This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/073F8D34FB5511F092C4A7E6DAE4EC9C.roa
File:                     073F8D34FB5511F092C4A7E6DAE4EC9C.roa (raw, json)
Hash identifier:          aQiVzz7CCp4LQ4sRPU9y/pF5XqpbYyhPkGWXchU0sHA=
Subject key identifier:   DC:EF:A4:BE:CC:56:00:BA:47:4E:DB:A3:C5:D3:83:90:1C:54:B0:39
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0237
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/073F8D34FB5511F092C4A7E6DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 07:51:46 +0000
ROA not before:           Wed 28 Jan 2026 07:51:42 +0000
ROA not after:            Fri 28 Jan 2028 07:51:42 +0000
asID:                     16637
IP address blocks:        196.30.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 07:51:42 2026 GMT
            Not After : Jan 28 07:51:42 2028 GMT
        Subject: CN=69786e92-4b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:a4:ca:36:3f:52:16:34:3d:d4:ba:7b:55:
                    e8:51:5c:59:a1:1f:55:22:c9:e6:de:9b:b0:d2:76:
                    bc:3a:55:86:6f:98:25:00:15:cf:c9:c1:64:97:95:
                    f5:13:07:a0:07:8d:91:a7:0b:f0:be:11:12:62:75:
                    03:ea:a9:14:dd:a5:98:d9:80:94:b8:4d:34:d3:1b:
                    ae:fd:c1:be:d4:f3:50:b9:c4:56:20:d6:f5:4b:ad:
                    56:cd:58:7b:e0:c6:b1:b0:bb:1d:95:d4:4f:d0:68:
                    08:69:eb:97:c2:2e:88:98:3f:28:8a:37:ba:54:2a:
                    0e:13:0a:91:f6:4e:3f:b7:65:90:54:8e:09:77:53:
                    88:b4:f7:10:2b:d8:36:ec:05:fe:0e:61:d6:92:ea:
                    d0:0d:cd:b4:7f:ed:e3:95:a8:1b:46:a9:ec:f0:eb:
                    ec:44:0e:6f:0e:49:7c:3c:0e:07:7b:93:9b:83:64:
                    d4:27:90:30:dd:78:e2:4f:95:50:8e:89:9b:a4:90:
                    c7:5f:2b:33:19:fd:9e:2b:f8:07:07:44:dd:96:3b:
                    2e:ec:8d:34:cb:5d:c9:bd:c9:01:9c:dd:50:76:9a:
                    04:95:3d:c0:fc:cb:4b:f9:b8:8e:ba:8b:f3:1d:9d:
                    f3:ec:9c:52:4b:4e:26:e6:3d:93:82:b1:3c:d6:a8:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:A4:BE:CC:56:00:BA:47:4E:DB:A3:C5:D3:83:90:1C:54:B0:39
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/073F8D34FB5511F092C4A7E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:eb:52:31:bc:b9:5a:16:d8:4c:9a:66:83:44:91:a2:ce:
         85:41:cb:37:8a:e3:4a:ff:70:05:74:b2:66:5f:cf:fb:28:47:
         29:c1:96:30:78:8d:02:74:11:50:f0:3e:59:66:38:c7:fa:95:
         ce:fc:e3:11:e3:80:97:5e:bf:f8:f2:39:7d:14:5a:f8:a0:c8:
         27:19:99:95:98:c9:70:da:1c:f7:00:e7:81:80:f3:19:8e:03:
         f4:33:eb:7c:89:bf:38:c8:f6:4d:d9:0b:65:6f:c9:85:90:56:
         29:27:99:f0:db:3b:6d:5c:8d:29:ff:c2:7b:17:54:75:e4:fd:
         b9:79:0c:2f:7a:90:6a:82:45:a5:ad:14:c4:a1:e9:68:27:91:
         57:dc:6b:fc:92:6f:3f:67:d7:ba:8c:cc:70:d0:84:ad:09:70:
         26:60:12:7f:41:dd:f5:80:69:5f:61:c5:35:f2:1f:2e:07:13:
         46:5c:76:32:4b:0e:39:d6:a5:06:fd:7a:2d:24:1b:f4:5c:a9:
         cf:fe:fe:3b:85:20:be:a4:cc:0a:9a:06:4b:94:24:b3:27:2c:
         d6:bd:03:88:be:6a:e9:4d:f5:2d:a0:ef:67:05:fd:3b:ee:9e:
         67:83:99:f6:a1:f8:43:5b:c6:f0:ca:ca:4a:ca:c8:ff:5d:7e:
         4d:fa:ea:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:25 2026 by rpki-client