This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/49D10B8AFB8411F085B74285DAE4EC9C.roa
File:                     49D10B8AFB8411F085B74285DAE4EC9C.roa (raw, json)
Hash identifier:          xN+oPTiqjHmtNSoRYq6a05dMRfGXblz8z65sbXo+yJw=
Subject key identifier:   BC:60:46:F1:21:30:A3:EC:6A:F5:81:F6:87:B1:D1:0B:42:7F:AC:4F
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       0215
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/49D10B8AFB8411F085B74285DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 13:30:04 +0000
ROA not before:           Wed 28 Jan 2026 13:29:58 +0000
ROA not after:            Fri 28 Jan 2028 13:29:58 +0000
asID:                     16637
IP address blocks:        213.193.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Jan 28 13:29:58 2026 GMT
            Not After : Jan 28 13:29:58 2028 GMT
        Subject: CN=6978bddc-e6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:05:cf:b5:8b:c8:c3:9a:84:30:84:70:10:
                    f8:4a:f7:9e:e3:d3:59:55:ee:32:bc:58:f8:4e:16:
                    44:21:c3:1d:47:bf:c8:7a:29:d2:c4:95:ad:6c:91:
                    b4:e5:5c:55:bc:d2:a6:07:15:2a:48:71:0f:2d:55:
                    16:e0:8b:a4:e7:7d:39:af:e8:2a:1b:bc:98:ca:81:
                    08:14:d7:ad:16:ab:a4:36:ae:e1:7f:2e:e6:ea:48:
                    95:39:09:c0:8c:9d:96:6d:ac:75:15:c6:a0:2c:60:
                    82:e3:9f:e3:bf:33:2b:85:e5:ae:94:bd:fe:69:c0:
                    f3:67:fa:c5:da:d1:93:7f:4f:e6:32:d6:fb:ee:8e:
                    82:98:c0:11:62:a0:38:dc:fe:e2:a6:b7:d8:e0:1a:
                    ab:6d:3c:21:10:77:11:6a:7a:80:38:c5:d8:ee:48:
                    ee:97:d2:96:76:bc:6c:e6:a6:55:42:d8:b5:65:7c:
                    e6:41:48:71:51:25:24:6b:36:24:84:36:61:04:4e:
                    92:cf:0f:d8:56:7c:af:0e:af:ce:48:a2:a2:19:a8:
                    8a:93:d4:aa:19:95:7e:8f:2d:83:57:86:ec:54:db:
                    da:cb:96:e2:6f:59:a7:c3:f2:3e:2b:72:3f:1d:4f:
                    96:20:3e:0d:7e:ac:4f:a6:c7:a3:0d:d5:d7:5b:8d:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:46:F1:21:30:A3:EC:6A:F5:81:F6:87:B1:D1:0B:42:7F:AC:4F
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/49D10B8AFB8411F085B74285DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.193.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:81:2b:f4:f2:0b:e9:a6:a3:49:61:4c:a0:8e:16:c8:ca:
         c1:95:73:bd:a1:a7:99:cf:00:71:6b:a8:07:f4:cc:70:cc:95:
         6e:fe:d0:99:07:86:15:00:f9:38:d5:f8:62:35:e5:9a:41:44:
         bc:74:21:dd:25:c0:33:14:75:ac:1d:dd:fd:64:de:e0:f9:22:
         49:fa:70:12:ef:e4:3c:01:88:18:00:b4:fc:a9:29:98:03:36:
         72:7a:85:4c:98:0d:bc:9d:96:f5:bd:23:3f:3b:a3:ab:ef:03:
         15:43:21:39:50:34:eb:2c:9c:fd:a6:dd:0f:d0:e4:46:05:fc:
         e2:06:08:93:c7:e8:9a:b9:3b:b3:8e:f6:d7:6e:f3:76:12:2e:
         7b:b3:59:5a:39:21:02:a1:af:51:86:fe:b7:b0:70:74:2f:f7:
         9d:3c:d5:17:9b:f6:99:06:8f:3b:cc:52:67:e9:4e:2c:8d:a0:
         c1:bd:92:19:2e:42:85:1a:69:97:96:95:a9:0b:be:b6:54:78:
         b9:71:8a:ae:32:6f:46:a0:02:ee:7f:00:8f:3d:52:91:6f:4b:
         d8:64:5e:db:65:11:1e:dd:2b:5d:22:5e:42:3d:b1:a6:1f:2e:
         11:eb:c3:ac:20:b0:2f:9a:6f:5d:21:fe:72:63:55:b6:08:96:
         b1:7a:20:da
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3OEZSSTExMC8GA1UEBRMoMDUyQjlDRDEwRjZBRTY3QjMxMjdFRDEyMzcyNDdF
OEFDNDRCNzlBMTAeFw0yNjAxMjgxMzI5NThaFw0yODAxMjgxMzI5NThaMBgxFjAU
BgNVBAMTDTY5NzhiZGRjLWU2ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6ZAXPtYvIw5qEMIRwEPhK957j01lV7jK8WPhOFkQhwx1Hv8h6KdLEla1s
kbTlXFW80qYHFSpIcQ8tVRbgi6TnfTmv6CobvJjKgQgU160Wq6Q2ruF/LubqSJU5
CcCMnZZtrHUVxqAsYILjn+O/MyuF5a6Uvf5pwPNn+sXa0ZN/T+Yy1vvujoKYwBFi
oDjc/uKmt9jgGqttPCEQdxFqeoA4xdjuSO6X0pZ2vGzmplVC2LVlfOZBSHFRJSRr
NiSENmEETpLPD9hWfK8Or85IoqIZqIqT1KoZlX6PLYNXhuxU29rLluJvWafD8j4r
cj8dT5YgPg1+rE+mx6MN1ddbjURxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvGBG
8SEwo+xq9YH2h7HRC0J/rE8wHwYDVR0jBBgwFoAUBSuc0Q9q5nsxJ+0SNyR+isRL
eaEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzhGLzdDOTg4M0UyNjUwQjExRUZCQjk2Rjc1NTc2MkU5NTFBL0JTdWMw
UTlxNW5zeEotMFNOeVItaXNSTGVhRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0JTdWMwUTlxNW5zeEotMFNOeVItaXNSTGVhRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjc2NzhGLzdDOTg4M0UyNjUwQjExRUZCQjk2Rjc1NTc2MkU5
NTFBLzQ5RDEwQjhBRkI4NDExRjA4NUI3NDI4NURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPVwSgwDQYJKoZIhvcNAQELBQAD
ggEBAIgNgSv08gvppqNJYUygjhbIysGVc72hp5nPAHFrqAf0zHDMlW7+0JkHhhUA
+TjV+GI15ZpBRLx0Id0lwDMUdawd3f1k3uD5Ikn6cBLv5DwBiBgAtPypKZgDNnJ6
hUyYDbydlvW9Iz87o6vvAxVDITlQNOssnP2m3Q/Q5EYF/OIGCJPH6Jq5O7OO9tdu
83YSLnuzWVo5IQKhr1GG/rewcHQv95081Reb9pkGjzvMUmfpTiyNoMG9khkuQoUa
aZeWlakLvrZUeLlxiq4yb0agAu5/AI89UpFvS9hkXttlER7dK10iXkI9saYfLhHr
w6wgsC+ab10h/nJjVbYIlrF6INo=
-----END CERTIFICATE-----
Generated at Sat Feb 7 04:30:45 2026 by rpki-client