This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa
File:                     FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa (raw, json)
Hash identifier:          x7exxP2PvrkzXg2ix0W+iY27Dg1chGMloRCXgNJLLaM=
Subject key identifier:   DC:53:28:AF:AE:DB:FC:49:19:90:08:3F:3F:46:EA:1E:6C:EE:9D:93
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       023B
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 07:58:37 +0000
ROA not before:           Wed 28 Jan 2026 07:58:30 +0000
ROA not after:            Fri 28 Jan 2028 07:58:30 +0000
asID:                     12091
IP address blocks:        196.31.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 04:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Jan 28 07:58:30 2026 GMT
            Not After : Jan 28 07:58:30 2028 GMT
        Subject: CN=6978702d-f368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:7d:b3:56:ca:e8:3c:f9:52:83:7e:17:0c:
                    56:6c:c9:6b:c4:35:34:b1:29:ef:fc:c8:c3:18:fe:
                    5a:41:6e:17:31:3b:ed:f9:b1:df:c7:19:29:3f:a4:
                    60:b4:9a:b8:d2:9a:bb:72:86:99:ba:37:c5:a0:22:
                    7a:11:78:45:e5:d3:e6:5a:29:ff:3d:d3:ce:c4:1f:
                    4f:00:d6:09:64:d5:1f:0b:46:27:4a:16:f3:5e:4d:
                    c4:c4:5a:18:5a:14:b9:b6:dc:ea:b8:bc:9c:e6:f6:
                    3a:58:6e:9c:98:16:48:7c:d4:a5:e2:e9:0f:d0:0b:
                    8a:70:79:c0:be:3b:5e:24:b7:f7:f3:e8:67:fc:a5:
                    a9:99:ca:2b:a5:58:fb:9b:1a:82:3f:76:8f:2f:64:
                    67:1d:43:00:6c:e3:50:a7:b1:89:8e:4b:d7:79:fd:
                    70:50:f8:3e:ad:2f:58:1d:7b:6a:9f:94:31:5f:1f:
                    39:ba:58:c6:44:7f:43:11:da:47:14:ae:4d:9b:b8:
                    cc:9f:24:e0:01:55:92:6d:68:f2:f3:3a:ae:f5:99:
                    17:c1:91:c0:67:2e:98:2c:9e:7f:1d:cf:89:25:3a:
                    09:a5:12:8e:dd:07:94:42:6c:ca:39:14:09:25:5d:
                    c6:7b:cc:3a:5a:72:a4:6d:bf:e2:41:c2:30:7a:6a:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:53:28:AF:AE:DB:FC:49:19:90:08:3F:3F:46:EA:1E:6C:EE:9D:93
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:0a:82:ba:17:bb:ef:e5:04:65:18:0d:9d:bc:e1:b5:5e:a7:
         37:85:0d:fd:47:60:1d:d3:3b:38:b7:fd:5d:b9:84:77:3a:ca:
         a5:b3:ed:3f:48:94:cb:46:e6:a3:e0:76:26:e8:31:1e:7c:e1:
         90:20:8d:6a:81:fe:d2:9d:c4:01:ee:b6:b1:bb:11:1f:28:df:
         e9:41:ac:7a:c6:96:be:e9:49:b7:45:14:bc:28:96:69:fd:a2:
         e7:d2:64:80:e7:04:57:44:5e:ed:41:1f:f7:ee:d6:c1:7d:14:
         21:ce:d6:98:cf:89:ac:9d:68:3f:e5:1d:66:ac:fe:8c:d1:24:
         fc:e6:5e:fb:0c:94:99:b6:db:51:54:f3:b9:bc:ec:01:5d:e4:
         6f:21:8f:a7:f5:dc:d3:f5:f7:dc:17:09:d7:e2:db:9c:f8:88:
         b9:97:c6:a3:c5:e1:58:79:69:39:73:df:58:01:58:80:b2:d5:
         34:15:01:19:50:70:7e:8e:09:96:db:7c:d4:2f:a5:74:92:64:
         bb:58:34:4c:68:2c:e0:5e:6b:5a:d2:1f:89:42:7b:1e:a2:2b:
         b3:ce:b2:a3:7f:e0:8d:1f:16:55:a7:41:08:62:d6:0f:a6:8d:
         2c:2b:25:1b:4b:90:5d:5b:92:1f:8b:7c:cf:b5:80:5f:9b:14:
         0b:49:ba:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:29:24 2026 by rpki-client