This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/675C9D84E38511F09A2C36E5DAE4EC9C.roa
File:                     675C9D84E38511F09A2C36E5DAE4EC9C.roa (raw, json)
Hash identifier:          YZOuCr3thP93Aj+t6YJsVJV1IK+VaKcEl2xtEc9zYkY=
Subject key identifier:   D4:B2:FC:5F:75:4C:84:24:18:7F:8F:46:54:5C:00:E3:18:93:B1:49
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B178
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/675C9D84E38511F09A2C36E5DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 00:37:36 +0000
ROA not before:           Sun 28 Dec 2025 00:00:31 +0000
ROA not after:            Sun 28 Jun 2026 00:00:31 +0000
asID:                     27947
IP address blocks:        154.84.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110968 (0x1b178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 28 00:00:31 2025 GMT
            Not After : Jun 28 00:00:31 2026 GMT
        Subject: CN=69507bcf-086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:16:f9:f3:7f:53:11:bd:75:a0:ab:45:1d:
                    df:38:7b:54:9b:1d:c3:6d:6f:c7:de:c5:76:bb:fd:
                    bd:d8:78:b0:72:f4:1d:ea:d4:9e:b9:2e:06:bb:2d:
                    2d:f0:75:d3:78:e3:a7:20:35:05:b3:9c:21:73:13:
                    07:e4:03:32:dc:e2:7a:29:a6:4d:5e:a6:62:d1:a0:
                    40:1c:ce:d3:86:90:ce:15:e2:37:d2:b5:b1:25:99:
                    7a:38:6d:70:fe:83:a2:21:7f:55:0f:d6:60:7c:83:
                    06:77:e8:ce:a8:d8:14:0d:2f:e1:3d:77:b7:8a:c2:
                    e1:cf:a7:38:4e:31:71:77:b0:2b:b6:76:a8:46:de:
                    a5:3c:59:5c:91:a7:78:12:af:4f:5f:ce:1c:44:a1:
                    10:3b:cc:dc:8a:af:29:92:bf:55:3c:a4:6b:9f:dd:
                    c9:a6:69:d6:ac:ac:c0:2f:e1:ba:68:e5:8a:08:2c:
                    de:12:12:4a:0e:41:ee:17:a6:0c:44:9b:a4:90:29:
                    46:1e:d9:2e:a3:fe:06:2c:da:69:be:6b:66:0a:8a:
                    e7:2d:2f:a0:a3:f9:6b:3b:03:5d:f1:d3:31:b5:c0:
                    e0:bc:0d:9c:69:5d:0e:7f:a6:66:b3:ae:d5:5f:a0:
                    21:5c:8f:9b:ea:38:f5:8f:57:71:d6:71:91:45:14:
                    20:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B2:FC:5F:75:4C:84:24:18:7F:8F:46:54:5C:00:E3:18:93:B1:49
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/675C9D84E38511F09A2C36E5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:c7:96:dc:a1:bd:5b:db:78:c4:f7:ee:6c:d4:8d:5f:8e:56:
         e4:8f:17:c4:b9:6d:00:44:20:29:64:ed:07:df:56:59:36:1e:
         94:fb:7e:98:fb:b3:36:b2:12:77:49:67:70:46:8a:a8:91:67:
         28:41:03:f6:d2:23:71:3d:a3:8e:1e:52:ad:93:4b:6c:79:4c:
         59:7b:d8:8b:6a:ff:bc:6f:31:39:4c:cd:5e:35:3e:60:13:d7:
         86:6e:ef:a9:94:c3:45:2a:d9:76:c3:58:d7:97:ca:3c:ce:e9:
         db:b0:38:7b:21:a3:9f:02:a9:c9:e3:a6:bf:11:72:c1:21:13:
         a6:46:92:65:e0:93:73:a4:49:2f:b9:42:f4:5a:7f:67:11:34:
         bb:44:d7:79:1c:24:e2:2b:9d:7f:0e:34:99:00:96:6d:e5:95:
         9b:e1:bd:f4:cf:d7:b5:0e:0f:97:55:f2:28:ec:65:f8:46:1c:
         a0:a6:d5:22:01:8e:98:24:3a:e0:33:be:be:6a:5a:9a:85:3f:
         74:67:cf:3c:a4:00:e1:2e:cf:ce:d1:ab:25:2e:09:a1:5d:37:
         a2:a0:48:d8:1f:7f:32:dc:13:51:74:06:ec:3b:f9:d8:79:60:
         b6:f4:c2:a8:3f:9f:40:de:03:df:9f:ff:39:34:db:b2:0a:b5:
         29:fe:82:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:10:09 2026 by rpki-client