This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C01DB6CFE4D11F0AAC2C29DDAE4EC9C.roa
File:                     8C01DB6CFE4D11F0AAC2C29DDAE4EC9C.roa (raw, json)
Hash identifier:          yJk3t2xTTFHP0HmknMi7osbMPOXIm5YkSblbIUE0buA=
Subject key identifier:   4C:50:4B:AC:CA:EE:C4:54:37:45:D3:67:15:EA:EB:5F:45:0D:14:A9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B788
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C01DB6CFE4D11F0AAC2C29DDAE4EC9C.roa
Signing time:             Sat 31 Jan 2026 02:35:47 +0000
ROA not before:           Sat 31 Jan 2026 02:35:42 +0000
ROA not after:            Tue 24 Feb 2026 02:35:42 +0000
asID:                     395886
IP address blocks:        154.202.117.0/24 maxlen: 24
                          154.202.120.0/21 maxlen: 24
                          154.217.234.0/23 maxlen: 24
                          154.217.236.0/22 maxlen: 24
                          154.217.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Feb 2026 00:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112520 (0x1b788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 31 02:35:42 2026 GMT
            Not After : Feb 24 02:35:42 2026 GMT
        Subject: CN=697d6a83-5f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:50:de:c2:3a:f8:ca:26:71:b6:4c:db:5a:
                    16:07:11:01:d8:23:a0:98:21:90:93:a3:b8:97:ee:
                    be:8b:0c:a2:68:23:f7:65:4a:37:68:14:0f:b6:c7:
                    6c:36:e3:fb:c1:31:03:66:69:2f:40:48:96:3b:0d:
                    28:06:9d:4d:15:7a:89:8e:ac:15:90:b9:ff:f1:8c:
                    ae:5e:96:90:9a:a7:2d:ad:1b:85:a2:29:b1:e9:cc:
                    14:e4:d5:bf:b4:0a:5b:bb:5f:e7:80:4c:41:d8:d1:
                    f7:05:cc:c5:6e:d2:14:c1:b2:78:94:bb:78:a5:88:
                    8d:ca:e0:40:e0:b1:9f:f9:7f:20:c5:60:d9:e0:be:
                    03:73:bd:6c:cb:a9:c1:b6:dd:d4:25:2d:87:f8:d8:
                    f1:01:94:13:fb:01:88:c6:9d:d1:a9:f7:4a:2f:dc:
                    9a:85:53:9f:32:72:d1:73:00:83:f3:5c:aa:44:ef:
                    5d:f3:d6:d3:56:26:9e:dc:ec:57:f2:50:28:bb:e4:
                    1e:94:57:bd:75:2f:04:eb:f9:49:69:28:e9:ff:e4:
                    0a:82:71:04:47:e6:6e:ac:73:e2:7b:d1:00:c5:6a:
                    79:65:ba:60:6d:b8:ee:49:dc:f1:0a:09:d9:6b:2c:
                    90:fe:81:41:72:58:2f:73:d1:3e:c3:47:0b:9e:e2:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:4B:AC:CA:EE:C4:54:37:45:D3:67:15:EA:EB:5F:45:0D:14:A9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C01DB6CFE4D11F0AAC2C29DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.117.0/24
                  154.202.120.0/21
                  154.217.234.0-154.217.255.255

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:e3:b1:b1:6c:32:86:75:09:43:d1:f5:38:e2:3c:eb:71:
         52:35:fd:11:c0:48:e9:79:d6:20:dc:02:5b:f5:0f:43:b2:c7:
         8f:28:c6:ed:12:c1:33:07:92:cb:d9:3e:d7:44:28:80:34:fd:
         b9:0d:f3:f7:13:fd:97:91:e6:5d:5f:c4:30:4b:36:0a:e6:4c:
         d2:fc:9e:7c:98:45:e4:21:c1:44:2f:08:77:63:51:02:0c:8a:
         9b:0c:98:fe:24:f7:94:c5:da:0f:28:da:63:67:de:3b:5e:51:
         b9:8c:88:74:58:35:10:7f:00:fc:0f:b7:1c:b2:28:90:74:d1:
         ec:2f:e9:6b:6c:58:18:3a:95:82:2d:f9:d9:46:f3:a5:ce:cf:
         fa:a4:48:17:8a:38:d7:3d:a8:dc:85:b2:99:0b:e1:e0:52:33:
         9f:7e:67:0f:f8:68:75:30:d0:4b:34:35:0d:a2:f2:75:e4:3c:
         f4:03:45:d8:ad:66:16:e5:82:db:69:af:46:a1:21:ce:5e:47:
         61:a3:da:2c:f1:61:4b:a9:27:8f:08:1f:d2:46:37:9a:43:73:
         6a:00:ba:bb:55:ae:b0:ef:cb:c6:83:5e:cb:e4:e0:5e:88:65:
         4e:74:e5:b4:db:c6:78:bd:20:e9:4c:52:df:db:1f:e0:7c:10:
         a4:2f:d6:25
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAbeIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTMxMDIzNTQyWhcNMjYwMjI0MDIzNTQyWjAYMRYw
FAYDVQQDEw02OTdkNmE4My01ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyVxQ3sI6+MomcbZM21oWBxEB2COgmCGQk6O4l+6+iwyiaCP3ZUo3aBQP
tsdsNuP7wTEDZmkvQEiWOw0oBp1NFXqJjqwVkLn/8YyuXpaQmqctrRuFoimx6cwU
5NW/tApbu1/ngExB2NH3BczFbtIUwbJ4lLt4pYiNyuBA4LGf+X8gxWDZ4L4Dc71s
y6nBtt3UJS2H+NjxAZQT+wGIxp3RqfdKL9yahVOfMnLRcwCD81yqRO9d89bTViae
3OxX8lAou+QelFe9dS8E6/lJaSjp/+QKgnEER+ZurHPie9EAxWp5ZbpgbbjuSdzx
CgnZayyQ/oFBclgvc9E+w0cLnuJP3wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFExQ
S6zK7sRUN0XTZxXq619FDRSpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QzAxREI2Q0ZFNEQxMUYwQUFDMkMyOUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAmsp1AwQDmsp4MAsDBAGa
2eoDAwGa2DANBgkqhkiG9w0BAQsFAAOCAQEAgNDjsbFsMoZ1CUPR9TjiPOtxUjX9
EcBI6XnWINwCW/UPQ7LHjyjG7RLBMweSy9k+10QogDT9uQ3z9xP9l5HmXV/EMEs2
CuZM0vyefJhF5CHBRC8Id2NRAgyKmwyY/iT3lMXaDyjaY2feO15RuYyIdFg1EH8A
/A+3HLIokHTR7C/pa2xYGDqVgi352Ubzpc7P+qRIF4o41z2o3IWymQvh4FIzn35n
D/hodTDQSzQ1DaLydeQ89ANF2K1mFuWC22mvRqEhzl5HYaPaLPFhS6knjwgf0kY3
mkNzagC6u1WusO/LxoNey+TgXohlTnTltNvGeL0g6UxS39sf4HwQpC/WJQ==
-----END CERTIFICATE-----
Generated at Sun Feb 8 04:50:37 2026 by rpki-client