This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C3980EF2C011F096240EA0DAE4EC9C.roa
File:                     86C3980EF2C011F096240EA0DAE4EC9C.roa (raw, json)
Hash identifier:          PP8CFclFLd3Ju9yVRJ0GvnGH8hhbjsEgL8e4mBxHCL4=
Subject key identifier:   40:82:4E:D9:98:80:55:59:10:04:31:F4:4C:8A:C9:F2:68:8B:A6:D4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C3980EF2C011F096240EA0DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 09:48:36 +0000
ROA not before:           Fri 16 Jan 2026 09:48:31 +0000
ROA not after:            Sun 22 Feb 2026 09:48:31 +0000
asID:                     20326
IP address blocks:        154.193.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 07:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111852 (0x1b4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 09:48:31 2026 GMT
            Not After : Feb 22 09:48:31 2026 GMT
        Subject: CN=696a0974-7d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:6d:92:2d:02:9b:ac:ef:45:87:a5:3b:02:
                    d6:90:b0:60:12:14:f9:09:ba:26:20:32:ce:37:08:
                    a5:30:a7:74:db:d5:81:2f:e7:e9:64:24:bb:11:85:
                    7d:24:e5:46:e7:a3:0f:b2:a9:11:97:54:7d:b4:d9:
                    f7:82:60:0c:fd:a0:67:be:23:58:d8:05:c7:89:38:
                    c0:b3:46:40:a3:76:ee:7d:8d:69:52:c2:ce:a5:da:
                    8d:f9:03:b4:a9:39:8e:7c:bc:a9:ee:7c:0a:f1:15:
                    91:88:3f:ad:00:6d:3f:e4:bd:5c:28:13:0d:86:ef:
                    3d:3d:3d:aa:a8:52:8a:9e:6e:5c:66:4e:5e:11:b4:
                    cf:a2:2f:90:33:9c:6b:97:1a:2b:1e:44:9a:fc:c1:
                    96:26:8c:95:2b:6d:56:5a:e4:1b:ac:6c:6a:fe:90:
                    d0:8c:eb:c7:c1:59:80:62:b8:4b:50:ae:f1:6e:d5:
                    43:cf:ba:da:56:95:4b:61:32:3f:33:ea:ff:71:89:
                    d8:ac:e6:12:3d:fe:02:5a:b4:88:77:2a:34:fb:07:
                    e2:c1:5d:ed:9c:ee:c3:f5:a8:4e:fb:3f:29:83:02:
                    d5:c1:4b:85:af:99:54:63:5c:18:29:c1:e7:d8:c3:
                    8e:04:de:c6:2e:b1:16:31:5b:68:07:64:13:d0:61:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:82:4E:D9:98:80:55:59:10:04:31:F4:4C:8A:C9:F2:68:8B:A6:D4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86C3980EF2C011F096240EA0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:f1:4d:7f:5a:a3:36:be:83:70:97:96:2f:ac:12:2b:ca:
         f0:22:f0:85:2c:21:0e:a2:f3:e6:1d:cf:69:4f:7a:95:a6:2c:
         9a:8d:25:3e:b2:02:b7:fc:94:33:62:d7:d6:82:aa:25:39:0f:
         cf:d6:33:f0:04:84:a4:cf:ac:1a:70:2d:f9:1f:89:47:15:77:
         2f:a5:2a:f3:27:ec:af:2e:f2:93:81:ef:3b:53:10:a5:2c:cf:
         c4:c4:a9:05:08:60:10:ca:21:e0:e0:81:7f:68:41:88:40:a9:
         ac:ce:7a:6b:52:25:d6:3d:e6:db:96:64:ad:19:c9:b8:b6:f2:
         69:16:fe:e1:0e:a8:3a:d4:78:cd:95:71:10:e0:2d:8b:fb:03:
         94:e9:6e:0f:12:5d:17:c8:51:5b:5c:42:df:43:54:47:54:a8:
         64:65:95:d0:dc:d0:68:d6:81:40:4c:8c:81:26:e6:c1:73:de:
         ed:73:fa:2a:b0:bf:6a:98:38:ef:c7:fc:59:24:81:3d:03:13:
         1c:85:d3:02:99:3a:38:df:5a:01:7d:c3:6c:20:30:a6:ba:77:
         80:e0:69:c9:bf:ba:ae:8f:63:34:68:24:6e:5c:71:1b:29:6e:
         5d:1a:a4:c7:d1:89:02:f3:35:a4:8a:4f:40:17:74:07:52:9e:
         91:47:68:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbTsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTE2MDk0ODMxWhcNMjYwMjIyMDk0ODMxWjAYMRYw
FAYDVQQDEw02OTZhMDk3NC03ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLNtki0Cm6zvRYelOwLWkLBgEhT5CbomIDLONwilMKd029WBL+fpZCS7
EYV9JOVG56MPsqkRl1R9tNn3gmAM/aBnviNY2AXHiTjAs0ZAo3bufY1pUsLOpdqN
+QO0qTmOfLyp7nwK8RWRiD+tAG0/5L1cKBMNhu89PT2qqFKKnm5cZk5eEbTPoi+Q
M5xrlxorHkSa/MGWJoyVK21WWuQbrGxq/pDQjOvHwVmAYrhLUK7xbtVDz7raVpVL
YTI/M+r/cYnYrOYSPf4CWrSIdyo0+wfiwV3tnO7D9ahO+z8pgwLVwUuFr5lUY1wY
KcHn2MOOBN7GLrEWMVtoB2QT0GGT2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFECC
TtmYgFVZEAQx9EyKyfJoi6bUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NkMzOTgwRUYyQzAxMUYwOTYyNDBFQTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMn/FNf1qjNr6DcJeWL6wSK8rwIvCFLCEOovPmHc9pT3qVpiyajSU+
sgK3/JQzYtfWgqolOQ/P1jPwBISkz6wacC35H4lHFXcvpSrzJ+yvLvKTge87UxCl
LM/ExKkFCGAQyiHg4IF/aEGIQKmsznprUiXWPebblmStGcm4tvJpFv7hDqg61HjN
lXEQ4C2L+wOU6W4PEl0XyFFbXELfQ1RHVKhkZZXQ3NBo1oFATIyBJubBc97tc/oq
sL9qmDjvx/xZJIE9AxMchdMCmTo431oBfcNsIDCmuneA4GnJv7quj2M0aCRuXHEb
KW5dGqTH0YkC8zWkik9AF3QHUp6RR2j/
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:22 2026 by rpki-client