This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B755912F5D411F0BAEA8489DAE4EC9C.roa
File:                     2B755912F5D411F0BAEA8489DAE4EC9C.roa (raw, json)
Hash identifier:          Ymh99pLP02gVfoV/QWgcxR2ijt34Rz0dO+UFnZKM42s=
Subject key identifier:   B4:5B:1D:52:86:C7:FC:96:F8:48:35:9D:31:41:34:53:EB:95:0C:DB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B581
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B755912F5D411F0BAEA8489DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 07:46:46 +0000
ROA not before:           Tue 20 Jan 2026 07:46:41 +0000
ROA not after:            Thu 19 Feb 2026 07:46:41 +0000
asID:                     11404
IP address blocks:        154.83.160.0/20 maxlen: 24
                          154.89.240.0/20 maxlen: 24
                          154.90.80.0/20 maxlen: 24
                          154.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 00:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112001 (0x1b581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 07:46:41 2026 GMT
            Not After : Feb 19 07:46:41 2026 GMT
        Subject: CN=696f32e6-ce49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5b:a0:47:5c:c9:2a:93:ee:ca:4e:98:47:64:
                    1c:90:ce:01:08:9f:55:bb:a0:af:ed:01:51:18:8d:
                    71:f3:ba:f8:c4:6c:e7:28:98:ab:34:1a:bf:65:02:
                    93:3c:5c:1b:42:79:5a:d0:08:c4:15:96:cf:0a:d0:
                    22:fd:04:7a:62:84:f6:de:62:59:30:87:8d:3f:d6:
                    e5:55:c0:b6:f2:e4:20:af:67:67:d7:8b:bc:4c:3a:
                    38:6e:c7:41:ef:61:3b:32:41:5b:6a:ea:15:98:bf:
                    64:68:43:f3:5e:c4:84:01:2d:aa:94:9e:ae:e1:f8:
                    36:43:a1:21:18:cf:76:b3:27:4c:4b:d0:72:e0:51:
                    c8:13:e4:21:99:9c:6d:86:4c:45:eb:f2:e6:d8:92:
                    0d:ca:54:e2:0c:27:7f:57:da:17:ff:7a:46:9e:62:
                    2a:98:e9:61:56:cb:a6:01:7c:41:a9:ea:d3:e4:b1:
                    17:fb:42:c1:d7:8e:b3:3b:db:ae:49:03:63:4b:d6:
                    c8:7a:cd:e6:ce:8f:56:5d:9e:fb:d9:43:ef:c2:ef:
                    5a:c8:cd:1f:e7:dc:a4:94:76:42:9d:1e:1e:23:78:
                    24:be:46:04:8c:9e:5b:f7:05:95:fc:a0:c3:42:d7:
                    33:73:85:d7:77:73:45:f2:c2:a9:f5:b1:1e:09:de:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:1D:52:86:C7:FC:96:F8:48:35:9D:31:41:34:53:EB:95:0C:DB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B755912F5D411F0BAEA8489DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.160.0/20
                  154.89.240.0/20
                  154.90.80.0/20
                  154.92.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:c7:d9:29:e3:fc:90:17:7b:9f:dd:f4:4a:12:49:b0:42:
         06:8d:e7:97:4f:eb:3c:d8:ff:58:b4:fb:1b:6b:f2:03:0e:ed:
         17:c7:98:25:61:b2:77:ae:0c:18:b3:9d:63:40:5f:6b:bf:01:
         f7:9e:2b:51:2b:2e:3b:04:e4:64:60:06:46:6e:37:ab:0b:fd:
         b3:70:5e:f6:ea:16:21:1f:65:22:2c:04:9d:c5:35:24:96:a5:
         33:16:ba:90:69:78:ac:31:2c:c9:5d:4b:b5:f6:8b:03:b0:3f:
         af:84:e4:26:e2:b3:44:ef:18:25:30:0b:dc:47:64:84:84:e2:
         ca:9f:44:86:72:6a:41:de:8b:f8:bd:f5:c7:09:c1:ad:5a:a3:
         a0:b4:d8:1b:3b:28:8a:77:70:f1:25:ee:84:30:d6:af:02:35:
         94:20:ed:9e:33:3b:0a:a2:87:6a:4d:10:3b:d2:de:35:e5:5c:
         51:45:a5:d5:0b:20:a0:f6:7b:10:d7:b0:fe:a1:3d:90:5b:8d:
         ef:f3:55:15:ae:07:0b:af:74:28:ef:f9:f2:89:2e:20:81:8e:
         18:61:0b:b7:76:40:37:e3:85:ad:94:15:8a:71:31:02:e5:26:
         f0:da:4e:b3:90:d9:00:60:c1:a4:36:e0:27:08:a0:d9:27:70:
         ce:6f:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 07:30:06 2026 by rpki-client