This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6C07C4F21E11F0829B5AD6DAE4EC9C.roa
File:                     1F6C07C4F21E11F0829B5AD6DAE4EC9C.roa (raw, json)
Hash identifier:          i5WBydRSb3eqW8KvchAvc0bb5h+zRsc0uHWifqSrjhc=
Subject key identifier:   67:53:E2:AF:8E:27:B1:76:D9:05:A1:5C:DF:74:CF:FD:5D:BD:04:DF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6C07C4F21E11F0829B5AD6DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 14:26:04 +0000
ROA not before:           Thu 15 Jan 2026 14:25:59 +0000
ROA not after:            Sat 21 Feb 2026 14:25:59 +0000
asID:                     20326
IP address blocks:        154.193.131.0/24 maxlen: 24
                          154.197.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 07:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111835 (0x1b4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 15 14:25:59 2026 GMT
            Not After : Feb 21 14:25:59 2026 GMT
        Subject: CN=6968f8fc-85ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:93:c9:78:60:12:6f:a6:0a:77:9a:d0:63:
                    99:7a:3f:a0:c6:fc:a3:18:63:ca:97:67:ab:18:80:
                    20:ea:53:fc:33:30:02:42:24:c1:fc:0e:3c:89:a9:
                    71:0b:ae:12:5e:1c:36:ad:4e:fd:71:cf:b4:73:11:
                    fc:da:c9:7f:72:08:05:a1:e9:b4:13:5b:92:bf:3e:
                    1f:c0:b0:ae:e6:29:2b:a0:42:7c:5a:6d:23:fd:6b:
                    d4:54:a9:83:16:09:86:82:37:1a:29:69:5c:57:d8:
                    39:80:59:15:6c:b5:f5:58:a8:d5:dc:15:e9:2f:59:
                    3a:51:e7:01:6d:6e:e0:75:06:ff:10:a9:21:c7:d9:
                    61:1c:49:bc:3e:7a:d3:9a:aa:6e:0e:c3:5f:0d:68:
                    e9:b0:e4:e3:d1:c4:8f:c8:a1:ef:5e:ad:4b:e5:15:
                    ca:29:ee:54:5e:45:c8:41:d6:f0:49:23:14:9a:95:
                    2a:c5:4d:00:71:27:23:ff:5d:db:fe:88:ae:cb:13:
                    d1:92:7d:1f:de:9c:41:57:97:2a:2a:d6:d9:7b:05:
                    47:18:17:74:d2:c3:fc:97:3f:48:41:c2:b5:b0:12:
                    bb:ac:64:2c:58:ab:29:dd:4d:0f:10:25:74:6c:1f:
                    65:7b:8e:ed:d6:2c:26:4c:bb:17:7b:a2:03:28:c9:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:E2:AF:8E:27:B1:76:D9:05:A1:5C:DF:74:CF:FD:5D:BD:04:DF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F6C07C4F21E11F0829B5AD6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.131.0/24
                  154.197.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:d9:88:11:93:dd:dc:ac:14:0a:c9:9f:71:45:dc:6c:94:10:
         a2:44:67:a4:b7:38:59:13:cc:94:34:5a:bc:7b:b9:40:21:06:
         61:2c:d2:da:66:44:ab:d2:75:eb:d8:5e:b5:12:80:e7:c5:f4:
         d4:8e:f0:fd:9f:c9:eb:45:3c:db:a0:47:4b:b5:41:6e:b0:80:
         90:1e:e8:04:0c:0e:f1:96:a0:59:17:67:f8:1b:50:bd:88:8d:
         68:f2:12:59:48:cc:15:5d:e9:4b:06:d5:22:4f:84:ea:cf:f1:
         a7:22:71:37:ae:4e:bc:73:1f:80:f2:38:e6:d2:38:2c:04:2d:
         2a:77:ef:71:3b:4a:a4:0c:99:e6:2e:de:f4:c1:ba:53:0f:80:
         a9:85:16:20:01:8f:18:92:67:bb:a9:c5:6b:76:4e:88:fd:37:
         35:19:74:66:35:70:23:b6:27:04:dd:ae:34:4c:9b:a8:79:3c:
         77:33:dd:c4:20:24:ad:83:26:3a:2b:9d:97:09:c5:e0:cf:8b:
         0c:61:c2:ec:f1:cc:3b:56:ee:06:19:65:a4:77:f6:23:43:21:
         0e:6c:3e:1b:2a:a8:c4:fc:23:bd:2d:6f:03:ff:6a:f3:ad:fb:
         46:36:a7:20:48:9c:d4:17:91:b1:ff:36:94:d6:8b:da:56:35:
         cf:99:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:27 2026 by rpki-client