This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D54A8BAFE4911F08411997DDAE4EC9C.roa
File:                     1D54A8BAFE4911F08411997DDAE4EC9C.roa (raw, json)
Hash identifier:          HekNzG1GNVz0ihZyYgzW5oVI2dnMFHdSUOOxnBsf5YI=
Subject key identifier:   F0:A6:6A:A3:CD:F5:1E:1D:1D:91:C5:9A:73:41:D5:10:A0:42:14:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B782
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D54A8BAFE4911F08411997DDAE4EC9C.roa
Signing time:             Sat 31 Jan 2026 02:04:03 +0000
ROA not before:           Sat 31 Jan 2026 02:03:58 +0000
ROA not after:            Tue 24 Feb 2026 02:03:58 +0000
asID:                     18013
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112514 (0x1b782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 31 02:03:58 2026 GMT
            Not After : Feb 24 02:03:58 2026 GMT
        Subject: CN=697d6313-2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:04:21:ec:be:6c:71:c3:b2:d6:c8:86:93:
                    fc:2f:0e:26:8a:c2:5d:3c:79:6a:76:47:55:44:78:
                    a2:16:1c:90:10:9f:28:fd:d0:f1:c8:6a:f1:0d:63:
                    5b:f8:42:12:3d:ba:3d:df:48:52:d0:37:17:12:48:
                    b7:6f:65:e3:f4:b7:e3:b6:86:af:8f:7a:af:4d:6a:
                    60:48:35:62:05:eb:dc:0a:8d:02:4d:55:86:be:ad:
                    ea:ce:0e:16:95:b6:7c:f5:b2:6e:53:05:53:f9:b6:
                    f9:a3:c0:6e:80:39:76:69:0a:86:a8:95:0c:95:f0:
                    34:83:1d:38:17:77:06:83:77:29:13:c6:9b:fd:6f:
                    2e:66:5f:96:37:66:44:9b:52:17:50:e0:5c:38:fd:
                    38:77:5d:3f:75:04:7f:81:76:ab:a7:38:0c:17:13:
                    c0:45:f4:b0:d0:ad:76:8f:b6:4f:53:d9:c4:00:a6:
                    4f:a7:ba:4a:db:ba:c4:d4:7e:92:dc:fa:5e:a4:15:
                    01:dd:c4:ba:5c:87:d8:ea:b7:ee:09:a1:66:98:4a:
                    bd:74:48:a1:cb:d1:f8:95:df:35:37:1e:a2:73:29:
                    23:32:0f:ef:53:5c:d1:30:e0:f5:08:38:b9:c3:80:
                    66:0f:8c:26:7e:60:16:bc:a9:6f:30:16:7c:c9:dc:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A6:6A:A3:CD:F5:1E:1D:1D:91:C5:9A:73:41:D5:10:A0:42:14:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D54A8BAFE4911F08411997DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.239.255

    Signature Algorithm: sha256WithRSAEncryption
         64:9c:e2:17:9b:3c:98:09:97:d3:77:3d:64:a8:9a:1d:7d:b8:
         87:0c:9a:5d:b8:e2:26:ad:b1:4f:26:45:8a:27:37:78:a3:3d:
         be:80:dc:04:0b:d9:4e:c7:c9:0b:5b:0e:eb:a5:54:ca:88:76:
         70:ac:2b:0f:97:18:6b:fc:c1:a9:80:8f:12:a5:ad:77:61:bf:
         96:86:06:35:af:06:6f:53:4c:8e:d9:58:ae:22:b8:6e:8c:ed:
         6b:33:11:af:07:2b:bd:94:5c:de:06:0f:c2:0e:8f:19:7b:f3:
         44:df:f3:ed:de:76:52:2f:20:3c:e6:95:60:79:20:81:91:c7:
         ed:16:88:45:cf:10:ab:ec:0a:49:99:a3:fe:a2:99:c7:9d:28:
         df:3c:3c:3c:0b:f7:15:f6:1c:28:a9:61:81:7c:c2:cd:0d:f3:
         84:f6:db:81:d7:52:50:53:1e:e9:fc:56:37:78:f1:c3:68:a0:
         6c:c5:3b:c0:3d:cc:77:85:10:5d:bc:a9:89:43:09:7c:53:64:
         c2:1c:61:18:1c:34:82:8c:15:8f:36:b3:41:ef:e2:4d:81:8d:
         0d:4e:bf:84:e9:29:3c:a0:61:8a:66:17:09:e0:bd:6f:0e:b0:
         47:d4:4b:a8:38:5a:b5:ff:e3:01:b3:e8:c0:b4:c6:c6:fa:d9:
         05:8b:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 13:14:46 2026 by rpki-client