This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC845DCEE8911F0856D64C5DAE4EC9C.roa
File:                     7DC845DCEE8911F0856D64C5DAE4EC9C.roa (raw, json)
Hash identifier:          UFKbqhKXXUM/NHPn6MFg62eP80v/p6h1VajI7J7rlZE=
Subject key identifier:   B8:AE:F8:15:63:9F:9C:35:DE:BD:B0:B5:7A:FE:EA:41:A2:EC:61:6F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B416
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC845DCEE8911F0856D64C5DAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 01:04:34 +0000
ROA not before:           Sun 11 Jan 2026 01:04:29 +0000
ROA not after:            Sun 08 Feb 2026 01:04:29 +0000
asID:                     14315
IP address blocks:        154.196.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111638 (0x1b416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 11 01:04:29 2026 GMT
            Not After : Feb  8 01:04:29 2026 GMT
        Subject: CN=6962f722-12b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:58:59:ae:e4:c2:64:cb:c2:84:0b:c0:11:
                    23:2d:d6:cb:99:7a:57:13:69:d1:08:87:5e:51:fe:
                    e3:2a:8a:54:29:43:ed:5a:92:11:37:e9:d7:0e:c4:
                    57:84:6f:cd:3d:69:fa:e8:c0:5c:2e:0d:0c:91:e0:
                    bd:29:fe:fc:6f:bd:da:ae:74:e9:25:9b:45:af:77:
                    bc:70:f9:a8:d1:07:7f:51:72:8d:21:8d:55:f6:37:
                    e7:22:1f:bc:71:4a:41:1b:d6:a1:00:71:f5:af:15:
                    28:c2:e3:45:d7:f7:af:c2:df:d8:48:b1:1d:a5:02:
                    e2:32:5f:e3:f0:cc:6c:50:f9:76:69:96:d0:11:51:
                    f5:ad:bf:bd:df:63:c2:04:52:3e:f5:2b:35:71:e6:
                    b7:f1:e1:49:e1:71:fd:91:92:f8:7c:73:f6:dd:c2:
                    44:4d:07:51:02:f8:89:11:27:83:a4:d9:4e:c1:76:
                    96:9a:77:74:c1:4e:ec:a9:90:ad:8f:39:84:2b:cb:
                    a2:4b:f1:f0:ec:d1:71:0f:80:dd:c2:8a:9e:59:fd:
                    a4:37:ff:39:e9:da:ed:86:36:4d:f6:ba:0e:13:6a:
                    06:1c:12:aa:53:28:b2:84:5c:f3:a8:a1:d0:67:53:
                    95:6e:34:b1:d3:87:c2:0a:31:bc:42:f2:4d:b2:b3:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:F8:15:63:9F:9C:35:DE:BD:B0:B5:7A:FE:EA:41:A2:EC:61:6F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC845DCEE8911F0856D64C5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:92:5a:ca:cc:f0:9f:73:ad:45:6d:53:48:62:6d:19:22:
         3b:55:9e:20:4a:a9:80:60:88:46:33:af:bc:27:64:05:4b:97:
         ab:98:b7:0a:28:94:8a:16:b5:4d:72:32:bd:80:26:5a:fd:62:
         d2:60:91:b7:cb:27:9c:d1:cd:5c:c4:a8:5b:62:62:cc:89:60:
         bf:01:60:03:c6:60:ad:e2:1d:8c:db:88:63:8f:99:d9:c9:47:
         c6:f5:fc:5e:f1:3a:4f:82:80:b1:a5:09:02:73:86:fc:aa:a8:
         f8:41:27:8c:a5:f0:40:ca:0c:5f:37:44:2c:f6:cc:36:a4:3f:
         73:13:c0:5f:61:6f:4a:67:d6:87:1d:08:a9:3a:b3:32:98:dd:
         a5:9f:e8:f1:82:d0:c8:90:ab:b1:36:49:c9:4b:76:f5:fb:fb:
         9c:c1:f2:e5:cb:88:89:48:c8:9a:69:15:1c:c2:ba:32:61:24:
         15:36:b0:2b:de:76:f5:f1:0e:62:31:b2:8f:56:7a:e2:5c:23:
         3f:60:40:a6:3c:d6:ca:81:e8:d6:a9:dd:c4:b5:68:12:b1:0f:
         5a:27:6d:d4:f6:b7:e8:d2:56:dd:f7:c6:81:78:90:83:61:ae:
         d7:2a:3d:40:03:47:15:75:a8:b9:ee:7e:98:c8:c8:f8:19:5a:
         14:75:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:52 2026 by rpki-client