This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/168C273AFB5411F09E701DE2DAE4EC9C.roa
File:                     168C273AFB5411F09E701DE2DAE4EC9C.roa (raw, json)
Hash identifier:          2fNUGnW/8pzXCydHd5WxxxXL3gbLVKfvLhHQevEpQPs=
Subject key identifier:   E9:C8:E2:E7:C8:53:97:12:AE:04:F9:76:E7:76:23:B2:1C:79:06:39
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0235
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/168C273AFB5411F09E701DE2DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 07:45:03 +0000
ROA not before:           Wed 28 Jan 2026 07:44:58 +0000
ROA not after:            Fri 28 Jan 2028 07:44:58 +0000
asID:                     16637
IP address blocks:        196.7.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 07:44:58 2026 GMT
            Not After : Jan 28 07:44:58 2028 GMT
        Subject: CN=69786cfe-fa4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:56:ea:b7:aa:7b:32:b0:54:91:da:0e:f2:
                    b9:35:52:84:74:ed:64:c5:47:3b:68:cc:4c:6f:5e:
                    20:71:35:65:b4:56:28:e3:02:bf:38:9b:84:6a:37:
                    82:9e:6e:3c:f3:a6:4d:f4:01:a1:ed:8a:1c:32:23:
                    87:27:f3:4a:fc:ab:d7:c2:c0:b6:c0:4f:33:c9:49:
                    e2:87:69:b3:57:e5:2a:ec:32:93:6a:47:25:d3:4e:
                    e6:83:b5:cd:6f:b5:78:24:d5:15:c8:09:1d:c3:52:
                    8f:ff:9d:7d:00:66:bb:30:f3:ba:9b:83:34:6d:89:
                    e9:8b:43:fc:96:e0:78:bb:5b:a3:2c:33:8c:4f:43:
                    ba:f4:44:a2:18:66:25:16:c6:37:b9:16:95:29:63:
                    e9:d9:b6:f4:73:a6:86:ae:b9:0b:0e:32:1b:59:11:
                    e3:ae:44:c0:f7:b3:68:7f:ba:2b:6f:d6:5f:c4:11:
                    c9:6d:c0:d6:a7:d5:bb:02:3d:57:f8:5f:7c:1b:1d:
                    9d:2f:45:af:36:bc:28:e5:62:9a:a2:45:f6:b2:01:
                    86:f9:7c:1d:79:04:50:10:4e:96:b8:da:38:37:68:
                    cd:29:7d:5a:6d:d7:46:b6:03:45:43:72:1b:0f:06:
                    24:98:50:67:55:70:cb:d6:3d:d6:80:7a:9a:56:f2:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C8:E2:E7:C8:53:97:12:AE:04:F9:76:E7:76:23:B2:1C:79:06:39
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/168C273AFB5411F09E701DE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:02:2d:89:4d:9f:ee:38:43:c6:6e:27:e1:25:29:c8:5f:6c:
         e2:91:87:d8:70:f5:77:c9:72:f8:6a:f1:7d:95:f8:f1:ea:d7:
         c8:0b:88:fb:3e:0a:f9:fd:08:ae:4e:37:d0:9a:f3:8f:71:29:
         1f:ae:cb:5f:4e:f5:8c:47:94:92:21:2f:d5:c1:a2:0f:43:14:
         26:4e:6c:45:c7:2c:0d:a6:ed:64:4b:d0:b6:30:b9:59:b3:94:
         c4:56:b0:15:31:97:0c:87:4c:24:ac:d4:8a:7a:d6:2b:4a:dc:
         1c:89:8a:37:67:55:b1:1b:b6:2e:bc:74:1d:fa:a7:9d:d9:a9:
         5b:f4:3f:f5:f6:75:70:cd:4f:23:fd:3b:18:c0:ff:38:90:30:
         1d:2c:d3:79:9c:57:24:b9:9a:cb:c9:3a:24:a7:f9:be:fc:86:
         56:49:e2:20:f5:48:41:c1:51:3b:23:5b:97:c8:6a:57:c4:7c:
         5d:a6:7c:c5:bd:c6:47:68:e5:fb:8c:98:fe:62:80:8a:b3:81:
         3d:11:8c:db:87:73:40:39:14:d5:33:36:5a:e9:a3:6b:9d:fc:
         9d:96:63:d5:fb:f7:08:50:31:72:90:9a:b6:b2:d4:52:64:87:
         fb:a5:80:cb:42:86:8f:87:00:10:ea:2c:c6:90:34:9f:b7:67:
         9a:45:33:c1
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3OEZBRjExMC8GA1UEBRMoMjRCNUVFNjc0NzE1QTJFRUVFODg2NEVBNUY1RUU0
NzMyM0NGNzY2QzAeFw0yNjAxMjgwNzQ0NThaFw0yODAxMjgwNzQ0NThaMBgxFjAU
BgNVBAMTDTY5Nzg2Y2ZlLWZhNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs9Vbqt6p7MrBUkdoO8rk1UoR07WTFRztozExvXiBxNWW0VijjAr84m4Rq
N4Kebjzzpk30AaHtihwyI4cn80r8q9fCwLbATzPJSeKHabNX5SrsMpNqRyXTTuaD
tc1vtXgk1RXICR3DUo//nX0AZrsw87qbgzRtiemLQ/yW4Hi7W6MsM4xPQ7r0RKIY
ZiUWxje5FpUpY+nZtvRzpoauuQsOMhtZEeOuRMD3s2h/uitv1l/EEcltwNan1bsC
PVf4X3wbHZ0vRa82vCjlYpqiRfayAYb5fB15BFAQTpa42jg3aM0pfVpt10a2A0VD
chsPBiSYUGdVcMvWPdaAeppW8uBDAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU6cji
58hTlxKuBPl253Yjshx5BjkwHwYDVR0jBBgwFoAUJLXuZ0cVou7uiGTqX17kcyPP
dmwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzhGLzkyNUM4MEZDNjUwQjExRUZCRTI5MDI1Njc2MkU5NTFBL0pMWHVa
MGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pMWHVaMGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjc2NzhGLzkyNUM4MEZDNjUwQjExRUZCRTI5MDI1Njc2
MkU5NTFBLzE2OEMyNzNBRkI1NDExRjA5RTcwMURFMkRBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDEBzANBgkqhkiG9w0BAQsF
AAOCAQEAeQItiU2f7jhDxm4n4SUpyF9s4pGH2HD1d8ly+GrxfZX48erXyAuI+z4K
+f0Irk430Jrzj3EpH67LX071jEeUkiEv1cGiD0MUJk5sRccsDabtZEvQtjC5WbOU
xFawFTGXDIdMJKzUinrWK0rcHImKN2dVsRu2Lrx0HfqnndmpW/Q/9fZ1cM1PI/07
GMD/OJAwHSzTeZxXJLmay8k6JKf5vvyGVkniIPVIQcFROyNbl8hqV8R8XaZ8xb3G
R2jl+4yY/mKAirOBPRGM24dzQDkU1TM2Wumja538nZZj1fv3CFAxcpCatrLUUmSH
+6WAy0KGj4cAEOosxpA0n7dnmkUzwQ==
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:33:41 2026 by rpki-client