This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EDAD8CAF27C11F08AE6D5A8DAE4EC9C.roa
File:                     3EDAD8CAF27C11F08AE6D5A8DAE4EC9C.roa (raw, json)
Hash identifier:          qTup3+MSDzazl7MpiIGY6Gx1jMrMi+IPiOS7GquKddY=
Subject key identifier:   A9:92:F0:60:01:DA:E3:D5:AA:95:AF:01:0B:31:90:9B:C7:1D:22:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EDAD8CAF27C11F08AE6D5A8DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 01:39:50 +0000
ROA not before:           Fri 16 Jan 2026 01:39:44 +0000
ROA not after:            Sun 08 Feb 2026 01:39:44 +0000
asID:                     14315
IP address blocks:        154.196.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111838 (0x1b4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 01:39:44 2026 GMT
            Not After : Feb  8 01:39:44 2026 GMT
        Subject: CN=696996e5-fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:9f:f8:d3:1e:54:3c:0c:24:84:55:9c:e5:
                    38:64:ef:60:cb:0c:72:e3:9a:62:6a:44:4e:5b:ce:
                    57:a1:43:07:3c:ac:00:92:35:66:d4:04:fa:f2:61:
                    4c:f0:6f:78:8c:bb:ba:d7:c1:51:bb:6b:55:64:a7:
                    52:ac:03:65:fc:28:51:09:27:77:96:8a:90:2f:bb:
                    67:a2:be:7e:65:20:be:05:ff:00:79:af:a9:e5:d4:
                    55:fb:64:d8:39:ed:96:8c:23:e9:10:7b:1b:09:d8:
                    d7:d1:38:67:b4:c3:b0:f3:b9:b0:83:02:8d:76:dc:
                    4e:78:80:59:39:65:52:17:41:db:a3:9b:db:83:22:
                    cf:a0:0b:15:0e:6c:84:e2:28:2b:a7:66:4c:d4:92:
                    32:e4:66:78:2b:ac:be:8f:e5:19:72:fc:72:d1:7a:
                    df:60:c1:3c:d4:bd:6d:dd:7a:59:ab:4f:da:69:43:
                    fb:b6:02:4f:e8:d2:d9:b0:1d:57:ad:a9:0f:e8:55:
                    e0:77:80:82:f7:7e:18:c3:72:fc:d3:0d:11:62:8d:
                    6d:97:7a:da:50:4d:28:38:08:dc:b0:4e:14:f2:c7:
                    04:d7:17:26:e1:fd:2f:9c:48:fe:bc:a1:b8:42:89:
                    24:92:eb:89:e9:43:38:01:b4:f3:2d:cd:f4:fa:e1:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:F0:60:01:DA:E3:D5:AA:95:AF:01:0B:31:90:9B:C7:1D:22:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EDAD8CAF27C11F08AE6D5A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:5c:b9:f6:89:f5:61:b7:2d:70:14:6e:60:be:33:4a:60:59:
         cd:cc:8a:ac:3a:fa:d2:80:56:6b:50:57:0a:75:a1:b3:a1:30:
         18:bc:a9:5b:96:e0:c9:67:2e:6d:d1:0e:b0:8e:6b:9f:e2:86:
         52:90:f7:51:92:af:a1:df:ee:86:c8:cf:9c:c2:86:07:36:4a:
         4d:5a:7c:b3:aa:cd:08:06:db:f0:1c:55:87:e8:e0:d1:4c:43:
         c5:e1:49:8c:25:96:c7:2a:6d:8f:a7:0c:d0:28:dc:59:0d:32:
         51:db:f7:ed:c2:1c:c5:06:02:a6:86:e6:7e:ee:bb:ae:a1:32:
         e7:e0:14:20:d2:6a:7e:ea:3d:40:30:41:48:47:87:1b:f9:ce:
         4c:6f:bd:f2:b5:e6:95:62:fc:57:56:6f:91:8d:79:6c:5c:50:
         58:ab:26:34:70:d8:1b:af:ed:9a:15:d6:24:f0:d9:60:ea:ee:
         cd:02:ca:0d:4d:5f:e0:5f:d1:18:31:3b:c5:b1:0e:e3:e1:ad:
         bd:1a:01:71:3e:24:88:93:c2:93:28:e4:e2:7b:7b:66:57:e7:
         44:f3:a8:2d:79:51:9b:8b:4b:89:77:4f:85:e4:ae:f4:9e:45:
         1f:b3:2d:92:12:9e:e8:d2:fe:ac:f3:5a:bf:f1:c9:94:4c:1f:
         b6:c2:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:52 2026 by rpki-client