This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791BD2D4E56411F0AC80338DDAE4EC9C.roa
File:                     791BD2D4E56411F0AC80338DDAE4EC9C.roa (raw, json)
Hash identifier:          ht2Dx7oZZDROd9zGv/Ei+2c/k7UzzZ1BVVg7+Pzxn94=
Subject key identifier:   0A:A5:88:CF:52:E1:78:F9:98:4D:19:F6:40:F3:E3:47:C1:56:69:F7
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791BD2D4E56411F0AC80338DDAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:46:54 +0000
ROA not before:           Tue 30 Dec 2025 09:46:49 +0000
ROA not after:            Fri 30 Jan 2026 09:46:49 +0000
asID:                     8796
IP address blocks:        154.201.72.0/21 maxlen: 24
                          154.201.88.0/22 maxlen: 24
                          154.201.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111072 (0x1b1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:46:49 2025 GMT
            Not After : Jan 30 09:46:49 2026 GMT
        Subject: CN=69539f8e-9bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:e9:0e:db:2b:97:7b:a4:5f:86:e4:7c:64:
                    1a:c6:79:cf:8e:6e:34:c1:7f:d3:72:f6:30:db:40:
                    9f:19:76:d0:74:e1:13:a8:39:b8:79:0e:9a:56:a8:
                    f1:08:e4:8e:d3:d1:77:0f:45:20:48:17:4a:a3:49:
                    0d:5d:94:6f:2e:6e:0d:03:57:d1:ea:11:33:cd:14:
                    33:85:b7:6e:8e:82:da:ce:09:20:1a:c9:8f:14:15:
                    ad:80:08:64:cb:86:52:0d:6d:54:22:85:23:11:f3:
                    6a:87:c0:34:5f:cc:b3:87:bd:0f:e4:f6:02:5b:2d:
                    20:83:18:4b:4a:63:d4:77:16:95:7c:7d:f9:aa:04:
                    c7:26:6e:d5:47:bf:4f:28:d6:89:d8:e9:b6:58:fb:
                    4b:1a:87:c8:3a:4b:88:45:90:5f:e3:f0:36:7d:36:
                    16:53:b3:83:e4:c3:4b:78:ee:d8:53:07:3c:56:2c:
                    b6:55:78:90:9b:86:74:5e:79:2a:dd:2a:dd:24:7b:
                    e1:96:ab:cb:d9:f2:4b:de:57:2e:d0:9f:bc:23:1c:
                    60:40:74:dc:a8:5a:cd:8f:5b:6c:c3:38:94:3c:83:
                    a3:8a:cc:90:19:45:80:99:01:38:69:4f:08:4f:dc:
                    bf:08:a6:d3:29:af:74:2b:1a:80:57:62:3a:f3:26:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A5:88:CF:52:E1:78:F9:98:4D:19:F6:40:F3:E3:47:C1:56:69:F7
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/791BD2D4E56411F0AC80338DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.72.0/21
                  154.201.88.0-154.201.93.255

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:23:1c:10:3d:f3:50:ff:97:22:30:05:41:4e:35:2a:91:
         77:32:ea:fe:f7:76:8b:2f:29:12:19:79:b2:54:86:79:d0:e5:
         4c:ea:96:66:96:53:59:96:82:bb:5f:0a:58:1e:73:42:72:8a:
         b2:df:ec:6d:99:cf:75:d3:6e:a5:d6:8d:49:f3:35:86:8a:20:
         92:a1:4e:bd:68:ba:61:17:07:22:e0:2b:9a:00:50:01:52:50:
         ae:7b:f9:c8:03:03:f2:ba:89:2f:c5:b6:92:50:7f:ca:15:6a:
         73:7d:ba:c6:2c:79:48:7b:71:26:bd:df:71:83:5e:19:1c:e0:
         74:1b:86:17:65:08:42:ad:ca:18:7d:33:46:56:98:62:ca:05:
         8a:ac:bb:fd:f6:5a:9f:f9:b2:c9:3f:2c:18:9a:d0:04:c5:48:
         b2:7a:8b:dd:5f:d4:6d:a7:01:cd:b8:ab:cb:d7:fe:1b:e4:c2:
         20:71:f4:85:f3:30:1e:b4:34:dd:c0:51:c2:e8:8c:01:8f:53:
         40:fb:d3:da:08:9e:39:47:3a:00:79:cf:82:c1:a0:92:1e:50:
         44:07:f2:52:d6:d0:a9:f7:e9:ea:42:1a:96:92:da:49:1c:43:
         d7:12:55:f3:25:b1:75:89:e9:cd:78:7e:f0:6a:5e:cb:e9:9b:
         d5:47:59:03
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbHgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjMwMDk0NjQ5WhcNMjYwMTMwMDk0NjQ5WjAYMRYw
FAYDVQQDEw02OTUzOWY4ZS05YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2E/pDtsrl3ukX4bkfGQaxnnPjm40wX/TcvYw20CfGXbQdOETqDm4eQ6a
VqjxCOSO09F3D0UgSBdKo0kNXZRvLm4NA1fR6hEzzRQzhbdujoLazgkgGsmPFBWt
gAhky4ZSDW1UIoUjEfNqh8A0X8yzh70P5PYCWy0ggxhLSmPUdxaVfH35qgTHJm7V
R79PKNaJ2Om2WPtLGofIOkuIRZBf4/A2fTYWU7OD5MNLeO7YUwc8Viy2VXiQm4Z0
Xnkq3SrdJHvhlqvL2fJL3lcu0J+8IxxgQHTcqFrNj1tswziUPIOjisyQGUWAmQE4
aU8IT9y/CKbTKa90KxqAV2I68yYprQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFAql
iM9S4Xj5mE0Z9kDz40fBVmn3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OTFCRDJENEU1NjQxMUYwQUM4MDMzOEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDmslIMAwDBAOayVgDBAGa
yVwwDQYJKoZIhvcNAQELBQADggEBAGS9IxwQPfNQ/5ciMAVBTjUqkXcy6v73dosv
KRIZebJUhnnQ5UzqlmaWU1mWgrtfClgec0JyirLf7G2Zz3XTbqXWjUnzNYaKIJKh
Tr1oumEXByLgK5oAUAFSUK57+cgDA/K6iS/FtpJQf8oVanN9usYseUh7cSa933GD
Xhkc4HQbhhdlCEKtyhh9M0ZWmGLKBYqsu/32Wp/5ssk/LBia0ATFSLJ6i91f1G2n
Ac24q8vX/hvkwiBx9IXzMB60NN3AUcLojAGPU0D709oInjlHOgB5z4LBoJIeUEQH
8lLW0Kn36epCGpaS2kkcQ9cSVfMlsXWJ6c14fvBqXsvpm9VHWQM=
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client