This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
File:                     3DFD8E94E56011F0B06F57F2DAE4EC9C.roa (raw, json)
Hash identifier:          RXVQ1ZD3N/O+SYRG3Kte1WOLgH8jfQ7hy2LT+yWpIJQ=
Subject key identifier:   5C:61:84:C3:0E:D1:77:97:1A:1B:1A:2C:17:F8:23:6F:92:3C:05:64
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:16:37 +0000
ROA not before:           Tue 30 Dec 2025 09:16:32 +0000
ROA not after:            Fri 30 Jan 2026 09:16:32 +0000
asID:                     401696
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111058 (0x1b1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:16:32 2025 GMT
            Not After : Jan 30 09:16:32 2026 GMT
        Subject: CN=69539875-6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:97:bd:45:44:40:76:95:67:97:5b:41:21:
                    df:8b:3d:55:3b:f0:53:a0:b0:a3:3b:bd:b0:58:e6:
                    a1:7d:f9:6b:c2:96:11:82:59:50:53:41:4a:4a:e9:
                    85:05:3f:44:56:64:23:29:1a:00:28:f2:dd:9d:9a:
                    ca:e4:62:b9:70:15:da:dd:e3:ba:01:8d:6c:38:83:
                    88:d1:13:53:7c:62:9a:bb:73:62:de:f2:63:9b:e4:
                    27:d3:0d:db:73:e5:ca:26:42:57:4a:ed:3d:cb:ba:
                    15:6e:1a:13:11:5a:d8:7d:69:68:65:4e:fd:65:a9:
                    63:14:c1:fc:58:01:aa:29:95:bf:be:6d:65:e3:46:
                    ad:b0:93:e0:59:65:94:26:5b:15:0b:1e:d3:6a:e6:
                    5e:7a:c5:f2:22:cb:1c:7d:37:94:c2:f1:58:27:6d:
                    d7:63:47:74:55:25:1a:00:24:32:d9:a5:cd:ef:db:
                    cb:95:d8:d0:d0:4b:30:93:21:60:57:e3:f1:47:7e:
                    0e:6c:ae:5b:8c:46:11:26:24:33:ae:65:ae:ae:b8:
                    48:03:e7:c9:08:e3:b0:5c:36:41:39:e9:c3:59:7e:
                    7a:7f:57:07:bd:29:47:98:fb:0a:3b:65:cf:56:0f:
                    23:db:99:c5:9b:a8:df:10:9e:bd:d3:73:22:40:96:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:61:84:C3:0E:D1:77:97:1A:1B:1A:2C:17:F8:23:6F:92:3C:05:64
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFD8E94E56011F0B06F57F2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:a9:72:90:7b:e1:63:50:2b:4a:80:73:62:ca:ab:40:8f:0c:
         36:d6:74:a3:b1:ca:56:ae:00:e0:bb:65:1b:4e:8f:79:4d:d7:
         77:25:6f:f0:b8:29:b7:70:c5:83:9c:d3:eb:1e:bd:8b:0d:d9:
         39:79:b4:aa:d4:d4:a2:bf:07:f6:ff:02:99:71:32:54:39:ed:
         9a:2f:3f:f5:d1:12:69:4a:f2:52:48:a6:ac:5a:3b:c9:af:74:
         23:7f:45:b7:6c:90:3e:b5:be:7d:b5:04:79:ec:51:a8:4f:f8:
         2b:22:12:08:b5:c9:49:a9:9b:8e:b4:e5:01:79:84:d2:00:8c:
         06:88:25:18:14:6e:95:7e:ba:f9:93:23:2e:db:04:da:99:81:
         3c:d0:fe:d9:5d:1f:33:10:88:07:8a:8b:54:85:30:79:ef:c3:
         4c:f6:64:ad:aa:3b:65:88:4a:66:a4:f7:95:67:22:2f:64:ee:
         d8:7a:14:4f:33:17:4f:f4:60:5f:26:24:6f:53:40:6e:d1:b3:
         d8:8a:99:40:03:ba:c3:65:f1:fb:39:2e:83:28:74:c0:e9:c7:
         18:ab:23:de:b4:9d:a3:fa:5e:df:a4:c1:47:0e:ac:87:80:27:
         1b:aa:69:da:ca:54:14:34:d8:f8:36:2b:c4:6e:cc:48:b9:2c:
         16:a7:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:01 2026 by rpki-client