This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D474A1804AD11F1BCB5FFD6DAE4EC9C.roa
File:                     9D474A1804AD11F1BCB5FFD6DAE4EC9C.roa (raw, json)
Hash identifier:          0zvjvetmCxW3aehEt0da3CdUjTpWsbvRi5ikg4//D3o=
Subject key identifier:   D6:31:83:53:9B:F7:E3:78:76:38:F8:77:FC:82:F1:C4:BF:35:E6:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B8DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D474A1804AD11F1BCB5FFD6DAE4EC9C.roa
Signing time:             Sun 08 Feb 2026 05:18:34 +0000
ROA not before:           Sun 08 Feb 2026 05:18:29 +0000
ROA not after:            Sat 14 Mar 2026 05:18:29 +0000
asID:                     17561
IP address blocks:        154.200.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112863 (0x1b8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  8 05:18:29 2026 GMT
            Not After : Mar 14 05:18:29 2026 GMT
        Subject: CN=69881caa-3a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:f9:d0:3f:cb:63:e0:75:e2:a4:d9:c6:6a:
                    2e:01:0b:fa:a0:98:85:08:12:d6:99:c8:8e:52:04:
                    c8:10:27:e2:6b:bb:cf:02:bb:e7:73:46:2b:f3:00:
                    b4:3f:42:93:fb:c6:7b:19:c0:3e:7f:ce:88:fc:ec:
                    2a:fc:36:c0:e9:19:7e:f0:73:57:10:01:79:55:c7:
                    a0:1d:ca:47:43:7a:34:32:02:6a:8b:8b:63:ea:f6:
                    74:9e:b9:c4:70:2f:ec:8f:b1:fc:92:a6:cb:57:eb:
                    28:9a:8d:a3:74:7a:2e:51:d0:16:09:1b:fe:e9:1e:
                    b4:10:8b:98:42:6b:0e:c7:98:e8:79:95:6a:cb:31:
                    16:08:ba:68:9c:ee:a9:a5:28:7a:1d:4a:48:f7:57:
                    04:d2:01:ce:c3:8d:b5:b3:9f:41:59:93:17:3e:e0:
                    67:18:79:3f:e4:12:58:79:e4:3e:a3:c2:1c:9a:4d:
                    26:fd:75:d7:b6:fa:f3:0a:96:c1:ee:dc:3b:4f:6a:
                    8e:68:02:71:4b:77:42:35:43:3e:ff:49:23:56:dd:
                    bf:a1:59:b7:ca:2e:40:01:84:a7:89:94:9b:e9:6d:
                    06:04:c9:14:0b:ac:6f:e1:9b:8d:80:cb:d3:36:78:
                    95:3f:8d:35:48:29:be:0c:e2:00:89:59:69:72:56:
                    84:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:31:83:53:9B:F7:E3:78:76:38:F8:77:FC:82:F1:C4:BF:35:E6:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D474A1804AD11F1BCB5FFD6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1f:36:48:ca:61:2a:bb:0e:f8:4d:e9:a1:52:f1:3a:d7:1a:
         60:94:7a:33:fb:2e:b5:ec:0e:93:ed:30:69:31:27:d5:55:4f:
         b0:5f:57:63:ba:d3:00:b8:4d:d9:3b:17:a8:b7:a2:c5:4f:77:
         42:3e:89:ce:2f:6c:37:ea:2e:3e:3c:08:e7:28:74:1b:ce:2c:
         c6:67:f9:5f:41:95:76:dc:63:91:b8:48:46:2c:4b:21:62:69:
         cb:38:7f:82:10:13:84:8a:92:cc:22:af:7e:64:c0:7d:c0:a0:
         43:12:1e:26:6f:e7:4d:83:36:eb:2f:ab:11:02:18:5e:26:ec:
         a6:9b:69:87:64:68:ad:52:82:5b:1b:56:cb:c1:34:34:47:ae:
         f5:95:c2:cf:d0:b7:7f:30:fe:c2:58:89:dc:39:8f:fb:ef:c6:
         eb:8a:95:1c:af:1f:db:00:0e:53:b1:15:63:86:66:df:10:21:
         17:b0:bf:3e:6c:9a:97:57:9f:1a:15:f4:d2:b8:f0:4e:5f:e5:
         b7:ce:a9:f5:25:c2:dc:73:a7:99:24:6f:a9:fd:a6:8a:26:c6:
         f3:68:bb:60:63:e1:16:cb:f3:a0:1f:01:6f:3a:33:8f:a7:22:
         d7:3a:77:c7:2c:15:b3:4b:62:0b:a0:47:76:37:f0:1f:02:bd:
         48:71:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:11 2026 by rpki-client