This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/4729B37CFB4911F0A899D89FDAE4EC9C.roa
File:                     4729B37CFB4911F0A899D89FDAE4EC9C.roa (raw, json)
Hash identifier:          yT0NPsWigo1cldoU0WJEXq2hmJdWuDarxTKcbBJC6Mo=
Subject key identifier:   4F:E5:2E:8F:C7:BD:E5:7A:AF:51:3F:0F:C5:A3:21:A7:29:BC:4A:DC
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       022B
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/4729B37CFB4911F0A899D89FDAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 06:27:40 +0000
ROA not before:           Wed 28 Jan 2026 06:27:35 +0000
ROA not after:            Fri 28 Jan 2028 06:27:35 +0000
asID:                     12091
IP address blocks:        196.11.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 06:27:35 2026 GMT
            Not After : Jan 28 06:27:35 2028 GMT
        Subject: CN=69785adc-1540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:f3:d2:e7:c6:47:3f:f8:54:19:e1:2b:a2:
                    a0:8e:fb:be:a3:6d:a4:43:6f:f7:9f:a5:48:83:16:
                    66:7b:d0:61:d8:fa:0f:a0:40:09:9a:1f:5a:dd:60:
                    4c:7f:ed:7c:4c:0d:b8:de:b5:55:ad:88:52:b5:af:
                    15:39:62:ee:c3:7f:19:89:34:27:57:d9:ff:f1:31:
                    29:04:15:12:17:d3:1d:bc:b8:40:a9:fe:e6:b7:ea:
                    a2:f6:81:64:6f:8b:11:c8:13:87:4a:a6:aa:65:77:
                    e1:65:22:e3:73:54:ea:74:0b:85:66:37:42:1c:3c:
                    5c:28:e7:a6:b5:b7:b5:c1:a9:01:2d:90:1c:f9:9a:
                    5f:43:71:5c:af:9f:ca:f3:65:e7:f6:37:4b:58:66:
                    bf:34:7e:66:ed:4a:30:47:40:c0:8c:1f:a8:49:87:
                    08:bd:7a:0e:a7:6d:44:e2:ac:fc:e3:5c:c8:77:86:
                    2e:12:2d:37:d8:8d:99:33:58:40:bb:4c:05:98:d7:
                    75:22:40:02:f8:45:a5:5d:25:b8:7a:f0:c0:ca:6e:
                    01:ce:4b:7f:2a:66:eb:54:93:77:03:4b:7a:b3:7a:
                    de:6a:cc:39:69:fa:31:63:e6:2a:48:1f:14:ab:61:
                    67:db:3d:65:fc:35:a3:4b:3a:4a:9d:a4:77:f1:1b:
                    bc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:2E:8F:C7:BD:E5:7A:AF:51:3F:0F:C5:A3:21:A7:29:BC:4A:DC
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/4729B37CFB4911F0A899D89FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.11.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:97:e9:49:4a:8f:3c:e1:cd:04:77:8f:2b:b0:38:bf:6f:e9:
         fe:f9:ed:3e:fe:9c:ee:ba:ff:eb:00:1b:ad:37:39:5a:bf:b9:
         1e:60:4e:48:91:62:d2:cf:e0:94:ff:95:59:75:6e:7b:38:ef:
         01:50:cb:15:ec:65:7a:05:55:54:40:d8:ef:4c:bb:c1:36:9b:
         99:9a:38:8e:1e:b7:01:36:eb:f0:a4:d7:b7:db:b6:2c:2f:ee:
         13:b0:be:7e:11:28:3f:3c:5f:86:dd:4c:8a:46:b0:77:19:b5:
         44:4b:35:6d:6f:e6:43:69:5d:2e:d1:8b:0e:2b:58:cf:e2:18:
         d0:3b:5f:d6:03:ad:4c:f7:86:bc:22:7c:17:85:58:8e:6b:25:
         23:83:c0:f2:1d:37:19:12:11:6b:91:45:2f:1d:23:47:f4:83:
         c3:22:a1:6e:c4:39:6a:4d:b1:92:e5:02:cb:cc:97:b6:52:eb:
         32:c9:fb:0f:d0:60:c4:de:20:bc:92:d7:9a:a4:83:5f:5c:0a:
         52:2e:86:de:e4:bd:3d:06:90:d8:ff:81:3a:89:3d:6d:83:d9:
         af:bb:1e:c5:5a:20:85:d4:19:53:82:cd:ce:43:1c:29:0b:e4:
         b9:85:13:30:91:7f:55:46:aa:ac:31:e9:b8:8a:3d:59:a3:d8:
         d1:99:a6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:24 2026 by rpki-client