This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA218D6E0F911F0AC67D7ECDAE4EC9C.roa
File:                     6AA218D6E0F911F0AC67D7ECDAE4EC9C.roa (raw, json)
Hash identifier:          m49LkkPrwJmOajHVQ8dWPPvuMhLsmxmZSGsn0f/F8yI=
Subject key identifier:   74:2B:5D:30:19:2E:2C:E3:97:DC:48:D1:E6:45:C0:89:B6:31:9D:87
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B11B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA218D6E0F911F0AC67D7ECDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 18:50:29 +0000
ROA not before:           Wed 24 Dec 2025 18:50:24 +0000
ROA not after:            Mon 09 Feb 2026 18:50:24 +0000
asID:                     401783
IP address blocks:        154.83.10.0/24 maxlen: 24
                          154.83.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110875 (0x1b11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 18:50:24 2025 GMT
            Not After : Feb  9 18:50:24 2026 GMT
        Subject: CN=694c35f5-4726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:0e:c7:27:e4:c2:a6:14:41:30:04:6e:11:
                    9f:70:12:2b:e1:90:e9:92:cd:7d:45:d1:f2:fe:54:
                    b0:19:c7:42:f6:86:f6:17:f6:b3:cf:55:bf:74:30:
                    c7:09:5b:b1:21:7a:b6:96:9c:b6:96:90:28:d0:cd:
                    a8:8a:73:48:ad:07:8b:fb:05:87:98:3a:38:0e:d5:
                    e6:a9:c8:f9:ea:48:b7:03:61:83:b5:2e:3f:6b:1c:
                    c2:31:1b:2d:06:ae:f2:50:4d:cf:f8:a1:0e:38:8e:
                    7e:44:a5:26:ae:44:82:f6:8d:86:29:31:6c:03:b4:
                    45:fa:26:b6:26:0b:cd:76:f9:31:39:bb:da:95:61:
                    a8:14:7f:29:04:db:6d:74:78:a1:1b:d3:78:3f:64:
                    33:53:41:d4:8a:5b:8b:23:92:ea:40:eb:a1:99:2b:
                    6c:3a:3c:36:b8:7f:e9:20:f8:a8:8b:7d:ad:8f:36:
                    b0:0c:42:d9:d4:56:8b:f7:e9:70:f0:7b:0f:70:e9:
                    09:31:3b:e1:34:e1:ab:57:8b:c2:21:9e:81:19:0f:
                    a4:31:a6:ee:71:33:61:00:15:21:f9:e4:3e:e5:de:
                    06:e4:22:96:c9:d5:28:af:4d:53:2b:df:c1:0c:d0:
                    69:d7:eb:56:e9:c1:5b:e3:db:9b:2d:72:44:3d:05:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:5D:30:19:2E:2C:E3:97:DC:48:D1:E6:45:C0:89:B6:31:9D:87
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6AA218D6E0F911F0AC67D7ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.10.0/24
                  154.83.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:97:70:57:df:3e:45:9f:66:71:34:8a:d1:48:f6:c4:4a:f8:
         81:e5:1c:bd:2f:86:bb:d0:aa:da:33:f6:52:94:0a:37:a7:e8:
         3e:0b:8d:9a:ee:73:68:29:bb:80:e2:55:64:5c:00:b5:45:c4:
         c3:7f:1c:c3:ec:53:0c:1a:49:c6:aa:87:e8:0b:12:1c:27:e6:
         3a:03:f4:f4:c2:ab:8f:59:2c:2b:09:68:df:4a:79:27:94:93:
         09:48:76:25:ce:4b:bd:85:a5:d5:18:55:25:7e:ad:8b:d7:69:
         18:d0:04:c6:92:45:29:c3:f5:ac:d1:d7:0f:cd:4e:d0:a6:20:
         f9:5e:c7:d9:86:7f:74:4a:37:63:d6:f4:7f:3f:ec:35:4a:a9:
         7e:26:65:9f:34:23:f2:25:58:90:09:c9:c9:b4:e4:4e:39:8b:
         f1:a2:e4:c1:47:f5:52:c2:22:d9:51:db:d2:82:e1:cd:d6:07:
         c7:9a:48:79:cf:63:7c:3f:54:35:c6:f1:bc:49:2c:7c:89:b3:
         df:3c:9c:d5:7d:13:89:dd:a3:42:79:b8:ee:35:9f:ea:54:be:
         0f:4b:c4:e6:db:eb:01:aa:24:e8:01:68:6a:03:31:2e:a3:44:
         e1:3b:0d:cb:72:fa:77:7d:59:0e:8b:81:5f:97:cd:ce:84:c2:
         54:e6:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:09 2026 by rpki-client