This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
File:                     8D18AEECE38E11F0A347E5A2DAE4EC9C.roa (raw, json)
Hash identifier:          WIyAs8VzJeNK2Ur4BAjj78BPh+0Pby/MkO0hTbNIwiI=
Subject key identifier:   60:8E:7B:88:82:CB:48:E9:5D:F9:66:F3:54:74:53:CA:6C:89:29:99
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B17F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 01:43:04 +0000
ROA not before:           Sun 28 Dec 2025 01:42:59 +0000
ROA not after:            Thu 05 Feb 2026 01:42:59 +0000
asID:                     15221
IP address blocks:        154.198.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Jan 2026 00:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110975 (0x1b17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 28 01:42:59 2025 GMT
            Not After : Feb  5 01:42:59 2026 GMT
        Subject: CN=69508b28-28a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:54:04:5b:29:6c:22:49:64:12:89:9f:7b:
                    b6:3f:13:2f:18:07:fc:67:0d:66:bb:d0:9a:6f:1d:
                    bf:5f:fd:1b:ca:b0:fd:4b:d8:66:84:89:03:6e:16:
                    e5:94:d5:3b:cd:e9:5e:a3:96:16:1b:44:3c:bd:e7:
                    61:8a:08:85:10:1e:b0:10:14:be:8d:0e:bd:0e:bf:
                    a7:a1:d6:83:4a:4e:da:b3:e2:89:4b:74:c4:0c:54:
                    17:25:9e:9f:15:5a:41:56:8e:b7:0b:f2:cf:18:aa:
                    d3:ce:e0:59:d5:22:37:66:d4:ac:44:b4:f0:46:d8:
                    8f:10:4b:b7:58:d0:ca:4f:7b:a4:8b:f3:a7:a7:6f:
                    2d:dd:f2:54:db:ce:ff:6d:2f:b6:b7:01:06:40:01:
                    17:55:55:ab:9a:48:b7:f1:60:1c:94:86:e6:bd:02:
                    cf:02:f4:b8:ab:c5:ac:02:80:55:cc:c4:69:8a:4f:
                    4b:f2:17:cf:f9:62:81:60:d9:6a:55:fc:cb:e0:20:
                    10:16:c6:ca:c0:9b:81:d4:07:bf:c5:a6:bb:aa:27:
                    5a:b6:58:87:3b:29:61:2d:e2:24:6b:6f:15:89:3e:
                    d6:0a:ab:38:ff:da:69:1a:7e:9a:f3:19:83:b4:1d:
                    3f:26:3c:a7:fa:05:81:f1:ff:ee:84:c2:ef:70:0d:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8E:7B:88:82:CB:48:E9:5D:F9:66:F3:54:74:53:CA:6C:89:29:99
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:56:45:e1:51:81:e6:15:d1:da:9b:2d:a4:1b:0c:e9:4b:01:
         e2:01:38:26:fd:85:9a:c3:3e:ca:54:da:03:e7:22:9d:2a:be:
         48:a2:3e:22:d7:e7:7d:6e:20:10:45:de:9a:4c:f2:7e:78:e8:
         37:ee:2b:48:06:71:2f:38:8f:d7:6a:b7:3a:bc:10:c6:e8:63:
         96:a5:b3:44:ec:41:f4:f2:06:6a:ea:86:1f:ee:88:31:b9:e7:
         c2:3b:4b:00:4b:14:c2:b1:11:90:45:6a:be:67:7e:8c:19:31:
         18:80:67:0c:14:85:d3:94:4d:78:22:c6:99:87:99:06:84:92:
         e1:b3:7a:4e:32:34:5c:db:e9:01:03:57:54:82:e3:15:fe:d3:
         33:39:1d:b9:ca:94:a2:33:cd:41:b9:26:0e:37:a4:2d:3d:bd:
         cd:1b:27:33:7f:f5:5b:b5:f8:f2:8b:1c:b4:8e:35:e5:70:ac:
         d6:fd:26:7e:56:71:a5:c5:34:b1:51:fd:45:4b:a5:5b:f2:f1:
         6c:e4:6d:19:2b:22:d1:db:f2:e8:38:1c:99:b2:f5:d9:2a:65:
         17:7a:92:cd:35:c6:b4:0e:cc:95:1d:3a:67:06:f4:ce:f4:b9:
         a8:c4:c1:08:58:6e:65:d1:6d:4a:c8:f9:c1:5c:6d:51:69:a5:
         52:62:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:15:07 2026 by rpki-client