This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8737E7F6000B11F19722ABDDDAE4EC9C.roa
File:                     8737E7F6000B11F19722ABDDDAE4EC9C.roa (raw, json)
Hash identifier:          VKV2d6S9ISNhSicgZYZD0Bk1QT9AAXQTIvfL5CiO3cc=
Subject key identifier:   8D:23:38:D4:7D:B2:A0:90:92:DA:17:40:C1:02:8D:30:8F:19:B1:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B845
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8737E7F6000B11F19722ABDDDAE4EC9C.roa
Signing time:             Mon 02 Feb 2026 07:48:14 +0000
ROA not before:           Mon 02 Feb 2026 07:48:09 +0000
ROA not after:            Thu 12 Mar 2026 07:48:09 +0000
asID:                     54801
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112709 (0x1b845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  2 07:48:09 2026 GMT
            Not After : Mar 12 07:48:09 2026 GMT
        Subject: CN=698056be-10ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:ab:a1:2d:94:25:c0:e2:8e:86:95:15:10:
                    21:53:ad:79:67:f5:7d:ec:71:ea:ab:cf:4b:80:7c:
                    9e:7f:ae:90:ee:b0:32:61:95:73:e7:f3:82:fa:3a:
                    96:54:44:fe:79:90:df:f9:5a:b2:bf:8b:69:75:43:
                    5c:6d:9e:13:d6:be:de:08:37:61:b0:0f:03:51:46:
                    49:bf:6d:b7:82:2a:50:96:96:28:96:d8:da:d0:89:
                    fb:fc:98:d4:62:8b:66:6b:f9:66:9f:2c:2d:e8:07:
                    f2:ec:49:f3:29:ab:dd:3a:ca:a2:f6:c7:48:d6:24:
                    d6:5e:56:8b:40:3b:9f:5b:fe:76:9c:21:8e:00:4f:
                    dc:e2:5b:c9:09:c5:87:d7:ca:6e:b3:5e:cf:25:65:
                    97:5c:22:0c:38:be:ab:e1:03:65:22:b0:89:6b:2c:
                    5c:75:d4:53:5a:24:9f:4a:50:39:aa:30:9a:63:8e:
                    e9:b6:50:e1:a3:6b:54:63:22:74:34:bf:78:60:40:
                    72:b8:29:3b:15:d7:5d:87:63:86:66:fd:ca:46:15:
                    37:f7:b9:05:05:57:49:b5:c1:a7:29:02:cb:06:f3:
                    e0:64:13:e8:1d:4b:a1:33:34:7c:55:3a:b2:07:94:
                    3d:46:82:9d:2a:89:05:3f:33:4c:e5:07:0a:d5:08:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:23:38:D4:7D:B2:A0:90:92:DA:17:40:C1:02:8D:30:8F:19:B1:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8737E7F6000B11F19722ABDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c5:5e:1f:9d:f7:4d:63:67:b0:28:9c:a1:fb:3b:2d:c5:02:
         38:21:16:5e:bf:26:bd:63:4e:28:89:30:1a:f5:3b:8e:bd:56:
         29:dc:37:0d:af:df:c9:60:b8:46:dc:17:50:5b:df:8e:de:c0:
         9b:32:12:5b:0b:a7:90:5f:bb:29:2e:92:cc:ae:10:77:36:a9:
         ee:94:2e:c5:ef:c6:20:29:f0:36:bb:86:67:8f:e2:45:27:68:
         5c:c3:30:a4:af:8a:35:e1:8c:bf:d1:08:11:ce:20:ef:fd:70:
         a0:3f:d3:f5:51:1a:96:20:90:f2:b4:0a:fe:ba:98:f0:dc:b9:
         b0:cc:86:ca:f1:e2:85:c5:86:a1:2a:dd:d4:f5:ce:4d:ed:81:
         f1:d9:a1:32:22:a6:3f:c8:84:1e:f0:05:d2:73:19:cf:a8:1b:
         04:4b:e1:f6:df:56:09:09:e6:50:dc:e1:40:12:bc:b9:47:0a:
         de:4c:c2:99:76:15:b2:2b:c4:55:56:01:20:d8:ad:e2:e5:cb:
         ad:cc:06:62:1c:69:3d:cb:52:0c:96:ae:c8:a6:a7:67:57:ef:
         da:1e:a5:f9:6a:ce:6a:51:41:bb:f0:63:c1:0a:39:19:f7:fb:
         2b:42:4a:23:42:83:8b:06:fb:de:cf:4e:6d:cc:81:a4:98:0b:
         39:26:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 19:55:02 2026 by rpki-client