This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1E78404F2BD11F0B094A38FDAE4EC9C.roa
File:                     A1E78404F2BD11F0B094A38FDAE4EC9C.roa (raw, json)
Hash identifier:          DK5W0fuhrSFdlZGLNlh92WHZZxhKF0xB8B3ERjSUDVY=
Subject key identifier:   A9:44:E8:3D:BF:13:D1:7D:C0:BF:88:42:39:76:E5:CB:30:AA:ED:A6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1E78404F2BD11F0B094A38FDAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 09:27:53 +0000
ROA not before:           Fri 16 Jan 2026 09:27:47 +0000
ROA not after:            Thu 29 Jan 2026 09:27:47 +0000
asID:                     214143
IP address blocks:        154.81.132.0/22 maxlen: 24
                          154.81.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111850 (0x1b4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 09:27:47 2026 GMT
            Not After : Jan 29 09:27:47 2026 GMT
        Subject: CN=696a0499-dddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:a1:79:27:20:44:0e:cc:5f:10:6a:a4:eb:
                    15:8d:e7:51:d4:3b:e6:bd:93:15:16:8a:b6:29:90:
                    26:72:7a:93:86:6d:25:8b:c1:a3:84:46:49:9c:aa:
                    af:aa:3d:5a:b7:f8:54:c7:4a:a2:4e:e3:41:44:d4:
                    dd:44:aa:ad:a1:0e:aa:a3:e1:86:44:03:a7:a2:77:
                    d9:46:68:00:07:7b:ff:66:e7:7e:d9:14:66:14:eb:
                    54:62:a6:f3:e9:a7:2a:18:a6:04:0b:90:9e:8f:3c:
                    b0:9f:33:a8:e1:dc:04:53:f8:2f:86:2f:ac:f6:2d:
                    69:86:1d:6a:7a:c1:0c:dd:f5:d1:6c:70:26:11:d2:
                    4f:67:87:67:2b:e7:e0:50:c2:dc:33:8e:a1:8a:8b:
                    01:e0:a7:2a:fa:2c:29:9c:0f:2a:8d:a7:ad:6b:dd:
                    e8:ef:07:19:2a:6b:eb:7f:4e:17:31:df:07:e3:ca:
                    8d:a7:a9:c8:17:31:72:ab:6b:cc:93:36:6d:86:7b:
                    cb:30:67:7a:8f:b5:d0:51:e6:d6:10:97:4b:ba:bd:
                    4a:c7:9e:ca:74:9c:ce:e3:8d:ae:c0:e1:6b:85:3d:
                    33:b8:9c:17:fd:7a:6f:94:b2:ef:98:e4:66:97:1a:
                    9e:38:fb:a8:3b:6c:f4:ad:78:3b:14:19:7d:c6:ae:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:E8:3D:BF:13:D1:7D:C0:BF:88:42:39:76:E5:CB:30:AA:ED:A6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1E78404F2BD11F0B094A38FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.132.0/22
                  154.81.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:ca:92:b2:7f:21:12:5b:e9:b9:61:0a:b1:29:9f:ca:89:e6:
         9f:51:05:99:1e:c8:21:a3:df:33:41:a5:e0:27:29:ff:f9:a3:
         cf:43:a0:81:36:55:e6:3e:ee:71:03:fc:ae:93:62:0f:71:8e:
         d2:9c:5c:bf:4f:90:45:e7:68:21:36:ab:6d:4d:f8:69:91:a4:
         15:de:4e:22:1f:02:72:55:ef:50:51:57:e0:5c:a9:64:da:e5:
         7d:b7:bd:a2:0c:f4:54:aa:0c:94:94:83:d9:3d:21:41:61:b0:
         57:47:ac:b8:85:01:e6:98:64:a1:60:62:6a:e4:09:77:d1:90:
         2c:cc:c6:03:4c:98:28:df:69:35:2b:bf:1c:a6:53:ea:24:11:
         bb:2f:60:1d:fa:da:83:29:0f:5e:03:d7:8a:ce:80:08:2f:41:
         15:1c:f1:b3:32:91:88:c8:9d:8e:c4:5c:c1:71:37:60:0e:d3:
         e6:e8:53:4f:27:32:b3:28:ea:dd:6a:f0:5e:67:bf:80:b9:af:
         de:84:70:c1:5d:61:b4:c7:2b:16:7f:bc:68:37:42:fe:0b:9b:
         5d:9b:c5:e1:a3:c2:62:59:ba:4a:2c:0c:21:ac:29:c7:2b:84:
         d9:65:56:36:67:f8:17:9b:8f:71:5e:97:30:33:45:72:23:be:
         3e:ca:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:25 2026 by rpki-client