This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A28070E01511F093F007D6DAE4EC9C.roa
File:                     84A28070E01511F093F007D6DAE4EC9C.roa (raw, json)
Hash identifier:          er3eVswCSYiMj5UzCsi8UET7h0nyLOICt0Odam5IxO0=
Subject key identifier:   D0:E9:3C:07:79:C1:28:8A:93:4A:D4:5F:FE:2F:FD:96:D7:CA:EA:14
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B057
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A28070E01511F093F007D6DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 15:39:08 +0000
ROA not before:           Tue 23 Dec 2025 15:39:03 +0000
ROA not after:            Mon 09 Feb 2026 15:39:03 +0000
asID:                     25160
IP address blocks:        154.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 07:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110679 (0x1b057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 15:39:03 2025 GMT
            Not After : Feb  9 15:39:03 2026 GMT
        Subject: CN=694ab79b-d9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:7c:ca:c1:9c:81:b5:8d:03:58:42:0e:f9:
                    c8:f0:05:18:6e:19:52:73:44:1a:4c:16:ba:55:e0:
                    c7:f6:61:07:a8:f8:8d:21:f5:ea:3b:19:48:c4:d0:
                    b5:32:42:9a:e6:4f:ab:17:32:4c:d0:b6:5e:11:ff:
                    c5:42:e1:7b:7c:f2:09:1b:cf:a5:6a:08:09:6e:4b:
                    5b:0e:ab:68:3b:81:35:4e:c9:45:63:f8:54:53:53:
                    6a:ab:62:39:3a:40:c3:3b:cb:c5:dc:72:6b:4c:01:
                    23:ec:fe:f7:aa:5a:6e:c6:6b:09:a0:3c:a6:99:5f:
                    8e:3a:f5:ed:b2:1f:77:d0:fe:08:a1:ec:66:48:02:
                    00:91:36:3d:1d:da:6a:e2:6d:56:c7:39:51:35:cd:
                    58:13:31:46:51:21:08:6c:77:35:0d:8b:64:c7:ce:
                    e5:c9:ce:d6:90:42:b3:3e:ad:81:89:cf:5a:a0:ef:
                    8a:b0:5f:07:1d:16:17:0e:21:b9:75:28:77:7f:44:
                    a0:01:0a:1f:4c:23:15:3f:34:65:48:99:1d:86:59:
                    68:70:1d:39:de:ad:41:5a:7a:ad:57:98:f5:48:d0:
                    97:9a:76:f0:e8:f6:b4:df:e7:ed:84:1c:3d:eb:61:
                    ff:b3:52:30:ae:32:08:e5:8f:e2:02:92:48:fd:a7:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E9:3C:07:79:C1:28:8A:93:4A:D4:5F:FE:2F:FD:96:D7:CA:EA:14
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A28070E01511F093F007D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:b1:1a:77:52:b9:32:f1:fa:8d:87:74:cb:c4:86:06:0f:bf:
         69:9f:91:f4:8d:f6:ab:80:fd:92:43:b8:c6:7d:13:ca:13:bd:
         20:dc:df:04:d7:bb:5e:03:b4:d3:8f:4a:95:12:2b:1b:a5:25:
         5f:58:c8:8b:ce:ea:b7:a0:52:fd:2e:79:b1:17:2d:5d:75:84:
         0b:f6:62:dd:ac:55:89:aa:6c:51:a6:a5:c2:90:29:19:1f:3c:
         ae:4c:1a:c1:fc:91:a7:e7:82:46:89:b7:9f:b3:e3:ec:71:22:
         d5:92:43:5b:c4:10:7a:9f:04:b1:68:92:c6:82:c7:90:f9:7a:
         88:48:b7:10:bf:6e:ec:ba:af:5d:d4:ee:97:6d:d1:1d:0a:f0:
         17:0c:05:71:35:99:3e:93:6a:ef:42:39:03:37:77:e7:cb:0f:
         ef:10:04:a2:54:dd:cc:c7:89:4d:69:a1:26:9e:cf:2e:2a:ee:
         c6:c9:4c:ea:7d:95:50:b8:e2:1f:51:5c:83:9d:6c:7f:6c:21:
         88:f6:e1:a7:9f:30:b7:70:0e:56:fc:de:83:3d:dc:49:ac:7e:
         2e:34:8f:90:97:bc:38:0f:26:e6:bc:25:92:88:94:9c:85:9c:
         c3:39:90:55:4c:7e:d9:70:77:00:21:f2:41:73:0e:52:26:ce:
         5f:9e:c0:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbBXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMTUzOTAzWhcNMjYwMjA5MTUzOTAzWjAYMRYw
FAYDVQQDEw02OTRhYjc5Yi1kOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2V58ysGcgbWNA1hCDvnI8AUYbhlSc0QaTBa6VeDH9mEHqPiNIfXqOxlI
xNC1MkKa5k+rFzJM0LZeEf/FQuF7fPIJG8+laggJbktbDqtoO4E1TslFY/hUU1Nq
q2I5OkDDO8vF3HJrTAEj7P73qlpuxmsJoDymmV+OOvXtsh930P4IoexmSAIAkTY9
Hdpq4m1WxzlRNc1YEzFGUSEIbHc1DYtkx87lyc7WkEKzPq2Bic9aoO+KsF8HHRYX
DiG5dSh3f0SgAQofTCMVPzRlSJkdhllocB053q1BWnqtV5j1SNCXmnbw6Pa03+ft
hBw962H/s1IwrjII5Y/iApJI/adl1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNDp
PAd5wSiKk0rUX/4v/ZbXyuoUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NEEyODA3MEUwMTUxMUYwOTNGMDA3RDZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEyMA0GCSqGSIb3DQEB
CwUAA4IBAQDVsRp3Urky8fqNh3TLxIYGD79pn5H0jfargP2SQ7jGfRPKE70g3N8E
17teA7TTj0qVEisbpSVfWMiLzuq3oFL9LnmxFy1ddYQL9mLdrFWJqmxRpqXCkCkZ
HzyuTBrB/JGn54JGibefs+PscSLVkkNbxBB6nwSxaJLGgseQ+XqISLcQv27suq9d
1O6XbdEdCvAXDAVxNZk+k2rvQjkDN3fnyw/vEASiVN3Mx4lNaaEmns8uKu7GyUzq
fZVQuOIfUVyDnWx/bCGI9uGnnzC3cA5W/N6DPdxJrH4uNI+Ql7w4DybmvCWSiJSc
hZzDOZBVTH7ZcHcAIfJBcw5SJs5fnsBK
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:27 2026 by rpki-client