This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C98AD08E04B11F0BFD69AA0DAE4EC9C.roa
File:                     0C98AD08E04B11F0BFD69AA0DAE4EC9C.roa (raw, json)
Hash identifier:          wZXZJ44rWRD5u/f81FstbnPKgsTh1DmJyu4AROOEEDs=
Subject key identifier:   5C:A1:EF:D7:E2:83:AB:91:B6:A9:2D:9B:8E:87:FC:7A:05:DE:07:C5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B079
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C98AD08E04B11F0BFD69AA0DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 22:02:19 +0000
ROA not before:           Tue 23 Dec 2025 22:02:14 +0000
ROA not after:            Thu 29 Jan 2026 22:02:14 +0000
asID:                     134365
IP address blocks:        154.198.40.0/24 maxlen: 24
                          154.198.41.0/24 maxlen: 24
                          154.198.42.0/24 maxlen: 24
                          154.198.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 06:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110713 (0x1b079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 22:02:14 2025 GMT
            Not After : Jan 29 22:02:14 2026 GMT
        Subject: CN=694b116b-ca78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:24:11:2f:7e:6a:24:07:71:fd:bd:e0:7e:
                    16:9a:e4:d2:75:d5:00:19:ab:61:6c:49:4d:08:90:
                    ff:20:a4:44:67:0a:15:3f:cb:ae:ed:e4:16:75:e5:
                    26:2e:38:3b:79:6a:7e:89:99:57:a7:e9:25:ed:c4:
                    32:69:e9:ed:48:6f:af:9e:81:ca:15:c8:9b:7b:45:
                    84:d7:0e:e3:cc:48:96:d3:95:d8:60:3a:19:86:2b:
                    d7:95:2e:b5:d9:25:a5:84:9d:b9:47:f7:aa:61:a7:
                    e5:bf:e6:a4:69:bd:f9:34:22:0a:9c:a1:92:69:49:
                    4d:48:eb:b0:a7:61:8b:34:71:34:2e:e9:4f:54:19:
                    93:0f:0d:83:3e:f2:9a:be:60:7f:40:3e:af:22:2b:
                    2e:f3:d4:49:eb:f1:a9:bf:32:14:35:a8:e7:c1:9f:
                    f5:1d:65:0d:da:fa:a5:49:29:47:4c:cf:a4:b9:9a:
                    e3:3f:9d:b7:d7:85:08:ca:ff:df:6e:8a:6f:41:64:
                    73:63:83:3b:dd:60:92:cd:61:3a:1c:28:9f:8f:b4:
                    4f:26:c5:9b:59:a7:d5:da:ff:e3:54:d1:c3:38:63:
                    6c:af:b6:09:69:37:7e:3a:ed:db:44:7d:1f:7d:4b:
                    5c:f6:1b:24:36:a8:be:0e:ab:6f:79:eb:a3:92:b5:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:EF:D7:E2:83:AB:91:B6:A9:2D:9B:8E:87:FC:7A:05:DE:07:C5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C98AD08E04B11F0BFD69AA0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:88:fa:96:31:58:fe:d4:2c:39:99:34:d5:a9:1b:0c:b1:26:
         70:1b:20:ba:ba:5a:51:21:39:4f:63:fd:24:d7:4d:74:da:d8:
         b8:7c:14:f9:ee:e0:cd:ca:46:39:de:6c:99:d8:cf:98:c1:fa:
         71:f6:a0:08:17:4b:57:16:7b:01:37:77:81:60:e1:27:6e:7d:
         ec:3e:95:42:00:74:4c:da:f3:8c:d7:f5:e8:c2:0e:67:51:9f:
         23:75:43:11:85:13:32:c9:2f:a9:10:fa:87:8b:28:ec:35:79:
         a4:3f:48:04:14:06:bf:84:6b:80:9a:06:e8:2b:e4:a4:f2:ce:
         58:e2:49:72:2b:11:ae:10:bb:8b:2b:5a:82:71:c8:d3:ca:1e:
         1f:3a:1a:3b:11:51:11:ec:9f:18:40:f4:63:e7:7c:43:65:38:
         57:fd:0c:61:0d:a2:5a:ca:a1:96:46:4c:31:be:cd:19:2c:f8:
         e7:c3:01:98:84:b2:57:4d:55:05:65:8f:57:13:9a:0f:30:79:
         17:a7:44:9c:43:69:b6:29:3e:eb:3e:1d:4a:8c:37:8e:35:02:
         9e:00:ea:a6:c1:74:88:21:1a:3c:0a:98:69:85:9a:39:3f:1a:
         5f:b3:f2:8e:b6:60:fd:cf:4f:41:16:74:72:0e:cd:45:b0:9e:
         f8:2f:86:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 15:16:27 2026 by rpki-client