This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
File:                     2ECCF532E0E611F0BCF9C178DAE4EC9C.roa (raw, json)
Hash identifier:          ZwnzJcG+0LHkoHSecWG6BnovJeP2zg+ElYOkSnsO0WI=
Subject key identifier:   C7:80:93:84:A4:A2:0A:A5:27:07:40:9C:0A:2D:DE:BC:0E:87:99:17
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B105
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 16:32:48 +0000
ROA not before:           Wed 24 Dec 2025 16:32:43 +0000
ROA not after:            Sat 31 Jan 2026 16:32:43 +0000
asID:                     14315
IP address blocks:        154.194.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110853 (0x1b105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 16:32:43 2025 GMT
            Not After : Jan 31 16:32:43 2026 GMT
        Subject: CN=694c15b0-9c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:e2:53:42:50:da:26:c2:72:7b:25:5d:02:
                    e8:b1:47:08:94:5d:9a:b2:b2:c8:03:cd:d1:0f:a1:
                    84:5a:4d:13:fb:dc:b5:76:4c:12:c4:e9:34:08:d9:
                    c3:6c:2c:0d:ed:71:93:06:a9:f4:ef:36:7a:9d:cc:
                    4b:8c:fd:f4:c6:24:f7:b9:62:58:20:af:a0:e7:c3:
                    68:2b:8b:1b:eb:54:b9:59:18:5b:b0:b9:e4:a4:76:
                    f4:70:17:90:3c:72:7e:94:9f:b4:82:7b:5c:c9:a7:
                    44:7f:34:31:5e:ec:85:4e:47:08:eb:7b:87:c1:7f:
                    74:b7:4f:57:a0:33:51:db:ad:3f:b9:a3:c7:5f:bd:
                    84:dd:63:4a:35:b5:e6:fe:e7:52:ba:6b:9d:5f:82:
                    50:49:ee:dd:f4:ab:81:b2:bd:64:16:60:50:e1:48:
                    14:32:8d:51:29:96:1d:fc:6f:80:3e:4f:6d:e5:f7:
                    9d:87:33:1f:d7:75:56:01:56:c2:5b:16:b2:0e:89:
                    a0:69:b7:82:4a:bb:4f:d8:d4:e9:f3:f4:1a:e8:a1:
                    fc:dc:d7:87:c0:a0:27:00:68:43:aa:d7:cb:70:b0:
                    1e:90:a4:6c:a2:ce:df:53:e7:e9:4b:bd:43:61:2c:
                    93:1f:f7:f9:43:11:9d:c5:80:1d:e9:49:3d:c0:32:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:80:93:84:A4:A2:0A:A5:27:07:40:9C:0A:2D:DE:BC:0E:87:99:17
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:f2:dd:c2:a5:cb:b5:09:98:da:f9:43:5d:c4:05:9f:20:13:
         5d:1a:bb:17:aa:8c:be:10:f8:67:a4:1d:52:eb:39:06:16:77:
         2d:91:91:64:f3:01:8a:3a:b7:11:79:ef:28:53:26:c5:9e:7a:
         d9:26:4c:cf:9a:b0:6a:4f:fd:5e:ff:5a:22:2a:a3:b3:8e:30:
         95:f5:6c:ad:18:5f:34:50:b8:9b:45:37:3b:06:aa:02:44:ca:
         cd:42:bf:36:de:4b:3a:d0:7a:6c:2e:05:11:a3:9f:fd:ee:67:
         d2:be:5f:f0:08:20:1d:bf:2d:67:b5:a9:de:7a:96:e5:4b:f2:
         5a:36:f2:32:81:15:bd:d7:65:cb:cc:2c:8a:06:be:f5:82:42:
         50:de:d1:8a:6f:ca:4b:c5:41:20:de:52:22:e7:96:e0:a2:51:
         ac:be:4c:ec:2f:2a:71:f3:c2:19:da:e4:72:07:8a:ae:ae:f2:
         9b:a0:97:0a:50:33:21:df:cd:a7:ca:44:e4:e6:c0:cd:ec:c1:
         57:f2:19:0c:d3:8f:22:d4:60:76:a8:b6:b4:46:ae:23:f3:8f:
         b5:37:3d:cd:ff:56:9d:f3:69:75:93:ea:7f:2a:74:a3:58:81:
         b3:62:ad:59:6f:1f:ad:19:c0:e8:15:2e:82:ea:d2:8d:fc:11:
         4a:7b:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:52 2026 by rpki-client