This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa
File:                     EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa (raw, json)
Hash identifier:          emghLEG84DuosUhnolF3yQQxO1sKUhr3+10JwSDZbjU=
Subject key identifier:   B6:92:AD:A6:12:67:79:F9:FD:35:F8:69:FE:A4:2E:14:96:77:71:15
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0365
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa
Signing time:             Thu 29 Jan 2026 09:14:32 +0000
ROA not before:           Thu 29 Jan 2026 09:14:25 +0000
ROA not after:            Wed 31 Dec 2036 09:14:25 +0000
asID:                     36912
IP address blocks:        41.202.192.0/24 maxlen: 24
                          41.202.193.0/24 maxlen: 24
                          41.202.195.0/24 maxlen: 24
                          41.202.196.0/24 maxlen: 24
                          41.202.197.0/24 maxlen: 24
                          41.202.198.0/24 maxlen: 24
                          41.202.200.0/24 maxlen: 24
                          41.202.201.0/24 maxlen: 24
                          41.202.202.0/24 maxlen: 24
                          41.202.203.0/24 maxlen: 24
                          41.202.206.0/24 maxlen: 24
                          41.202.207.0/24 maxlen: 24
                          41.202.210.0/24 maxlen: 24
                          41.202.211.0/24 maxlen: 24
                          41.202.220.0/24 maxlen: 24
                          41.202.221.0/24 maxlen: 24
                          41.202.222.0/24 maxlen: 24
                          41.202.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Feb 2026 03:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Jan 29 09:14:25 2026 GMT
            Not After : Dec 31 09:14:25 2036 GMT
        Subject: CN=697b24f8-44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:2b:89:22:21:a7:c1:b6:92:2c:98:05:08:
                    40:38:9d:c8:88:46:78:c9:72:7d:35:99:1b:fe:c7:
                    96:46:01:9d:76:0f:4c:ca:50:13:43:1c:19:b8:e8:
                    b4:f8:2a:80:c4:2a:30:ac:7e:96:e0:42:d4:99:31:
                    09:aa:11:36:a6:fd:08:58:73:07:fb:35:1a:b4:87:
                    49:83:db:4d:5d:3c:75:e9:58:a8:20:13:27:78:3a:
                    32:85:61:88:c6:94:e3:20:fc:03:49:87:f3:c5:07:
                    0e:5f:5e:05:71:b9:cf:07:6b:87:3e:b1:c2:37:96:
                    0b:1b:9e:5a:66:84:27:4c:f6:93:02:db:3a:f6:69:
                    6e:0a:f1:6b:df:bb:8f:1a:be:8e:ef:17:69:a1:45:
                    a1:82:85:57:43:9d:12:d6:ca:e0:f4:84:a2:80:b0:
                    fd:7d:37:f4:f3:47:ac:7f:7a:ba:44:c9:86:a9:59:
                    dc:f7:22:aa:52:54:92:46:70:45:b4:1d:5a:79:d8:
                    68:27:0f:04:70:40:9d:33:cc:f1:d8:cd:76:73:a4:
                    b2:b2:78:d6:c7:6f:44:b1:b8:03:90:36:6a:21:b6:
                    2e:59:fc:64:a6:92:56:d9:83:56:44:6d:9c:e8:94:
                    14:1b:b3:09:cb:d8:d4:37:0c:04:41:99:73:cd:cd:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:AD:A6:12:67:79:F9:FD:35:F8:69:FE:A4:2E:14:96:77:71:15
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.202.192.0/23
                  41.202.195.0-41.202.198.255
                  41.202.200.0/22
                  41.202.206.0/23
                  41.202.210.0/23
                  41.202.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:55:ad:19:bf:30:e7:95:14:07:e1:5c:09:c0:00:ed:5e:
         0f:a4:62:68:0c:97:0d:f7:43:b0:74:ed:7c:9b:a0:bd:3f:d6:
         21:be:00:fd:1f:de:d5:c7:1e:40:2f:64:85:0a:81:fc:b7:fd:
         4c:03:dc:8d:cb:dd:4f:68:ec:a9:d0:d5:f3:8b:72:ee:51:05:
         43:27:f3:0a:7e:5b:47:04:d2:8a:29:49:7c:78:a1:9a:e7:8c:
         d9:07:ce:f5:fd:6f:5f:9d:c7:35:be:72:96:22:8a:71:62:5d:
         3f:19:92:f6:53:e4:d1:7c:f0:d5:32:70:3f:45:0b:1b:5a:9c:
         7f:3b:9f:30:ce:4a:b2:b3:fa:1c:22:ef:d8:f2:83:bd:0a:ea:
         22:c6:38:38:2c:f4:e4:88:64:44:dd:9e:2c:4d:49:32:e6:b5:
         9a:1f:ff:c5:b1:18:70:3c:17:08:5c:df:be:8e:15:6e:2e:be:
         45:1c:b7:28:b4:b0:34:84:ac:9d:70:0d:ef:0a:6a:d5:c0:21:
         87:6f:27:fd:f1:7d:2b:ba:d7:7c:41:9a:78:49:88:f5:87:a3:
         09:86:64:29:5f:16:7a:46:3d:d9:c7:ab:95:12:18:c8:1a:bf:
         06:9b:17:21:2d:0f:0e:3e:c5:64:26:7a:29:c7:ce:f3:4f:95:
         79:0d:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 01:22:57 2026 by rpki-client