This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D44A84E02011F09D743798DAE4EC9C.roa
File:                     50D44A84E02011F09D743798DAE4EC9C.roa (raw, json)
Hash identifier:          3xYEOsr/BkBGe/xt5dZH3r1Vj3dEOk7a7BSGVfqi4Is=
Subject key identifier:   53:8D:52:0F:B4:C1:27:A9:06:46:0D:77:A9:AF:4B:88:3E:57:06:09
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B063
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D44A84E02011F09D743798DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 16:56:28 +0000
ROA not before:           Tue 23 Dec 2025 16:56:20 +0000
ROA not after:            Fri 18 Dec 2026 16:56:20 +0000
asID:                     140224
IP address blocks:        154.205.202.0/24 maxlen: 24
                          154.205.203.0/24 maxlen: 24
                          154.205.204.0/24 maxlen: 24
                          154.205.205.0/24 maxlen: 24
                          154.205.206.0/24 maxlen: 24
                          154.205.207.0/24 maxlen: 24
                          154.205.208.0/24 maxlen: 24
                          154.205.209.0/24 maxlen: 24
                          154.205.210.0/24 maxlen: 24
                          154.205.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110691 (0x1b063)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 16:56:20 2025 GMT
            Not After : Dec 18 16:56:20 2026 GMT
        Subject: CN=694ac9bc-3536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:14:44:ad:8e:80:37:99:66:14:08:48:17:
                    fe:55:cb:47:95:84:97:43:a4:8d:4b:7f:66:3a:53:
                    c8:6b:2e:a9:75:16:62:71:5d:f2:4b:40:c8:1c:0a:
                    11:2d:f9:b1:6b:10:78:18:63:af:1c:5c:ac:8a:9c:
                    9a:f3:c9:0f:37:b3:7f:29:f6:ef:05:09:08:40:50:
                    c5:a3:07:c6:89:ca:55:6c:82:f2:22:c7:be:c0:78:
                    60:cb:44:50:37:b8:aa:63:8c:ae:8b:03:7b:c2:2e:
                    64:47:0d:91:af:38:59:3e:47:ff:f4:d1:90:c9:3b:
                    78:c2:0a:a6:b4:ee:b9:3c:a1:83:1f:c9:70:78:59:
                    dc:df:aa:0f:43:51:a1:eb:99:77:b9:fe:aa:59:4e:
                    cd:b0:d9:5d:de:9f:59:96:06:40:69:4b:84:b4:2d:
                    24:2f:f7:6a:43:51:a2:5f:63:69:b5:9e:dd:74:41:
                    cd:7b:33:c4:9b:90:16:c8:2d:ba:58:83:e2:57:10:
                    2d:ff:ff:6b:19:fd:33:f2:70:de:1b:a6:d9:84:82:
                    0b:35:b7:cc:70:07:7c:2e:2b:48:8d:bd:ec:c9:5e:
                    1f:77:e6:10:66:8a:3c:58:fb:3c:6d:4b:5c:2d:c3:
                    60:19:14:94:24:99:14:dd:9c:76:e2:c6:a9:7c:52:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:52:0F:B4:C1:27:A9:06:46:0D:77:A9:AF:4B:88:3E:57:06:09
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D44A84E02011F09D743798DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.202.0-154.205.211.255

    Signature Algorithm: sha256WithRSAEncryption
         02:62:a1:59:c6:e7:fa:08:05:66:a6:6c:c4:a6:6d:68:a4:6f:
         2a:94:4a:a6:ea:e6:68:d5:6a:04:f6:86:1e:cf:77:ec:3c:b9:
         49:15:59:e1:25:2d:e4:f4:08:4a:7f:94:5a:9c:e9:8d:e4:14:
         b6:54:7a:bd:5a:72:ff:e5:ce:c1:23:8e:b5:40:2c:49:05:12:
         16:a8:dc:f6:9e:1b:c4:8f:cd:c5:b3:2b:d4:9d:81:e3:0e:6e:
         79:7c:eb:b0:7d:12:ca:55:93:dc:d2:0b:81:9e:0b:78:eb:51:
         68:96:04:54:dc:b4:7a:02:10:9c:ca:2d:cd:e3:02:1b:b7:5a:
         22:50:8c:6e:ce:37:4b:0a:81:21:1e:e8:8e:5c:37:b3:60:0c:
         96:6c:f0:d1:54:f9:c0:a7:14:cb:87:23:21:d9:61:81:20:be:
         c7:1a:f0:96:2b:42:65:3d:65:84:3e:7f:40:97:5f:73:11:62:
         c0:03:84:29:ed:e0:c9:c7:6e:d8:1d:5c:78:6d:79:f6:e8:31:
         1c:e0:4b:ae:58:11:5a:65:03:48:df:25:19:0e:d9:81:c1:68:
         65:ad:13:35:e4:3d:65:09:7f:03:81:98:a0:41:7a:52:35:5a:
         e4:b7:2a:80:df:8b:16:ca:69:ec:f8:a1:00:c9:f6:6c:73:68:
         ce:ab:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:45 2026 by rpki-client