This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
File:                     23103E1AF05A11F0B8F06682DAE4EC9C.roa (raw, json)
Hash identifier:          /v59Ira3JsNvoGuucLjnq4TGvA6CSI7VkF1mEhviVPc=
Subject key identifier:   CF:69:6E:93:27:9B:6C:8F:5E:89:5E:27:D4:7D:24:F3:81:B0:C5:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B469
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:30:38 +0000
ROA not before:           Tue 13 Jan 2026 08:30:33 +0000
ROA not after:            Wed 18 Feb 2026 08:30:33 +0000
asID:                     8796
IP address blocks:        154.200.128.0/24 maxlen: 24
                          154.200.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111721 (0x1b469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 08:30:33 2026 GMT
            Not After : Feb 18 08:30:33 2026 GMT
        Subject: CN=696602ae-ba2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:ff:81:cb:af:77:b9:f5:e4:75:b1:a1:fe:
                    d3:5c:5a:e7:2d:d9:93:fb:b2:39:8b:fc:dd:1c:dc:
                    0f:bf:4a:7a:c3:da:a2:39:64:21:a4:05:9e:8e:ca:
                    63:f7:b6:9b:32:35:e9:fb:2b:fa:8b:a8:08:70:be:
                    88:60:9b:13:0e:91:83:5b:c4:b2:3d:0c:93:54:2a:
                    5f:1b:18:67:41:48:3d:f7:8a:d9:89:7b:ed:ea:f5:
                    6d:ec:14:1d:53:a8:b6:6c:3c:00:d8:72:e7:16:6e:
                    74:6c:78:92:19:78:b6:45:72:03:d2:91:44:42:d1:
                    30:65:9f:9c:b8:12:b2:ae:b0:1c:6e:aa:f0:31:db:
                    04:7b:c1:22:a0:5e:19:0e:6d:d4:9b:5c:d4:78:5b:
                    a1:78:f5:18:5a:95:75:be:7a:a1:b9:84:53:d9:d3:
                    38:47:b6:50:da:ff:03:d6:9f:b9:20:26:3a:a5:ed:
                    2d:7c:e2:b6:46:63:18:03:7b:ad:ec:c8:2e:50:f9:
                    f7:14:72:45:06:4b:51:c2:8e:75:8c:04:a4:12:3e:
                    d1:48:b9:d5:30:86:83:72:31:ce:86:56:78:93:d7:
                    e1:5c:81:c5:20:1d:db:18:45:b8:c3:ad:2c:6f:87:
                    92:14:35:98:73:78:b3:38:c8:d6:e4:98:d7:7e:37:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:6E:93:27:9B:6C:8F:5E:89:5E:27:D4:7D:24:F3:81:B0:C5:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/23103E1AF05A11F0B8F06682DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.128.0/24
                  154.200.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:7a:fe:60:19:17:cb:03:61:d9:b3:20:36:42:c8:b4:b7:
         02:57:28:4b:70:81:b1:c9:0c:09:ea:bb:56:b1:3d:8f:41:54:
         80:c6:66:14:17:e3:f2:d3:0b:69:f9:75:6b:e9:0a:bf:41:6d:
         de:9b:c7:92:89:e3:08:8c:10:b6:43:da:ca:5a:09:74:84:a0:
         d3:9f:7f:bb:37:c1:89:31:e8:50:60:e1:2f:cb:e8:a2:6e:fe:
         39:19:31:fd:81:9f:e7:1e:25:cf:37:9d:56:8d:e9:10:1e:26:
         6d:90:f2:22:95:e7:67:05:48:36:c2:ce:4c:7b:b4:5d:34:dc:
         b5:f6:45:f8:ab:cc:58:d5:4c:30:9a:cb:49:1f:0e:f4:9f:a0:
         e1:ac:a0:eb:3d:8e:d8:cc:bf:71:d1:c9:fb:15:0a:01:b6:fe:
         c2:a6:07:f2:6b:ea:e0:4d:6f:53:48:fb:d5:25:e0:68:3e:71:
         3b:f5:11:1a:ce:23:c7:ce:04:68:a4:d1:78:c0:23:3d:4c:bd:
         42:0c:90:68:1d:7d:65:7a:a1:57:98:10:2f:d2:7b:61:cf:c1:
         11:43:a8:73:f8:f9:31:dd:fd:05:67:24:13:8d:99:8c:6c:54:
         56:05:04:91:ee:7e:3c:7d:d7:8c:79:3b:50:07:ff:9b:a9:91:
         e5:00:34:8d
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbRpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTEzMDgzMDMzWhcNMjYwMjE4MDgzMDMzWjAYMRYw
FAYDVQQDEw02OTY2MDJhZS1iYTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwyT/gcuvd7n15HWxof7TXFrnLdmT+7I5i/zdHNwPv0p6w9qiOWQhpAWe
jspj97abMjXp+yv6i6gIcL6IYJsTDpGDW8SyPQyTVCpfGxhnQUg994rZiXvt6vVt
7BQdU6i2bDwA2HLnFm50bHiSGXi2RXID0pFEQtEwZZ+cuBKyrrAcbqrwMdsEe8Ei
oF4ZDm3Um1zUeFuhePUYWpV1vnqhuYRT2dM4R7ZQ2v8D1p+5ICY6pe0tfOK2RmMY
A3ut7MguUPn3FHJFBktRwo51jASkEj7RSLnVMIaDcjHOhlZ4k9fhXIHFIB3bGEW4
w60sb4eSFDWYc3izOMjW5JjXfjdu3wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFM9p
bpMnm2yPXoleJ9R9JPOBsMWkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzEwM0UxQUYwNUExMUYwQjhGMDY2ODJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsiAAwQAmsiEMA0GCSqG
SIb3DQEBCwUAA4IBAQADunr+YBkXywNh2bMgNkLItLcCVyhLcIGxyQwJ6rtWsT2P
QVSAxmYUF+Py0wtp+XVr6Qq/QW3em8eSieMIjBC2Q9rKWgl0hKDTn3+7N8GJMehQ
YOEvy+iibv45GTH9gZ/nHiXPN51WjekQHiZtkPIilednBUg2ws5Me7RdNNy19kX4
q8xY1UwwmstJHw70n6DhrKDrPY7YzL9x0cn7FQoBtv7Cpgfya+rgTW9TSPvVJeBo
PnE79REaziPHzgRopNF4wCM9TL1CDJBoHX1leqFXmBAv0nthz8ERQ6hz+Pkx3f0F
ZyQTjZmMbFRWBQSR7n48fdeMeTtQB/+bqZHlADSN
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client