This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4DE59CF12911F0AC5C3B7ADAE4EC9C.roa
File:                     0F4DE59CF12911F0AC5C3B7ADAE4EC9C.roa (raw, json)
Hash identifier:          m0GDiNjkkAaEmc6vjG4bXRdLYJBRR9qBQy8F4icUX9M=
Subject key identifier:   17:1C:D7:DA:C6:83:A3:14:DC:F4:BE:77:12:F8:08:51:E5:A8:28:B7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B495
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4DE59CF12911F0AC5C3B7ADAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 09:11:50 +0000
ROA not before:           Wed 14 Jan 2026 09:11:45 +0000
ROA not after:            Wed 25 Feb 2026 09:11:45 +0000
asID:                     61112
IP address blocks:        154.85.18.0/23 maxlen: 24
                          154.85.18.0/24 maxlen: 24
                          154.85.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111765 (0x1b495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 14 09:11:45 2026 GMT
            Not After : Feb 25 09:11:45 2026 GMT
        Subject: CN=69675dd6-6b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:1e:71:8a:e4:58:c2:98:77:54:d0:e8:fd:
                    36:fe:fb:b4:37:6a:5c:69:10:88:56:bb:7e:9a:24:
                    cf:46:62:a3:4e:90:d1:f3:e6:c9:9f:ed:5b:fc:e2:
                    83:8c:28:32:67:6e:11:94:81:11:d8:52:b9:bd:af:
                    19:54:ad:e8:fe:be:e1:2b:b7:3b:b9:9e:44:00:2b:
                    f8:0c:99:b6:6e:73:9d:65:c1:e5:a9:6c:dd:9d:c1:
                    d0:71:81:2a:ce:b6:a3:66:52:58:df:2f:be:f8:8b:
                    52:f1:b3:58:aa:ab:7d:09:30:2b:e7:a7:a6:6a:56:
                    22:a1:f1:4e:1b:22:5d:c4:c5:74:b5:f5:99:e3:0b:
                    f4:29:da:49:b4:bb:1f:ce:cb:93:d3:b6:89:52:42:
                    88:ff:e9:bc:1e:32:87:13:b3:5d:3b:e6:9e:22:37:
                    33:10:54:45:49:6a:a3:0d:78:d9:33:9c:b7:7d:91:
                    9c:c1:67:0d:3a:3e:23:cd:0b:80:31:10:ca:68:05:
                    2d:02:ea:46:9d:38:be:b5:be:e5:71:77:c5:5c:a7:
                    88:3f:54:df:b0:fb:e4:7b:9e:29:5f:e5:7a:cb:5a:
                    9b:8b:bf:c8:60:a1:1e:06:fd:67:21:fa:c5:c3:58:
                    2c:14:fc:aa:b5:b0:b1:fd:c4:dc:e0:82:bc:5f:0d:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:D7:DA:C6:83:A3:14:DC:F4:BE:77:12:F8:08:51:E5:A8:28:B7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F4DE59CF12911F0AC5C3B7ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.85.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:46:59:38:70:eb:de:1a:e2:91:9f:03:a2:0f:7b:b1:ff:
         93:5f:c7:da:3e:63:f4:5c:f6:14:8f:23:ad:08:01:3c:d6:bb:
         f6:02:7a:d2:44:6d:33:9d:d3:61:61:e5:20:78:2b:47:8b:95:
         93:92:7d:70:a8:c4:f5:d9:1f:b9:a5:7c:da:8e:79:84:f4:b3:
         a4:e9:97:d2:54:2a:ca:de:34:b9:5f:e2:20:f8:17:30:dc:32:
         a5:70:ca:82:6c:29:23:f8:ee:26:0f:ca:72:8d:7b:69:0a:0a:
         30:58:0e:ce:44:cd:06:67:c9:d9:5d:6d:2f:49:53:c9:21:35:
         29:22:44:e0:fa:1d:ad:cb:0c:50:12:7f:ca:f5:23:24:ff:2c:
         ea:80:61:b0:2b:58:8c:fb:0e:4c:3c:8f:f4:db:dd:5a:75:5d:
         dd:d3:78:5b:eb:e9:33:96:6b:aa:3c:27:be:0d:b8:75:4d:3c:
         ae:1e:db:f2:b7:80:7d:ac:16:df:04:db:1f:0c:47:27:fc:01:
         11:29:fc:cf:1a:ef:27:f7:a6:1f:60:2f:47:4e:f6:c9:e6:ab:
         ae:6f:1d:b5:0b:76:3e:85:1f:e9:e7:2b:85:72:12:34:07:f1:
         73:bb:7d:75:b2:0d:4b:84:a6:e7:dd:80:57:e7:09:47:8a:45:
         be:e6:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:47 2026 by rpki-client