This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/9DF3C418FB7111F0A5973594DAE4EC9C.roa
File:                     9DF3C418FB7111F0A5973594DAE4EC9C.roa (raw, json)
Hash identifier:          /1YlMMU4WG2QEhz0bolihk62C9fCsQxljp6A/1sNcv0=
Subject key identifier:   C2:E1:2F:B3:E7:D0:DA:93:0C:55:B0:69:EC:6E:40:2D:FF:4D:9E:59
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0255
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/9DF3C418FB7111F0A5973594DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 11:16:25 +0000
ROA not before:           Wed 28 Jan 2026 11:16:18 +0000
ROA not after:            Fri 28 Jan 2028 11:16:18 +0000
asID:                     16637
IP address blocks:        197.64.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 11:16:18 2026 GMT
            Not After : Jan 28 11:16:18 2028 GMT
        Subject: CN=69789e89-7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:81:fa:4c:86:3b:c8:5a:c9:7e:35:1a:fc:
                    74:f3:d4:14:fa:80:4a:45:c1:29:dc:72:c9:2e:20:
                    64:6b:43:c7:10:ab:14:43:6f:68:13:15:fd:97:b2:
                    15:95:c6:4c:27:b8:97:28:3b:0a:a9:d6:ec:f8:e5:
                    d7:fc:a0:b9:0c:aa:62:2d:b0:ce:5f:c1:e1:39:c7:
                    7b:a2:a1:a5:1e:1f:ff:49:da:10:8c:bc:3c:32:e8:
                    ee:e6:4f:35:ad:c2:99:b8:6c:8a:ac:e4:dd:b5:57:
                    f6:cc:e9:2a:5f:76:1c:c2:8a:a0:46:f3:24:83:71:
                    ef:08:e0:e8:6e:df:0f:27:d3:b9:53:fa:45:ec:0d:
                    58:fe:f2:b4:ac:5a:cd:ab:13:25:4b:2f:84:2b:f3:
                    91:01:66:f4:58:2d:55:98:f0:13:b2:1b:76:ef:78:
                    89:c5:86:fc:a8:ca:1b:49:66:a7:62:13:ca:44:b5:
                    4d:5a:c7:05:4f:57:73:06:0f:52:71:82:e6:e8:07:
                    70:36:1a:89:14:cc:1e:cc:9c:44:ec:bf:df:89:81:
                    b2:20:fa:86:f4:6f:ff:e1:c4:fb:43:1b:48:f7:bf:
                    78:53:c0:7b:59:9d:2e:82:18:f1:66:35:41:48:05:
                    72:f0:77:76:92:87:de:e5:a7:ea:e3:54:37:54:7c:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:2F:B3:E7:D0:DA:93:0C:55:B0:69:EC:6E:40:2D:FF:4D:9E:59
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/9DF3C418FB7111F0A5973594DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  197.64.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:3e:e3:a3:ab:2b:b8:5a:0d:f6:2c:02:c2:44:a8:54:a4:
         a1:3d:fd:a4:df:98:90:7a:d8:28:5d:bf:ae:10:10:9d:1a:7c:
         29:97:71:00:68:0a:37:5b:0f:aa:0d:e5:1d:12:8c:4f:6b:76:
         76:85:ee:2a:47:f3:9e:00:45:4b:53:90:67:fc:32:dc:62:de:
         ee:ec:c7:9b:53:50:5b:02:16:c6:21:d7:fe:2f:89:53:5a:3c:
         3c:17:7a:f9:4d:2c:2a:4c:1c:91:85:84:62:3d:24:26:0e:c4:
         40:50:16:39:c1:6e:b8:9f:aa:7f:bd:6f:5b:52:a0:03:31:62:
         fc:65:25:c2:6c:bc:0d:83:09:d7:20:39:00:13:cf:01:b1:6a:
         7f:27:5d:3b:97:2b:ee:66:6d:7f:67:7a:08:ff:7f:cf:03:30:
         75:54:53:53:a1:2f:30:46:f0:57:31:b6:f9:e8:f9:3c:01:6f:
         f8:01:38:3e:c1:dd:c4:98:7b:71:f9:6c:fb:5e:1e:e4:0d:6e:
         aa:1d:c1:bd:6b:04:98:58:46:31:bb:b2:9d:68:a9:2f:82:51:
         8d:6c:80:f9:ad:e5:68:a0:f1:93:76:d0:4c:9c:f1:5a:2e:b5:
         a6:82:3b:e8:ba:1f:be:6b:28:8c:46:42:7e:3e:4a:99:b2:d4:
         cd:46:3a:f4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3OEZBRjExMC8GA1UEBRMoMjRCNUVFNjc0NzE1QTJFRUVFODg2NEVBNUY1RUU0
NzMyM0NGNzY2QzAeFw0yNjAxMjgxMTE2MThaFw0yODAxMjgxMTE2MThaMBgxFjAU
BgNVBAMTDTY5Nzg5ZTg5LTc4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkZIH6TIY7yFrJfjUa/HTz1BT6gEpFwSnccskuIGRrQ8cQqxRDb2gTFf2X
shWVxkwnuJcoOwqp1uz45df8oLkMqmItsM5fweE5x3uioaUeH/9J2hCMvDwy6O7m
TzWtwpm4bIqs5N21V/bM6SpfdhzCiqBG8ySDce8I4Ohu3w8n07lT+kXsDVj+8rSs
Ws2rEyVLL4Qr85EBZvRYLVWY8BOyG3bveInFhvyoyhtJZqdiE8pEtU1axwVPV3MG
D1JxguboB3A2GokUzB7MnETsv9+JgbIg+ob0b//hxPtDG0j3v3hTwHtZnS6CGPFm
NUFIBXLwd3aSh97lp+rjVDdUfD6VAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUwuEv
s+fQ2pMMVbBp7G5ALf9NnlkwHwYDVR0jBBgwFoAUJLXuZ0cVou7uiGTqX17kcyPP
dmwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzhGLzkyNUM4MEZDNjUwQjExRUZCRTI5MDI1Njc2MkU5NTFBL0pMWHVa
MGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pMWHVaMGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjc2NzhGLzkyNUM4MEZDNjUwQjExRUZCRTI5MDI1Njc2
MkU5NTFBLzlERjNDNDE4RkI3MTExRjBBNTk3MzU5NERBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwTFQDANBgkqhkiG9w0BAQsF
AAOCAQEACbk+46OrK7haDfYsAsJEqFSkoT39pN+YkHrYKF2/rhAQnRp8KZdxAGgK
N1sPqg3lHRKMT2t2doXuKkfzngBFS1OQZ/wy3GLe7uzHm1NQWwIWxiHX/i+JU1o8
PBd6+U0sKkwckYWEYj0kJg7EQFAWOcFuuJ+qf71vW1KgAzFi/GUlwmy8DYMJ1yA5
ABPPAbFqfyddO5cr7mZtf2d6CP9/zwMwdVRTU6EvMEbwVzG2+ej5PAFv+AE4PsHd
xJh7cfls+14e5A1uqh3BvWsEmFhGMbuynWipL4JRjWyA+a3laKDxk3bQTJzxWi61
poI76LofvmsojEZCfj5KmbLUzUY69A==
-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:23 2026 by rpki-client