This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE33632E6E811F0B2776CDFDAE4EC9C.roa
File:                     ABE33632E6E811F0B2776CDFDAE4EC9C.roa (raw, json)
Hash identifier:          Lpmci+c3pCiNIerJQn4OHun7EfJI2s4TmuG/nXnF5aI=
Subject key identifier:   F2:D0:CB:1D:04:95:C0:C4:C4:CF:68:9F:1F:42:85:8C:D1:8F:18:C8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B242
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE33632E6E811F0B2776CDFDAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 08:05:44 +0000
ROA not before:           Thu 01 Jan 2026 08:05:39 +0000
ROA not after:            Sun 08 Feb 2026 08:05:39 +0000
asID:                     44559
IP address blocks:        154.210.237.0/24 maxlen: 24
                          154.210.238.0/24 maxlen: 24
                          154.219.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111170 (0x1b242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 08:05:39 2026 GMT
            Not After : Feb  8 08:05:39 2026 GMT
        Subject: CN=69562ad8-0d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:4c:57:13:8c:4b:aa:01:01:ab:47:1e:aa:
                    b8:8f:38:17:63:a7:ce:9c:aa:8d:54:d9:13:13:24:
                    d6:07:77:82:77:c6:46:7f:db:4a:97:ae:c7:7f:89:
                    14:17:b1:34:35:27:3f:0b:f2:c9:85:94:1f:00:ad:
                    80:81:15:cf:e5:ff:ac:62:2c:a1:d5:b9:af:8f:cb:
                    71:98:37:df:d8:d3:35:66:0c:38:8e:b7:ff:61:9d:
                    bb:ae:a7:b2:6a:5f:28:59:df:b8:7d:de:6f:5c:3a:
                    3c:77:02:50:3e:eb:10:68:ae:c6:5a:ec:84:7d:b2:
                    ef:ee:12:ee:a5:f6:71:22:d7:8d:c8:f6:19:cf:eb:
                    88:76:dd:93:7f:db:49:95:e8:02:16:bd:d4:a0:bc:
                    23:00:37:75:0b:cf:59:18:d4:c3:c8:86:e7:91:9f:
                    0c:55:71:fd:22:f2:71:c4:aa:41:4b:41:1a:30:19:
                    2a:63:a0:79:08:c1:f0:e8:ae:fe:65:c0:ff:3d:08:
                    33:bd:14:83:a3:b6:d2:59:90:3d:32:0f:34:59:1e:
                    9d:bc:24:93:72:4f:79:1d:c6:be:57:c2:e6:85:24:
                    fb:4e:6e:51:80:b8:1c:1b:21:f9:5f:77:9d:39:41:
                    69:79:30:4f:0f:10:5a:63:75:0c:a1:c3:91:72:78:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D0:CB:1D:04:95:C0:C4:C4:CF:68:9F:1F:42:85:8C:D1:8F:18:C8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABE33632E6E811F0B2776CDFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.237.0-154.210.238.255
                  154.219.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:82:46:1e:82:12:e8:03:61:cf:6c:db:e3:4b:0c:48:32:44:
         5e:2c:d9:36:9d:4f:9c:78:c0:27:92:01:52:41:08:71:22:08:
         98:05:79:74:18:19:b5:87:fc:4f:f2:6d:ac:d4:be:34:15:16:
         fd:8b:d6:b0:6c:db:8a:2e:38:ef:f0:26:a4:83:76:eb:ad:79:
         2b:5e:79:89:92:10:e3:64:85:b1:bb:91:e2:55:d7:d4:3b:46:
         64:9d:66:ef:65:e3:ef:ba:30:80:c4:e2:38:a7:e6:f1:06:16:
         52:6e:6f:80:0c:8a:f4:89:7c:ac:b3:89:56:6e:5d:d1:26:2f:
         9a:8b:bf:6b:4a:cc:7a:e6:70:17:04:e5:1a:a0:df:14:ff:e1:
         1d:b4:4b:33:e9:84:30:b1:40:54:c5:ed:2b:b3:d3:f0:d6:df:
         d9:2a:4d:d2:d4:3e:81:3a:69:e0:dd:bc:33:e2:ee:0e:28:8b:
         2c:48:92:71:c1:7b:5e:42:34:45:6f:26:97:5a:1a:20:b5:c3:
         94:5f:d2:d5:e1:bf:44:10:6d:fc:e6:a8:c0:ae:57:4d:bf:b5:
         58:6d:ea:92:c6:bb:ae:f5:8f:06:4d:12:15:59:6f:6d:51:24:
         24:b5:70:0f:8e:b8:20:b0:ca:b3:1c:08:a4:04:23:d2:6e:fb:
         97:cc:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:18 2026 by rpki-client