This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2716A1F4F2D311F08FDE2692DAE4EC9C.roa
File:                     2716A1F4F2D311F08FDE2692DAE4EC9C.roa (raw, json)
Hash identifier:          F/i9clfs5wBmBP4/HlJlx74p9BNQZzURXfNi4/IlbdA=
Subject key identifier:   FE:86:58:08:5A:F2:C8:F2:36:35:F9:60:67:A2:2C:B4:24:E9:9C:B9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B507
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2716A1F4F2D311F08FDE2692DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 12:01:56 +0000
ROA not before:           Fri 16 Jan 2026 12:01:51 +0000
ROA not after:            Tue 24 Feb 2026 12:01:51 +0000
asID:                     214413
IP address blocks:        154.194.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111879 (0x1b507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 12:01:51 2026 GMT
            Not After : Feb 24 12:01:51 2026 GMT
        Subject: CN=696a28b4-a02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:8f:9c:fa:59:ed:c6:aa:5e:01:ba:9d:b0:
                    bd:4f:cd:38:fc:e7:5d:d5:d4:74:76:a0:bd:de:a9:
                    d1:ef:79:4b:1d:77:75:cf:4c:97:d0:82:9c:3f:3f:
                    6f:85:42:3a:1f:06:69:3e:56:b2:77:12:98:06:07:
                    b6:5f:ed:47:02:0e:a4:49:a0:db:99:b0:66:14:29:
                    3e:0e:a7:2b:0d:f8:a1:ed:58:bb:47:fb:45:c6:4e:
                    68:99:49:23:ce:72:8e:62:22:42:0f:03:2b:63:8d:
                    df:4f:16:07:73:5f:40:8e:77:2b:f2:6c:88:63:74:
                    34:62:33:35:e8:43:0d:43:d3:69:1f:6a:2a:85:7c:
                    84:0b:ee:c5:9b:4c:ff:64:99:10:60:35:c8:74:2c:
                    2f:63:f1:28:8e:ea:f2:f8:06:ec:bd:fe:7a:0e:ac:
                    df:d8:e6:f7:79:3c:66:c6:e4:26:97:25:45:68:ac:
                    93:df:c0:0e:fa:48:ca:09:77:d5:ff:36:ca:73:64:
                    61:31:ba:39:31:6c:d0:0e:7f:8a:ae:2d:9a:01:ba:
                    85:cc:73:16:c4:cb:2e:76:be:1d:a0:3d:e3:e9:f1:
                    f0:e2:95:c4:f6:c9:6a:0d:b1:bd:35:32:65:4e:30:
                    e3:93:be:83:c5:b8:f2:a1:f4:08:9c:24:33:7f:77:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:58:08:5A:F2:C8:F2:36:35:F9:60:67:A2:2C:B4:24:E9:9C:B9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2716A1F4F2D311F08FDE2692DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:95:9b:a1:10:a5:14:01:37:e0:78:fb:5a:1a:cc:aa:22:ef:
         7a:e2:1b:f9:8d:5d:0c:a0:ff:ea:6b:b3:77:ee:e2:6c:14:c9:
         27:e5:a3:0f:00:2a:c3:21:7f:c3:b3:69:e6:b5:c7:58:00:41:
         d0:b2:a8:b7:23:a8:d4:fe:15:31:23:e9:9f:b2:18:08:d4:0f:
         4a:00:d0:76:8c:71:be:0f:1d:1f:0c:58:02:af:85:3d:14:c3:
         80:b0:9b:0a:d6:c1:bd:17:a2:6d:c1:0a:aa:28:9c:52:ce:e6:
         4a:36:62:1b:c2:40:46:b0:20:9b:57:5e:ea:58:11:2d:0c:72:
         dc:d3:a3:11:29:4e:f8:73:32:c9:95:18:6c:2f:15:ea:2b:1b:
         6c:b5:9b:de:5f:ba:9d:00:8a:b3:e3:ff:bd:ae:da:4a:ff:aa:
         d5:a1:1f:3d:21:7f:9d:1c:43:b8:2c:48:a7:22:57:3c:c6:7d:
         bb:0c:9c:c7:74:db:d9:1b:68:de:cb:73:61:56:25:64:de:e4:
         59:03:ca:d7:78:09:17:1a:e8:a6:85:ba:93:99:f6:c9:0d:7c:
         b2:ae:11:e0:e2:b0:db:e4:d1:5b:e4:e5:2d:f8:aa:a3:22:a8:
         1b:58:db:85:53:c6:5a:21:8b:7a:5f:7c:be:31:ea:3c:57:5a:
         92:5b:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:51:15 2026 by rpki-client