This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7649BD6FC3311F0A86DC9BCDAE4EC9C.roa
File:                     A7649BD6FC3311F0A86DC9BCDAE4EC9C.roa (raw, json)
Hash identifier:          S5t5sHBqLYSf866O4z10vqrGAfMPXNRQDuJANh57IOw=
Subject key identifier:   E8:98:11:6E:51:41:87:2B:FE:59:72:AB:D3:CC:76:7C:DA:79:04:E2
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B713
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7649BD6FC3311F0A86DC9BCDAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 10:25:23 +0000
ROA not before:           Wed 28 Jan 2026 10:25:18 +0000
ROA not after:            Fri 06 Mar 2026 10:25:18 +0000
asID:                     18779
IP address blocks:        154.203.51.0/24 maxlen: 24
                          154.203.52.0/22 maxlen: 24
                          154.203.56.0/22 maxlen: 24
                          154.203.60.0/23 maxlen: 24
                          154.203.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Jan 2026 12:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112403 (0x1b713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 28 10:25:18 2026 GMT
            Not After : Mar  6 10:25:18 2026 GMT
        Subject: CN=6979e413-254d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:36:f6:f5:03:c4:cb:2a:89:29:52:61:5d:
                    85:ef:e5:06:32:5e:57:27:51:1f:95:63:46:e5:e3:
                    c6:a8:79:d4:3d:87:81:2a:e0:a0:dd:db:b4:d1:95:
                    c0:39:5e:b9:9a:22:47:93:1a:ab:ae:1f:29:71:b2:
                    17:83:69:94:5a:25:78:18:d3:5b:3b:e8:43:e3:c6:
                    3a:21:b0:94:c8:27:ac:fd:2e:20:ec:c2:71:b6:75:
                    3a:ce:77:6f:be:52:ca:99:66:b8:50:de:f1:a2:4e:
                    a3:51:12:4c:c1:c3:ad:99:65:2a:eb:f7:9c:de:79:
                    b1:6c:e2:f4:4f:05:6c:fb:c5:e1:18:0b:14:15:7a:
                    40:25:b6:59:33:3b:bf:75:49:5a:59:fe:86:84:77:
                    b8:9c:ad:c8:3f:b1:ff:69:22:7c:9f:b5:02:ca:b2:
                    bc:de:76:e6:60:97:aa:f7:6e:d3:cb:c1:67:d9:49:
                    30:d3:9f:1c:08:5e:36:e7:4c:6b:ac:c3:20:11:26:
                    a3:4d:6f:87:56:1b:9c:c1:72:11:f1:be:7f:d2:3c:
                    ff:5d:0e:f9:8b:e8:55:b0:68:5b:0a:5b:f9:6d:86:
                    15:dc:eb:47:07:cf:34:8c:50:36:46:d6:cc:08:ae:
                    f5:85:9a:4f:b1:63:ec:82:57:f6:1a:f5:a3:a8:f5:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:11:6E:51:41:87:2B:FE:59:72:AB:D3:CC:76:7C:DA:79:04:E2
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7649BD6FC3311F0A86DC9BCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.51.0-154.203.62.255

    Signature Algorithm: sha256WithRSAEncryption
         55:33:72:32:b8:3d:90:8a:1d:17:0b:99:38:dc:04:ef:b1:d0:
         59:e4:c4:10:93:b6:9d:ed:b8:55:20:1e:92:d0:c9:33:b9:66:
         fb:11:c9:2e:eb:9a:3c:b5:0a:78:38:5f:c9:a1:bb:62:b3:ed:
         95:5d:ef:a1:ec:3a:a2:44:34:19:73:ce:f3:f2:18:ed:91:4b:
         84:8d:03:f8:42:a9:f2:c5:7f:fa:75:33:d6:4b:a1:d7:e1:c3:
         32:ea:31:3e:60:0c:08:62:a0:9e:26:f1:d9:99:d8:ab:c9:50:
         2b:09:4e:1f:bf:5e:12:5b:db:1d:e4:e5:d1:94:97:eb:ea:0f:
         22:6c:97:5c:1b:c2:99:9c:06:40:8d:e6:a4:8d:75:5f:08:24:
         69:65:03:6f:55:27:9f:66:89:f3:fe:24:b4:40:32:30:ca:01:
         9d:42:71:02:c6:a5:82:f7:a4:64:84:0c:30:06:81:86:c4:8c:
         09:9c:da:34:eb:64:28:85:2a:cf:b1:7a:92:ae:9c:f6:57:73:
         ff:e4:66:57:72:8e:f9:72:9f:24:60:f4:20:9a:52:49:ee:44:
         96:d6:d8:2f:5f:66:58:6b:98:1d:94:9a:1d:0c:06:aa:d9:af:
         29:14:6f:78:03:f4:34:25:01:19:61:bc:e9:01:d6:b9:56:24:
         3e:89:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 19:20:04 2026 by rpki-client