This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96722292E56011F0B270FBF5DAE4EC9C.roa
File:                     96722292E56011F0B270FBF5DAE4EC9C.roa (raw, json)
Hash identifier:          ImdKSJ44DfWkQwnM9OkIlqV7KOsn6BBigp3XpK4q32s=
Subject key identifier:   E9:29:5C:B2:D2:AC:70:91:0E:92:09:24:29:79:9E:A3:79:02:8C:73
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96722292E56011F0B270FBF5DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:19:06 +0000
ROA not before:           Tue 30 Dec 2025 09:19:01 +0000
ROA not after:            Fri 30 Jan 2026 09:19:01 +0000
asID:                     8796
IP address blocks:        154.201.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Jan 2026 00:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111062 (0x1b1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:19:01 2025 GMT
            Not After : Jan 30 09:19:01 2026 GMT
        Subject: CN=69539909-f636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3e:94:40:bb:3a:c3:58:ba:23:6a:57:4c:de:
                    75:4f:f6:2a:16:2f:95:77:bb:f4:3a:e9:96:18:2f:
                    55:e3:e6:e4:d6:6d:5e:49:d7:59:51:54:45:87:3d:
                    65:a8:52:2c:b4:bb:29:d1:0c:05:fc:23:c8:21:c7:
                    31:7b:78:56:7c:0c:bd:76:1b:36:2b:77:f0:4e:4a:
                    4d:f0:39:8b:40:28:8a:ce:17:c4:bc:10:50:27:a0:
                    51:c9:62:f8:4f:ed:20:32:08:7d:b5:ba:c8:c7:63:
                    52:95:8b:52:fd:ad:9f:3a:8a:42:99:9e:10:91:51:
                    85:02:9e:a0:c5:3a:d6:4a:e9:5a:bc:b0:d4:fe:1e:
                    81:7e:06:34:7b:1b:d0:c5:99:fa:48:71:d5:96:67:
                    0e:5a:fd:5a:6c:76:6c:c2:2e:c4:da:25:cb:e6:f5:
                    d6:ee:80:2b:9f:55:57:6a:7a:ff:b4:c4:ab:be:10:
                    5b:b3:62:98:d7:4d:a8:61:e0:13:dd:fd:ab:94:8d:
                    38:81:f1:2f:2d:80:9c:0b:e7:6c:45:99:8a:4a:97:
                    f6:f8:25:66:3d:44:d8:22:ba:40:36:a4:42:7a:f4:
                    f7:65:f9:27:5d:11:34:36:dd:74:8b:9a:f0:42:98:
                    a4:6e:79:c0:3e:9e:a5:b6:8e:f8:d0:d6:93:45:0b:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:29:5C:B2:D2:AC:70:91:0E:92:09:24:29:79:9E:A3:79:02:8C:73
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96722292E56011F0B270FBF5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:f9:f8:a2:14:6c:99:3d:c6:b3:08:88:46:c9:53:35:74:95:
         2d:de:5e:4a:06:59:29:bc:01:eb:68:08:1a:8b:ff:6c:ad:56:
         cd:d6:a1:ea:a3:fc:80:c1:f3:c0:9c:64:6c:50:4f:41:a9:a0:
         14:55:ac:21:37:a5:21:db:dc:09:1f:1c:f9:d1:71:03:73:29:
         85:41:66:47:0c:07:24:18:fe:ed:48:91:0d:5d:7c:0d:35:f7:
         aa:0e:35:39:44:d3:b3:23:bd:99:93:f6:2a:bf:7f:91:43:70:
         aa:97:aa:59:cb:06:75:b4:1a:89:ec:38:4e:71:8b:17:70:8b:
         dc:9f:29:30:e0:7e:27:7a:e5:37:9d:f3:d5:4c:b9:e5:6a:18:
         bb:dd:c2:c2:12:e6:0a:b4:1d:b4:4c:77:90:17:2d:da:b4:e7:
         a9:a8:b9:47:ff:b3:6e:9f:0f:9b:5d:5d:40:1c:7a:ba:7a:46:
         fc:25:fe:af:2c:e4:51:66:a5:12:1b:dd:ed:74:fb:b2:8e:4c:
         7f:fc:ca:64:7d:83:53:12:1e:c9:73:a2:10:f7:f3:b6:37:2b:
         8e:d2:5b:0b:74:c2:30:19:6f:08:66:ba:ba:29:f2:84:b6:08:
         89:53:0b:e5:ab:51:29:36:5d:c7:2b:74:a0:93:7c:45:a6:30:
         de:fa:31:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:38 2026 by rpki-client