This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa
File:                     2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (raw, json)
Hash identifier:          lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=
Subject key identifier:   8D:D1:8C:EF:C8:FE:03:90:5A:8F:7A:33:58:BB:88:23:BC:7D:13:D4
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       0F
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa
Signing time:             Sun 07 Dec 2025 09:22:02 +0000
ROA not before:           Sun 07 Dec 2025 09:21:57 +0000
ROA not after:            Wed 04 Dec 2030 09:21:57 +0000
asID:                     24863
IP address blocks:        2c0e::/20 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 09 Dec 2025 09:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Dec  7 09:21:57 2025 GMT
            Not After : Dec  4 09:21:57 2030 GMT
        Subject: CN=6935473a-fb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:9c:97:dd:8f:fd:61:f6:80:59:f2:f4:01:
                    b1:03:b0:82:17:a7:66:ad:8f:c4:4c:ad:f6:c4:34:
                    90:ab:21:72:59:52:c8:59:dc:34:ab:67:1d:33:ef:
                    06:9b:39:5e:c4:21:b7:e5:6a:f0:47:9a:44:4a:11:
                    f8:f9:ac:74:58:e5:12:a1:09:15:bd:a9:fb:1d:5f:
                    a2:c8:12:6b:22:bb:d5:97:79:89:07:c6:4f:3a:6e:
                    44:ac:a8:3a:80:91:3a:34:87:e7:db:36:58:88:7d:
                    c4:c8:5c:01:63:45:2f:50:d4:7c:94:ca:fb:aa:7f:
                    0c:41:94:92:e4:73:38:f2:44:e5:f0:c7:65:19:c9:
                    06:d9:05:95:fb:16:3d:c2:ca:fb:64:fd:be:23:6e:
                    7c:e2:7d:e6:89:6a:21:cc:d1:24:f6:4b:10:c4:ed:
                    34:55:d7:2e:e9:78:26:7d:7d:6e:bb:05:0e:5e:ae:
                    56:8b:bf:6c:bc:f5:49:b9:c0:6f:08:4d:10:86:c6:
                    35:2a:5e:3a:73:f7:79:67:53:58:8f:bf:4c:aa:4a:
                    b9:50:33:f7:a9:30:43:93:2a:bb:b0:e6:71:a5:2a:
                    23:2d:15:fe:14:0c:6b:da:6e:d6:0e:9e:6f:1e:0b:
                    46:d5:b8:89:91:3d:16:87:a3:c6:4b:31:0c:37:79:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D1:8C:EF:C8:FE:03:90:5A:8F:7A:33:58:BB:88:23:BC:7D:13:D4
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0e::/20

    Signature Algorithm: sha256WithRSAEncryption
         57:17:c2:91:47:de:d4:61:11:97:33:2f:23:07:73:50:32:53:
         9a:b1:42:c5:19:27:65:93:ea:e9:e8:a3:87:aa:65:20:c0:7e:
         f7:8f:de:06:8b:af:86:6c:88:e4:78:f3:7c:74:8c:64:7a:6c:
         65:75:0f:3d:d8:02:21:fd:b5:aa:f8:e3:b0:0d:92:0c:4a:a1:
         55:68:79:3a:c1:57:50:c2:7f:2b:5a:df:58:ab:2e:31:f9:b0:
         28:04:1b:42:53:8e:36:ff:24:ac:3f:a4:b2:5e:8b:0b:9d:18:
         c9:c2:8d:83:53:c2:b4:10:1b:87:14:6e:e3:6f:46:15:95:f9:
         e7:a9:4b:a7:d7:ca:1e:46:59:af:21:c7:66:e8:b6:15:71:56:
         82:df:b0:c1:f8:1d:6b:26:bc:d3:37:d3:d5:2d:91:2f:67:2a:
         e9:2c:cc:b0:d8:17:b9:fd:d9:3c:93:b7:62:75:66:b2:5f:d7:
         73:0c:e3:87:ad:d7:4c:03:9e:28:8c:80:c7:3a:97:57:63:64:
         81:26:6e:50:a9:1c:87:2a:0a:79:24:d7:33:4b:54:45:ba:1b:
         03:c9:bd:f4:b3:ce:fd:96:68:0f:2f:0c:bd:b8:fe:3e:b1:91:
         db:93:39:5d:5c:75:01:b6:e2:29:cc:9d:7b:ba:90:33:94:5b:
         7e:89:54:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 23:38:20 2025 by rpki-client