DC:5A:43:F2:C9:D7:1E:FA:05:95:CA:6F:BA:2A:BC:0A:1B:3D
Certificate issuer:       /CN=F36960E7AF/serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
Certificate serial:       0695
Authority key identifier: 1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa
Signing time:             Sun 23 Nov 2025 17:21:29 +0000
ROA not before:           Sun 23 Nov 2025 17:21:23 +0000
ROA not after:            Fri 30 Nov 2035 17:21:23 +0000
asID:                     328840
IP address blocks:        2c0f:4e00:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36960E7AF, serialNumber=1F4DB9AC6B63108A19BDCDBEECFF449842C8D6A0
        Validity
            Not Before: Nov 23 17:21:23 2025 GMT
            Not After : Nov 30 17:21:23 2035 GMT
        Subject: CN=69234299-a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:a6:7e:bc:1e:50:d7:fd:ca:f6:0d:2f:16:
                    af:bf:0c:e5:cc:0f:49:48:ff:d0:ad:23:fa:4d:35:
                    32:bd:24:4c:9b:75:0a:ce:bf:9a:0b:d0:49:98:b4:
                    17:1d:bb:b1:f1:da:37:29:2f:15:8d:c8:b9:ad:82:
                    e2:42:ba:85:69:29:f7:d9:8c:2e:b7:33:1e:09:c5:
                    a5:71:a3:45:29:de:d5:c4:80:75:25:80:93:54:e6:
                    03:8f:3b:14:9d:5a:a8:a0:85:c8:88:c3:e5:a4:ec:
                    9f:f1:de:52:d6:e4:08:0a:79:43:c5:24:4a:be:42:
                    c3:07:b9:9b:b7:5b:54:d9:7b:f2:15:4f:19:cf:d0:
                    93:4b:30:2e:c6:84:28:8e:1a:b0:62:2a:9f:a6:a0:
                    82:25:af:17:1a:63:35:c0:9d:f1:df:48:89:9a:76:
                    5b:85:6c:6a:e1:a0:3c:4b:cb:a0:e2:f1:33:aa:3b:
                    3d:99:c7:fb:52:9c:e4:13:25:eb:77:bf:87:ec:c0:
                    97:23:57:d0:81:ea:06:eb:d6:a8:9e:1e:9b:32:40:
                    ab:96:70:67:83:75:ca:f8:52:05:81:57:6f:b7:79:
                    b4:49:c8:45:2d:53:85:86:e0:37:1e:0b:f9:b8:d8:
                    c1:cc:e7:ff:2e:73:32:0f:14:12:c7:81:fd:c3:97:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:DC:5A:43:F2:C9:D7:1E:FA:05:95:CA:6F:BA:2A:BC:0A:1B:3D
            X509v3 Authority Key Identifier:
                keyid:1F:4D:B9:AC:6B:63:10:8A:19:BD:CD:BE:EC:FF:44:98:42:C8:D6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/H025rGtjEIoZvc2-7P9EmELI1qA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H025rGtjEIoZvc2-7P9EmELI1qA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36960E7/1C0AE63EEB7711EB80DE7C1ED8A014CE/D8AB9D10C89011F0BEE7EFC7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4e00:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:3d:de:12:fb:2c:e2:b1:eb:c2:85:90:87:b5:9e:0e:6a:
         1d:0f:1d:5e:65:56:53:48:f1:50:e0:84:c8:43:65:12:ee:a6:
         ec:64:17:28:b8:08:8f:ff:c0:c4:e7:31:cb:39:57:63:e5:73:
         d0:3b:d2:a1:73:28:59:81:a7:ee:84:a4:43:39:78:bc:6b:ec:
         3e:bd:c6:36:bd:e7:24:14:a4:ae:71:1e:fb:1e:7e:d2:37:2b:
         66:61:b1:a9:04:87:63:8a:fb:c4:e1:5a:69:09:11:e6:9d:16:
         dd:ff:4b:4f:a1:cd:32:87:72:a3:b5:1d:04:64:ec:32:1e:53:
         91:dc:cc:f1:5d:f6:c8:08:9d:97:f1:86:c1:4c:9f:9c:56:ad:
         09:eb:8b:82:4a:41:64:3c:33:4c:ad:51:de:74:54:69:34:20:
         e0:a6:d1:c7:54:2f:5c:cd:87:bc:35:15:44:e5:24:19:c0:8d:
         73:cd:29:b0:66:e4:62:16:8b:2c:20:e8:54:bf:92:96:2a:62:
         7c:82:18:e8:7b:12:2d:08:17:19:04:80:a7:27:13:e3:27:b1:
         3b:4b:65:4e:a7:fb:8d:06:19:f9:5c:f6:ac:8d:74:49:1d:84:
         35:f2:06:46:d6:46:3b:cd:72:03:0a:05:43:2f:61:c2:fb:f0:
         59:ec:3d:6a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTYwRTdBRjExMC8GA1UEBRMoMUY0REI5QUM2QjYzMTA4QTE5QkRDREJFRUNGRjQ0
OTg0MkM4RDZBMDAeFw0yNTExMjMxNzIxMjNaFw0zNTExMzAxNzIxMjNaMBgxFjAU
BgNVBAMTDTY5MjM0Mjk5LWE2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJHKZ+vB5Q1/3K9g0vFq+/DOXMD0lI/9CtI/pNNTK9JEybdQrOv5oL0EmY
tBcdu7Hx2jcpLxWNyLmtguJCuoVpKffZjC63Mx4JxaVxo0Up3tXEgHUlgJNU5gOP
OxSdWqighciIw+Wk7J/x3lLW5AgKeUPFJEq+QsMHuZu3W1TZe/IVTxnP0JNLMC7G
hCiOGrBiKp+moIIlrxcaYzXAnfHfSImadluFbGrhoDxLy6Di8TOqOz2Zx/tSnOQT
Jet3v4fswJcjV9CB6gbr1qieHpsyQKuWcGeDdcr4UgWBV2+3ebRJyEUtU4WG4Dce
C/m42MHM5/8uczIPFBLHgf3Dly/RAgMBAAGjggKnMIICozAdBgNVHQ4EFgQU14Lc
WkPyydce+gWVym+6KrwKGz0wHwYDVR0jBBgwFoAUH025rGtjEIoZvc2+7P9EmELI
1qAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4QTAxNENFL0gwMjVy
R3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwMjVyR3RqRUlvWnZjMi03UDlFbUVMSTFxQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjk2MEU3LzFDMEFFNjNFRUI3NzExRUI4MERFN0MxRUQ4
QTAxNENFL0Q4QUI5RDEwQzg5MDExRjBCRUU3RUZDN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUsD04AgDANBgkqhkiG9w0B
AQsFAAOCAQEAfpU93hL7LOKx68KFkIe1ng5qHQ8dXmVWU0jxUOCEyENlEu6m7GQX
KLgIj//AxOcxyzlXY+Vz0DvSoXMoWYGn7oSkQzl4vGvsPr3GNr3nJBSkrnEe+x5+
0jcrZmGxqQSHY4r7xOFaaQkR5p0W3f9LT6HNModyo7UdBGTsMh5TkdzM8V32yAid
l/GGwUyfnFatCeuLgkpBZDwzTK1R3nRUaTQg4KbRx1QvXM2HvDUVROUkGcCNc80p
sGbkYhaLLCDoVL+SlipifIIY6HsSLQgXGQSApycT4yexO0tlTqf7jQYZ+Vz2rI10
SR2ENfIGRtZGO81yAwoFQy9hwvvwWew9ag==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:14:31 2025 by rpki-client