This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/364035C4EC6511F0B9402FACDAE4EC9C.roa
File:                     364035C4EC6511F0B9402FACDAE4EC9C.roa (raw, json)
Hash identifier:          0cmawt1crbfXUL6/CDxhXXWiLHbD7BIb9Q0JNFmJlac=
Subject key identifier:   7D:CC:00:54:BC:78:93:AD:09:A7:5B:8E:49:BC:5B:2A:2B:C3:77:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B3CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/364035C4EC6511F0B9402FACDAE4EC9C.roa
Signing time:             Thu 08 Jan 2026 07:39:50 +0000
ROA not before:           Thu 08 Jan 2026 07:39:45 +0000
ROA not after:            Tue 10 Feb 2026 07:39:45 +0000
asID:                     61112
IP address blocks:        154.82.138.0/23 maxlen: 24
                          154.83.83.0/24 maxlen: 24
                          154.83.84.0/22 maxlen: 24
                          154.83.88.0/21 maxlen: 24
                          154.83.90.0/24 maxlen: 24
                          154.83.91.0/24 maxlen: 24
                          154.83.92.0/22 maxlen: 24
                          154.83.96.0/23 maxlen: 24
                          154.83.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111567 (0x1b3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  8 07:39:45 2026 GMT
            Not After : Feb 10 07:39:45 2026 GMT
        Subject: CN=695f5f46-0b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:c9:4a:e4:f4:b8:09:8c:16:7a:44:3d:81:
                    c7:b8:a6:95:22:2f:c5:1c:de:ad:fd:c0:91:68:82:
                    5d:58:86:49:e3:2a:05:3b:a6:fb:ed:a0:83:1c:79:
                    11:c8:36:09:3f:23:88:e5:cb:be:16:18:0a:ae:5f:
                    13:67:c9:a8:ad:f9:23:2e:99:36:22:70:b0:da:67:
                    67:de:c3:43:6a:8b:ae:db:40:45:58:68:3f:c4:c8:
                    ee:0f:92:09:48:ee:6d:2f:d0:16:6c:2d:e1:ec:9f:
                    b2:0a:be:ab:ea:d6:02:89:61:95:92:c8:d7:96:a5:
                    4f:fe:0d:50:e0:3f:cf:75:5c:c6:76:19:3f:5f:26:
                    ad:f3:02:4c:ef:c3:16:4a:7e:e5:71:c5:3e:fb:2b:
                    2f:d3:01:bf:51:ed:c2:b6:8e:a9:6f:1b:15:f7:96:
                    ba:51:1d:17:80:2f:b7:3b:57:b7:d6:00:fe:34:71:
                    cf:b6:80:73:ca:26:82:a3:98:81:df:aa:e4:08:72:
                    f9:19:4d:b3:07:84:8c:01:ab:d8:a3:81:35:d5:d3:
                    eb:40:41:d0:02:c6:3b:5b:9d:7e:dd:08:9e:2f:1f:
                    ea:22:4f:59:d6:4d:fb:75:0d:a6:69:9f:38:1a:b6:
                    76:cf:80:9a:47:25:b4:79:a9:89:a0:32:fa:02:60:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:00:54:BC:78:93:AD:09:A7:5B:8E:49:BC:5B:2A:2B:C3:77:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/364035C4EC6511F0B9402FACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.138.0/23
                  154.83.83.0-154.83.98.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:d3:77:a5:12:3e:3b:dd:3b:ca:7b:fb:c8:b9:e1:a0:1a:
         c1:28:9d:97:c1:23:74:d1:5f:7c:b7:34:65:cf:9f:1f:d5:01:
         e8:97:f7:38:16:cf:5b:4c:fb:2a:77:77:e8:7a:92:f0:e5:9f:
         a0:be:6e:b4:ba:61:6f:93:79:16:a3:bc:f9:82:11:37:c4:c5:
         50:3e:38:b4:57:af:35:8b:2a:a6:1e:4d:b6:7e:bb:32:a1:27:
         9b:24:33:8c:9b:ff:c3:9b:15:b2:fc:ce:48:ad:3a:bb:42:e3:
         2e:3c:fe:e3:df:72:05:82:bb:28:34:cc:10:99:b7:27:9b:cb:
         5c:4c:73:ca:b8:cd:a0:af:54:84:df:9b:29:30:dd:70:76:28:
         89:66:ca:15:41:01:74:33:9c:32:3d:be:03:26:0b:71:f0:bb:
         16:be:5d:fa:2d:20:37:41:0c:ad:5f:09:e9:c1:72:7c:c7:6a:
         37:b1:cf:3a:1c:1d:f1:13:a9:4d:49:96:cf:f9:41:ae:17:d0:
         b2:b5:18:e1:32:fb:91:c2:7e:1d:e8:5b:29:bb:c6:fb:53:e6:
         18:a0:75:5f:0d:80:19:69:34:ee:39:fc:46:32:40:d2:7d:0a:
         33:d8:f8:b9:4f:f0:d9:6c:5d:74:01:d9:ed:83:6f:4d:6a:3f:
         08:de:68:37
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbPPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA4MDczOTQ1WhcNMjYwMjEwMDczOTQ1WjAYMRYw
FAYDVQQDEw02OTVmNWY0Ni0wYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA65TJSuT0uAmMFnpEPYHHuKaVIi/FHN6t/cCRaIJdWIZJ4yoFO6b77aCD
HHkRyDYJPyOI5cu+FhgKrl8TZ8morfkjLpk2InCw2mdn3sNDaouu20BFWGg/xMju
D5IJSO5tL9AWbC3h7J+yCr6r6tYCiWGVksjXlqVP/g1Q4D/PdVzGdhk/Xyat8wJM
78MWSn7lccU++ysv0wG/Ue3Cto6pbxsV95a6UR0XgC+3O1e31gD+NHHPtoBzyiaC
o5iB36rkCHL5GU2zB4SMAavYo4E11dPrQEHQAsY7W51+3QieLx/qIk9Z1k37dQ2m
aZ84GrZ2z4CaRyW0eamJoDL6AmBRowIDAQABo4ICszCCAq8wHQYDVR0OBBYEFH3M
AFS8eJOtCadbjkm8Wyorw3ciMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNjQwMzVDNEVDNjUxMUYwQjk0MDJGQUNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBmlKKMAwDBACaU1MDBACa
U2IwDQYJKoZIhvcNAQELBQADggEBAGua03elEj473TvKe/vIueGgGsEonZfBI3TR
X3y3NGXPnx/VAeiX9zgWz1tM+yp3d+h6kvDln6C+brS6YW+TeRajvPmCETfExVA+
OLRXrzWLKqYeTbZ+uzKhJ5skM4yb/8ObFbL8zkitOrtC4y48/uPfcgWCuyg0zBCZ
tyeby1xMc8q4zaCvVITfmykw3XB2KIlmyhVBAXQznDI9vgMmC3Hwuxa+XfotIDdB
DK1fCenBcnzHajexzzocHfETqU1Jls/5Qa4X0LK1GOEy+5HCfh3oWym7xvtT5hig
dV8NgBlpNO45/EYyQNJ9CjPY+LlP8NlsXXQB2e2Db01qPwjeaDc=
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:11 2026 by rpki-client