This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/21075C28EBA211F090879AF5DAE4EC9C.roa
File:                     21075C28EBA211F090879AF5DAE4EC9C.roa (raw, json)
Hash identifier:          WPf6r6xv8RDuCnmN43kGiKsbWfPXIE1Zfdqe/xPn7SU=
Subject key identifier:   7A:0C:7F:42:CC:3F:22:33:5F:6E:8C:D0:20:31:A2:8B:1F:77:20:AA
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       09CA
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/21075C28EBA211F090879AF5DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 08:23:22 +0000
ROA not before:           Wed 07 Jan 2026 08:23:18 +0000
ROA not after:            Tue 31 Dec 2030 08:23:18 +0000
asID:                     328317
IP address blocks:        2c0f:eed8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: Jan  7 08:23:18 2026 GMT
            Not After : Dec 31 08:23:18 2030 GMT
        Subject: CN=695e17fa-937e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:62:bb:05:78:c1:91:77:1f:99:0c:94:a5:
                    c2:75:d5:c6:af:91:2c:0c:7c:07:9e:17:4b:21:ea:
                    36:c0:c3:78:7e:27:47:df:66:ea:0b:c8:c9:bd:5c:
                    bf:b1:3b:fa:47:7c:30:1a:6d:9e:7a:9c:74:8f:f3:
                    d9:1f:39:ce:aa:cc:1e:4c:a1:c4:df:0d:88:8f:4f:
                    9f:77:c1:2e:0c:b9:89:56:d7:59:5d:9e:47:5c:06:
                    d6:c7:10:94:21:ec:e4:3b:ea:53:c6:94:a0:fd:91:
                    57:f3:3f:08:6c:3c:ae:f2:36:cb:87:73:58:71:57:
                    ba:d0:7d:69:4c:7d:0b:c9:c9:4e:dc:f6:c2:d7:2d:
                    55:15:29:c0:36:4d:14:13:1e:95:cd:2b:c3:5f:23:
                    45:5c:94:b4:66:05:87:52:8f:77:19:78:ea:55:11:
                    29:87:3f:19:76:cf:53:fe:80:e1:ef:87:59:a5:83:
                    e5:25:7e:bf:2d:c0:6f:8b:d5:d7:3f:aa:23:09:fc:
                    5e:b2:31:87:74:89:26:d8:1c:c3:bd:93:1f:17:b6:
                    77:7c:4b:c2:f7:0d:09:30:41:64:01:2f:75:6d:b5:
                    bd:3d:7e:ef:76:a7:80:e9:ef:74:cf:64:bd:28:21:
                    92:9d:55:e8:c0:65:5f:54:4b:bf:5c:43:8a:72:48:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:7F:42:CC:3F:22:33:5F:6E:8C:D0:20:31:A2:8B:1F:77:20:AA
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/21075C28EBA211F090879AF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:eed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:27:c1:bb:a0:c7:6f:dc:b5:38:35:53:83:da:22:a9:81:43:
         b3:b0:38:39:b7:b3:2c:45:f8:ba:4f:e5:30:c6:7e:d8:20:2d:
         3a:21:3b:2b:3c:39:68:c6:4c:07:05:5a:16:f3:fd:94:d2:67:
         ff:e9:42:97:ac:79:69:8b:9b:fb:c4:1c:35:f7:2c:1a:38:42:
         7d:de:20:35:aa:3e:73:fa:0c:95:79:90:61:d5:c0:a6:00:53:
         89:f6:00:8d:2c:2f:62:a1:b0:b2:cf:a9:9d:c7:d0:33:13:8c:
         85:b1:aa:13:1b:70:c5:b9:20:08:fc:41:fc:72:f2:38:5d:35:
         b8:7c:9d:76:13:08:76:0a:71:23:39:36:9d:5f:c9:05:d5:09:
         50:1a:b1:f7:86:e9:6d:34:94:80:cf:c3:1c:c8:12:e6:a1:a7:
         6f:ef:8b:ec:d0:08:5b:0c:69:ae:46:8b:8f:b9:f8:14:c6:b0:
         a7:14:c4:68:c9:18:d0:30:3e:a9:14:21:38:a4:12:de:c0:ae:
         9c:1b:2c:a3:f3:fe:1c:35:84:95:0c:82:61:06:a9:69:1d:b5:
         00:6a:34:99:f2:e1:de:94:cb:2d:30:7a:bb:da:0f:cf:29:e2:
         ad:3b:5e:22:c2:1a:b5:d4:94:c3:45:4f:68:2f:66:b3:f6:f3:
         eb:ee:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:12:35 2026 by rpki-client