This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937ECC5201CB11F1B9DA179DDAE4EC9C.roa
File:                     937ECC5201CB11F1B9DA179DDAE4EC9C.roa (raw, json)
Hash identifier:          s6Mem9ZkxU6cba/X150ms6pRnYyt1AKTrvtbSvr5x4M=
Subject key identifier:   86:3E:1F:5A:C0:A8:DB:9A:95:8F:A5:D3:3A:66:39:F5:E9:79:C8:C1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B897
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937ECC5201CB11F1B9DA179DDAE4EC9C.roa
Signing time:             Wed 04 Feb 2026 13:15:29 +0000
ROA not before:           Wed 04 Feb 2026 13:15:24 +0000
ROA not after:            Tue 10 Mar 2026 13:15:24 +0000
asID:                     215691
IP address blocks:        154.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112791 (0x1b897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  4 13:15:24 2026 GMT
            Not After : Mar 10 13:15:24 2026 GMT
        Subject: CN=69834671-5a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:f6:67:08:a8:63:18:23:07:d8:fb:1f:56:
                    00:8c:a7:10:82:87:bb:fc:d7:ad:13:16:a4:6b:d4:
                    16:c8:b9:c7:7d:80:eb:6d:31:cb:ec:14:3e:e9:f5:
                    89:83:10:1b:c1:51:60:c9:5d:e9:b0:a3:71:52:f4:
                    cc:b8:b3:85:74:9c:2b:c4:b9:5c:35:bd:1f:b3:d8:
                    45:7f:18:4f:2a:cc:2c:0e:26:b4:91:5b:f7:d2:d0:
                    01:7f:81:62:f3:e1:22:c3:c4:a1:2a:56:17:03:96:
                    14:92:53:cd:ed:aa:56:f4:8d:7a:ea:8d:3b:e1:82:
                    39:1f:d9:6c:0d:30:94:44:17:c4:6e:5f:4b:f7:d8:
                    a7:01:4f:b3:db:48:18:f8:89:1e:b6:65:43:70:bd:
                    96:5d:20:e5:85:6a:ab:27:3e:ae:24:fe:ac:48:c4:
                    13:59:51:66:bb:8b:f3:6b:6b:60:c8:24:e1:8b:40:
                    0e:27:32:52:c3:c2:e3:4f:bc:8b:bc:8f:2e:7e:ae:
                    78:2e:74:6a:3c:d7:a9:9a:84:68:ba:19:e3:13:6c:
                    48:7c:58:60:46:a9:03:52:a4:1c:a4:0d:33:5b:5d:
                    a3:26:d8:3c:c7:77:49:f1:d3:5f:8c:22:10:66:39:
                    3a:87:f7:d0:14:bc:2f:b3:64:a6:94:5a:6f:6f:b3:
                    1d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3E:1F:5A:C0:A8:DB:9A:95:8F:A5:D3:3A:66:39:F5:E9:79:C8:C1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/937ECC5201CB11F1B9DA179DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:dd:31:19:a8:46:dc:08:a1:e5:9f:af:61:2e:89:bb:d3:c3:
         d2:f0:54:c3:56:ff:49:c1:d9:a8:a8:cd:32:d6:6d:33:8c:58:
         64:84:0c:76:b5:c5:7e:23:1e:d8:0d:21:cd:a4:71:67:ef:e7:
         15:e0:b1:4c:7c:89:c7:df:f0:07:e5:c9:44:03:fd:e0:cd:ef:
         3a:fc:97:f1:19:bc:75:7e:bd:76:07:70:fd:bb:0e:42:62:f1:
         62:8f:62:2c:8c:01:4a:39:24:05:8d:a8:82:05:88:69:71:af:
         c8:5f:3e:ef:dd:15:17:d9:3e:86:4e:60:62:75:71:c5:ae:7e:
         d5:6b:32:c3:27:5e:9e:26:11:6d:2a:0e:a1:d4:18:e8:27:52:
         ca:c9:f4:1d:f9:ca:c0:ce:87:bf:a5:f2:ec:62:49:49:94:28:
         26:12:61:30:9c:18:8f:f9:bc:e0:c1:3a:0e:50:8f:0b:f6:27:
         49:53:3a:76:85:d6:51:4b:14:fa:4c:42:1b:bf:a0:ab:08:ba:
         61:49:43:f4:f4:52:b7:af:b1:dc:d0:ce:4f:3e:1f:a4:b8:73:
         b1:e9:a4:2d:e0:5e:c4:19:86:b5:d1:15:f3:31:27:d7:23:c2:
         f3:06:c6:23:58:9d:aa:c9:33:bb:40:ae:ef:77:78:8e:a2:3b:
         86:dc:57:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:37 2026 by rpki-client