This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/A2097100F22B11F08B8C38A9DAE4EC9C.roa
File:                     A2097100F22B11F08B8C38A9DAE4EC9C.roa (raw, json)
Hash identifier:          pgofEA1JKv6J0QyvR8PTfDQrVo0AqDPbmJIOB5ay5zU=
Subject key identifier:   56:D6:55:DC:46:7A:A8:B9:50:87:0F:AA:CF:FB:A8:7A:55:A5:10:97
Certificate issuer:       /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial:       02FD
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/A2097100F22B11F08B8C38A9DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 16:02:47 +0000
ROA not before:           Thu 15 Jan 2026 16:02:42 +0000
ROA not after:            Sat 15 Jan 2028 16:02:42 +0000
asID:                     328206
IP address blocks:        2c0f:2c40:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
        Validity
            Not Before: Jan 15 16:02:42 2026 GMT
            Not After : Jan 15 16:02:42 2028 GMT
        Subject: CN=69690fa7-cb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:56:9b:13:73:55:5f:e9:c0:b3:2d:0f:aa:
                    42:85:b4:98:76:74:c2:70:95:5a:c9:6c:e9:4a:a5:
                    85:42:a0:6b:65:e3:b3:e1:80:05:8f:6e:53:c4:fe:
                    5e:4e:cc:e6:68:da:75:c0:b7:50:74:ed:3b:2a:d4:
                    9c:a0:8a:50:ab:0b:07:4b:ef:06:0a:bb:c9:fc:7d:
                    57:82:9d:54:3e:cc:37:b0:39:1d:f2:5b:28:96:07:
                    1c:c5:c8:c5:54:e8:5b:bb:7f:85:c4:1e:b8:70:d3:
                    ca:4c:f9:19:4f:4c:69:75:1f:d4:2d:ba:23:a5:ee:
                    c9:af:d8:3d:35:6c:35:6b:43:9e:a1:a5:15:c3:65:
                    0c:b6:f9:3b:5c:99:e4:f4:aa:e8:5c:4d:25:41:71:
                    9f:1a:71:96:ea:f9:a8:36:76:ed:4b:df:9b:0e:2a:
                    61:14:0d:85:8f:35:3a:53:c4:71:16:61:5c:18:ed:
                    05:f6:ff:90:60:6b:93:00:95:5d:06:fa:a8:29:03:
                    54:a2:2f:64:89:33:40:50:63:ce:54:91:a7:3c:52:
                    b2:64:83:f9:e9:fa:dc:c4:a7:0b:09:2f:21:11:ab:
                    d6:c2:81:69:86:a1:52:d2:9a:0f:0a:52:f5:ba:24:
                    76:ea:5e:1e:0b:fe:e5:2d:95:9e:5c:61:f5:e7:28:
                    d1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:55:DC:46:7A:A8:B9:50:87:0F:AA:CF:FB:A8:7A:55:A5:10:97
            X509v3 Authority Key Identifier:
                keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/A2097100F22B11F08B8C38A9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:2c40:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:c8:02:67:f2:11:6f:06:af:6b:ea:03:a5:f1:41:2c:2a:da:
         7c:5b:41:b2:da:f3:3a:a2:a4:74:a3:42:f8:6c:a8:47:62:54:
         d8:e8:7b:bb:94:1b:79:1b:0a:28:b2:05:2d:99:f3:14:67:05:
         1a:46:c9:21:13:c4:c9:7d:1c:2b:cd:19:34:62:f9:e4:ca:1c:
         87:8d:22:7c:18:e5:e6:98:2e:fa:5c:25:14:eb:b0:73:e9:76:
         bb:6e:3e:df:ea:8f:62:8f:22:10:54:73:14:2e:39:d4:c7:3c:
         d8:71:f6:15:39:52:6b:23:4b:5d:38:f2:4c:fc:a8:c6:19:8f:
         cb:ba:eb:18:e5:e6:58:d4:d3:8f:d5:71:e4:79:50:cf:cb:a1:
         ee:df:e3:0e:6d:eb:d1:ff:e3:84:5f:22:2c:2c:80:c1:28:6f:
         a6:d4:31:c4:7c:04:a9:4b:0f:cb:0d:23:7e:14:09:11:5c:81:
         15:28:cd:4d:f0:20:35:a0:fb:e4:1a:bb:c1:7c:62:df:b3:52:
         67:45:47:4b:58:bf:d3:ee:42:c4:a3:de:35:a0:8c:a6:b8:eb:
         2b:9f:b9:9c:a1:53:5c:7e:f4:8a:50:33:0e:e0:04:f6:76:18:
         82:49:4c:92:02:5a:ac:80:9a:90:6a:5c:50:c8:60:ef:d2:a0:
         8f:61:6e:f5
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkY1OUJBRjExMC8GA1UEBRMoRTAzNkFFMDhGRTAzNDE2RjU4ODg3QTlEMTk1REJG
RDg2QTI1NjAzQzAeFw0yNjAxMTUxNjAyNDJaFw0yODAxMTUxNjAyNDJaMBgxFjAU
BgNVBAMTDTY5NjkwZmE3LWNiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGQVabE3NVX+nAsy0PqkKFtJh2dMJwlVrJbOlKpYVCoGtl47PhgAWPblPE
/l5OzOZo2nXAt1B07Tsq1JygilCrCwdL7wYKu8n8fVeCnVQ+zDewOR3yWyiWBxzF
yMVU6Fu7f4XEHrhw08pM+RlPTGl1H9QtuiOl7smv2D01bDVrQ56hpRXDZQy2+Ttc
meT0quhcTSVBcZ8acZbq+ag2du1L35sOKmEUDYWPNTpTxHEWYVwY7QX2/5Bga5MA
lV0G+qgpA1SiL2SJM0BQY85Ukac8UrJkg/np+tzEpwsJLyERq9bCgWmGoVLSmg8K
UvW6JHbqXh4L/uUtlZ5cYfXnKNFVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVtZV
3EZ6qLlQhw+qz/uoelWlEJcwHwYDVR0jBBgwFoAU4DauCP4DQW9YiHqdGV2/2Gol
YDwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJGNTlCLzRBQUFBMjE0Qzc1MTExRUVBMDJFQjM5Mjc3NTQxMkU2LzREYXVD
UDREUVc5WWlIcWRHVjJfMkdvbFlEdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzREYXVDUDREUVc5WWlIcWRHVjJfMkdvbFlEdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJGNTlCLzRBQUFBMjE0Qzc1MTExRUVBMDJFQjM5Mjc3
NTQxMkU2L0EyMDk3MTAwRjIyQjExRjA4QjhDMzhBOURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAsDyxA//8wDQYJKoZIhvcN
AQELBQADggEBABHIAmfyEW8Gr2vqA6XxQSwq2nxbQbLa8zqipHSjQvhsqEdiVNjo
e7uUG3kbCiiyBS2Z8xRnBRpGySETxMl9HCvNGTRi+eTKHIeNInwY5eaYLvpcJRTr
sHPpdrtuPt/qj2KPIhBUcxQuOdTHPNhx9hU5UmsjS1048kz8qMYZj8u66xjl5ljU
04/VceR5UM/Loe7f4w5t69H/44RfIiwsgMEob6bUMcR8BKlLD8sNI34UCRFcgRUo
zU3wIDWg++Qau8F8Yt+zUmdFR0tYv9PuQsSj3jWgjKa46yufuZyhU1x+9IpQMw7g
BPZ2GIJJTJICWqyAmpBqXFDIYO/SoI9hbvU=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:50 2026 by rpki-client