This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/2E19ACFAFB7811F08E942FB9DAE4EC9C.roa
File:                     2E19ACFAFB7811F08E942FB9DAE4EC9C.roa (raw, json)
Hash identifier:          BxJKHTfkRZri9Zx6qUjCr6DC+VJKH2KXb6afgCKVgm8=
Subject key identifier:   E5:E9:70:E3:17:7D:46:4B:26:AA:6B:94:7B:2A:34:CA:3C:15:BA:20
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       0213
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/2E19ACFAFB7811F08E942FB9DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 12:03:24 +0000
ROA not before:           Wed 28 Jan 2026 12:03:18 +0000
ROA not after:            Fri 28 Jan 2028 12:03:18 +0000
asID:                     16637
IP address blocks:        213.193.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Jan 28 12:03:18 2026 GMT
            Not After : Jan 28 12:03:18 2028 GMT
        Subject: CN=6978a98c-7cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:bb:b2:8a:46:b8:b2:4f:3d:5f:ab:96:d1:
                    87:5f:59:c5:a7:36:9a:1c:b8:0d:a1:09:3d:08:5c:
                    4a:6a:86:1d:33:58:4e:aa:97:bd:c1:1d:4d:ec:2e:
                    de:2b:4f:62:88:50:f0:b3:b9:1c:f0:35:ff:18:06:
                    91:b2:36:ca:bc:0c:4a:b4:7b:b7:46:5c:45:c3:e0:
                    1c:72:9c:90:a3:43:78:9d:7a:bf:7a:59:0d:21:1e:
                    f2:fd:2f:0e:7b:30:94:15:a5:01:29:d4:49:8a:b1:
                    f5:a4:0d:1c:72:c7:9a:19:50:e0:87:84:e8:ea:3f:
                    0e:d2:75:12:3a:31:da:ba:1d:ca:d3:2a:df:b7:a3:
                    5b:6d:0b:f5:a9:a4:95:05:32:f3:4c:9e:21:0d:0f:
                    51:5f:d3:01:b3:bf:8e:02:3a:8f:e1:c1:94:7f:40:
                    32:a4:32:96:61:70:3a:54:bf:df:26:c5:bd:91:b2:
                    45:09:ad:8c:53:82:1b:dd:74:ee:f1:80:0d:0a:b2:
                    69:53:9d:5a:81:e5:5c:58:ca:b1:02:92:de:c4:52:
                    a5:d7:ea:81:c6:be:6d:94:b9:6c:a8:88:81:31:06:
                    0b:7e:53:b5:e9:f8:e0:56:52:ec:b2:49:91:cb:e7:
                    8f:a9:a5:5b:8c:55:b3:bc:67:c5:cb:59:22:81:ae:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:70:E3:17:7D:46:4B:26:AA:6B:94:7B:2A:34:CA:3C:15:BA:20
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/2E19ACFAFB7811F08E942FB9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:e1:7b:bd:6c:52:e1:bc:d2:34:8a:32:40:66:fb:21:f8:
         bf:97:53:5c:b2:23:72:c0:7e:bb:5a:d9:ac:39:3d:de:8c:6d:
         4d:59:75:c9:d0:5a:57:a9:34:24:6f:ae:58:27:7f:f9:f2:4f:
         c7:6f:9f:a0:09:a9:7d:b9:01:7f:24:b6:f7:dd:57:84:b7:e5:
         10:60:c3:5e:b7:63:09:75:d1:80:25:5c:e7:fb:67:fa:39:59:
         7f:1f:82:67:54:6e:7f:5b:05:f4:13:68:48:5e:b0:6b:b8:60:
         57:db:96:8d:af:05:2a:4a:51:75:39:bd:dd:fe:44:55:60:ac:
         1d:a8:61:1e:e7:8b:ae:03:55:91:89:7f:95:93:8e:87:cf:5e:
         3f:e8:ef:a4:f9:c3:54:cd:5b:8c:d3:34:20:ab:29:0d:ee:f1:
         2f:6e:94:f8:df:cc:fc:0b:8a:ea:3f:ad:69:0d:3f:03:26:37:
         38:79:ee:c6:f5:55:27:be:92:ac:ad:f0:62:36:b4:ad:b8:0d:
         e4:59:88:4c:a6:52:1d:71:33:bf:54:bc:8d:c2:6d:aa:63:e1:
         3f:17:63:cc:fe:2f:cc:31:e8:41:81:5f:a8:f9:ff:31:a4:5e:
         83:71:5a:5d:0e:97:a7:f0:db:8c:69:0b:75:62:15:fe:46:39:
         16:00:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 04:30:35 2026 by rpki-client