This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CB863EEB0611F087CD96B4DAE4EC9C.roa
File:                     81CB863EEB0611F087CD96B4DAE4EC9C.roa (raw, json)
Hash identifier:          qh28U29snsbR5TGELKreOFfdVb2pZ89q1y/aIZi0bgY=
Subject key identifier:   88:C3:09:30:2C:37:8C:69:B4:94:EC:72:3D:0A:FD:DD:49:2D:B4:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B34C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CB863EEB0611F087CD96B4DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 13:49:23 +0000
ROA not before:           Tue 06 Jan 2026 13:49:18 +0000
ROA not after:            Sun 22 Feb 2026 13:49:18 +0000
asID:                     133180
IP address blocks:        154.84.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111436 (0x1b34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  6 13:49:18 2026 GMT
            Not After : Feb 22 13:49:18 2026 GMT
        Subject: CN=695d12e3-fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:c4:9b:54:52:3c:66:fb:eb:e2:22:1f:fc:
                    6b:21:46:06:d8:84:77:c9:30:1e:ab:c5:31:03:82:
                    c0:26:5f:87:f7:22:43:9e:79:14:9a:0d:00:38:5d:
                    bb:ab:73:04:cc:2e:4f:dc:fe:42:fb:4b:2d:a7:8f:
                    86:ad:cc:6c:9f:2b:8f:ad:37:d4:0c:e6:b8:63:a8:
                    03:52:65:41:6d:25:2e:a4:d2:3a:36:cd:cf:35:8c:
                    03:4a:d7:b0:c9:18:dd:38:4c:48:b2:6b:31:8a:75:
                    69:4b:ea:61:7e:1a:42:0d:50:88:cd:fd:3e:7d:c2:
                    24:a9:f0:6e:9c:6f:31:e8:ca:73:ef:e9:cc:e0:eb:
                    c3:ae:0b:f9:68:1d:56:39:0c:bc:ce:db:5b:b8:96:
                    33:50:af:57:ed:5d:bb:04:b0:5f:7e:77:d1:eb:dd:
                    e5:7c:6b:28:8e:e1:df:3b:49:6e:1a:e7:c9:c5:45:
                    2d:d2:ba:09:da:c5:ba:4d:36:9e:bb:a7:9e:c1:63:
                    f7:c1:ec:13:e8:7c:2e:bc:b1:f4:87:e1:88:a7:d6:
                    f3:b4:be:e8:7c:db:1c:73:05:fb:6a:99:e0:16:bd:
                    9f:74:a5:22:cc:bf:a1:3c:8d:fc:c0:aa:26:05:e7:
                    67:7f:0d:24:e3:86:bf:86:84:3e:19:3d:93:c3:7f:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:09:30:2C:37:8C:69:B4:94:EC:72:3D:0A:FD:DD:49:2D:B4:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81CB863EEB0611F087CD96B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:f7:f6:10:0f:fc:4b:7a:7d:23:87:35:4b:d0:97:b4:14:83:
         72:00:07:38:ea:73:3f:4c:1a:5f:62:6d:9c:1b:81:44:ef:c7:
         c9:5d:20:14:b1:34:2f:6b:06:84:ce:23:58:93:d8:df:9a:b5:
         9d:0e:ea:ad:f3:fb:b1:6c:5d:c2:7b:69:2a:08:29:ba:5f:78:
         e9:8d:e9:ff:e1:44:ae:fb:f5:74:56:ad:c3:f4:50:17:73:47:
         62:ed:19:81:c7:81:22:ef:34:51:b9:01:d9:ec:98:80:5b:3a:
         88:74:29:b7:6b:e7:73:64:7d:85:3a:75:d1:41:a8:ea:53:4b:
         68:3d:8b:a8:ee:1c:ae:d3:f5:ba:57:41:09:b6:71:a9:fc:8f:
         e6:9a:f8:c3:7b:4e:c4:b1:d2:84:82:20:29:29:d2:76:1f:5c:
         82:34:e9:40:52:9d:98:09:7c:f2:55:54:6f:51:97:a5:9c:22:
         c6:e8:8d:63:98:b8:e5:4e:30:48:76:7c:e9:78:6a:71:f8:5b:
         4a:85:fc:6e:f2:86:27:77:6d:73:bf:69:0f:d6:b8:b6:7e:17:
         d6:b6:39:06:d9:33:59:4f:e9:3d:fa:59:1f:d8:40:3d:df:0d:
         dc:87:ee:7b:e2:2f:d0:2f:f0:88:1a:8c:ae:13:c4:3b:66:c1:
         53:d8:9e:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbNMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA2MTM0OTE4WhcNMjYwMjIyMTM0OTE4WjAYMRYw
FAYDVQQDEw02OTVkMTJlMy1mYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA523Em1RSPGb76+IiH/xrIUYG2IR3yTAeq8UxA4LAJl+H9yJDnnkUmg0A
OF27q3MEzC5P3P5C+0stp4+GrcxsnyuPrTfUDOa4Y6gDUmVBbSUupNI6Ns3PNYwD
StewyRjdOExIsmsxinVpS+phfhpCDVCIzf0+fcIkqfBunG8x6Mpz7+nM4OvDrgv5
aB1WOQy8zttbuJYzUK9X7V27BLBffnfR693lfGsojuHfO0luGufJxUUt0roJ2sW6
TTaeu6eewWP3wewT6HwuvLH0h+GIp9bztL7ofNsccwX7apngFr2fdKUizL+hPI38
wKomBednfw0k44a/hoQ+GT2Tw3/54wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIjD
CTAsN4xptJTscj0K/d1JLbS4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MUNCODYzRUVCMDYxMUYwODdDRDk2QjREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSHMA0GCSqGSIb3DQEB
CwUAA4IBAQDC9/YQD/xLen0jhzVL0Je0FINyAAc46nM/TBpfYm2cG4FE78fJXSAU
sTQvawaEziNYk9jfmrWdDuqt8/uxbF3Ce2kqCCm6X3jpjen/4USu+/V0Vq3D9FAX
c0di7RmBx4Ei7zRRuQHZ7JiAWzqIdCm3a+dzZH2FOnXRQajqU0toPYuo7hyu0/W6
V0EJtnGp/I/mmvjDe07EsdKEgiApKdJ2H1yCNOlAUp2YCXzyVVRvUZelnCLG6I1j
mLjlTjBIdnzpeGpx+FtKhfxu8oYnd21zv2kP1ri2fhfWtjkG2TNZT+k9+lkf2EA9
3w3ch+574i/QL/CIGoyuE8Q7ZsFT2J6K
-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:26 2026 by rpki-client