This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa
File:                     3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa (raw, json)
Hash identifier:          f4YLBLBfUAXogyJhvZl0y7IkPqGGccMi1xOkCatN5G4=
Subject key identifier:   B7:18:F4:CC:BC:37:F7:1E:30:FD:D1:61:D5:22:13:21:4E:CD:CE:2F
Certificate issuer:       /CN=F36A6479AF/serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
Certificate serial:       81
Authority key identifier: 71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 17:20:40 +0000
ROA not before:           Wed 26 Nov 2025 17:20:35 +0000
ROA not after:            Wed 18 Oct 2028 17:20:35 +0000
asID:                     214354
IP address blocks:        2c0f:2cc0:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6479AF, serialNumber=7153C5AF5226196F3210CCF067BFB03979ABE16A
        Validity
            Not Before: Nov 26 17:20:35 2025 GMT
            Not After : Oct 18 17:20:35 2028 GMT
        Subject: CN=692736e8-70d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:3f:57:e2:9b:a6:15:8c:b4:fa:b9:26:89:
                    5b:47:f9:35:da:ce:ba:ea:c7:5a:e5:7d:1d:93:af:
                    8b:e7:22:cc:14:39:75:be:e8:f1:14:29:69:43:da:
                    d3:0f:c4:5e:8b:12:c4:92:3c:5a:79:51:28:b1:bc:
                    74:3a:2f:72:e5:f0:67:d3:47:87:7b:aa:fa:a9:41:
                    c2:23:41:30:73:ab:3d:aa:b9:5b:fb:6f:14:33:69:
                    bc:51:b9:1b:08:5e:64:b9:b4:de:b8:4c:70:14:c0:
                    6c:d7:8f:02:2f:2d:42:a2:e9:24:f5:64:53:cb:61:
                    bb:2f:96:4f:9e:b1:22:f0:92:8f:0d:b7:0e:18:4b:
                    39:6a:b9:a8:3c:fa:36:5e:1a:2f:dc:b0:2f:84:7f:
                    13:62:60:65:5b:ee:58:b2:eb:4d:ca:e4:d0:27:e9:
                    26:92:4b:32:54:e8:8e:e3:43:0c:67:5e:3c:db:f8:
                    af:2a:95:88:4b:dd:8a:92:b2:b6:28:69:59:b9:19:
                    7b:38:c7:c4:fe:07:45:ba:16:b3:d2:89:79:d6:99:
                    6a:06:fe:9d:f9:5f:9d:a1:68:e9:5b:a8:d5:2a:9f:
                    af:73:c2:72:23:0f:c0:57:1c:63:40:97:ab:97:91:
                    69:d7:32:a3:61:f2:b2:5d:04:07:67:c4:c0:4b:3c:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:F4:CC:BC:37:F7:1E:30:FD:D1:61:D5:22:13:21:4E:CD:CE:2F
            X509v3 Authority Key Identifier:
                keyid:71:53:C5:AF:52:26:19:6F:32:10:CC:F0:67:BF:B0:39:79:AB:E1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cVPFr1ImGW8yEMzwZ7-wOXmr4Wo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6479/AB9C3F72734611F09CF009B9DAE4EC9C/3AA463DCCAEC11F08EC9DAA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2cc0:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:bf:e8:a3:d9:64:35:4b:4f:4d:60:9d:aa:5a:40:3f:27:
         6b:8a:35:ae:e3:cf:62:7b:be:17:8e:03:a2:1d:b6:90:fc:b3:
         17:a0:1c:3c:37:33:68:e5:ca:c7:80:11:5d:ea:f8:31:17:ff:
         96:8e:6f:64:e9:a2:d0:af:be:3a:da:44:42:42:a8:2b:2f:9d:
         aa:d9:57:f8:af:19:45:4a:6e:a0:72:3b:5b:6c:96:0b:54:4f:
         db:46:07:d4:c9:b0:ad:a2:3f:73:5f:93:e7:2d:8e:2d:c0:09:
         92:2b:02:30:2e:59:2e:71:71:22:c6:b3:31:f1:37:ea:05:71:
         98:ed:91:b5:b0:f7:13:1d:02:cf:9e:69:69:33:7e:cb:21:d3:
         2d:87:61:25:af:ae:ae:db:38:6e:6f:79:f3:bb:07:89:a4:a7:
         47:eb:de:18:d5:ef:76:2a:98:85:cd:c4:a1:50:e3:49:35:e5:
         a7:f7:f4:20:57:b5:65:b5:a3:f2:19:0a:53:6b:32:62:b0:75:
         e5:81:75:33:d6:7c:87:cf:e7:80:82:50:a2:3f:e3:eb:ea:47:
         d4:dc:49:6f:32:32:c8:5d:e4:47:d4:ae:16:79:37:1b:44:88:
         cb:ff:91:b5:38:bf:23:17:4b:15:29:27:5a:c4:1f:8f:57:68:
         a1:96:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:40:31 2025 by rpki-client