This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa
File:                     D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa (raw, json)
Hash identifier:          yWjSVgCdgImWguwsXiqvgBYxXDi5Rc5fmfRehJcd2BE=
Subject key identifier:   28:EF:38:4A:D0:83:38:77:70:28:B5:1E:EA:5E:88:F1:F7:BB:43:C4
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       0243
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 11:03:35 +0000
ROA not before:           Wed 28 Jan 2026 11:03:30 +0000
ROA not after:            Fri 28 Jan 2028 11:03:30 +0000
asID:                     16637
IP address blocks:        41.195.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 11:03:30 2026 GMT
            Not After : Jan 28 11:03:30 2028 GMT
        Subject: CN=69789b87-b723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8c:f6:fb:33:80:74:cc:fc:0c:b7:af:c8:24:
                    d2:60:d9:e9:f9:08:ce:a5:a6:73:bf:80:c3:e4:63:
                    a4:7f:93:be:af:aa:ec:c9:2c:70:98:97:0a:c3:a4:
                    b6:1a:4e:2d:3b:81:28:c2:5c:27:66:71:99:15:5b:
                    c0:2d:7f:8b:2a:cf:a7:c6:1c:90:b5:02:d5:4a:bc:
                    64:98:30:cc:c1:9d:85:0a:ed:fa:b5:c9:67:da:2b:
                    5e:42:49:6c:f1:fa:da:e3:c9:38:71:af:46:b7:cb:
                    cb:4c:16:99:16:ea:72:ed:92:6c:64:07:54:e4:9e:
                    e7:a8:0f:19:9d:6e:88:ba:d4:f8:f2:e9:f3:22:fc:
                    20:4a:64:16:ac:75:fd:e6:d6:ce:fb:44:4a:ba:f8:
                    08:3b:23:73:9a:01:69:62:d9:90:e0:d7:f2:8f:19:
                    a7:2a:70:bf:e4:e9:f4:08:00:9e:c7:25:20:e8:52:
                    f3:38:96:07:52:1b:a6:45:83:45:be:85:9c:b5:6a:
                    07:ca:f8:71:0a:c1:77:03:99:21:fb:c1:58:e0:0f:
                    48:ff:2d:35:90:53:0c:40:ff:e8:5c:88:7b:2d:6a:
                    70:05:d8:f0:62:61:72:18:51:fc:60:d5:4e:75:1e:
                    be:9c:33:64:dd:89:4b:33:2d:fd:a2:13:9f:a7:d7:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:38:4A:D0:83:38:77:70:28:B5:1E:EA:5E:88:F1:F7:BB:43:C4
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:80:75:e8:3d:6e:bd:1b:48:0a:7d:2b:64:b9:23:05:a3:3e:
         31:27:17:fa:9f:34:6b:b5:21:cb:83:1e:c4:9f:c2:a7:90:41:
         8d:0b:9a:e0:a7:bb:27:fe:41:3d:47:31:cc:5f:fe:50:3d:9f:
         63:d7:88:7f:f5:75:ff:a2:9b:d7:2c:55:b9:9c:32:25:44:ce:
         e2:73:0e:9f:66:41:4d:63:05:69:26:72:24:94:5a:01:d8:3c:
         a3:17:46:e1:6e:ef:5b:35:eb:4f:4c:86:bd:f2:8f:83:09:72:
         06:d6:60:94:aa:2f:3a:f5:ad:1e:39:84:30:5c:69:b5:6b:4b:
         00:4f:e7:26:d9:d3:50:e2:ed:7c:75:ac:db:23:cf:8e:d4:3e:
         52:d3:6a:47:6d:ef:37:d5:43:26:8f:b1:1f:90:a5:5f:ac:69:
         06:a2:3f:2a:35:1f:3b:7f:62:26:1f:97:d8:92:a8:f9:96:a4:
         71:3b:6d:73:b7:97:05:97:e1:d9:70:66:4d:14:9f:42:f4:27:
         1e:e8:96:d8:af:e2:b2:5a:bd:af:2e:2b:2d:61:b5:a7:39:97:
         1f:e2:dc:6f:5d:75:3c:26:33:ed:40:ca:54:68:38:0f:39:da:
         e4:c5:b1:e6:15:a0:3d:dd:de:34:8f:9b:68:9c:b5:f6:13:ae:
         56:bf:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:25 2026 by rpki-client