This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58A0570FF4911F0A20BA7B6DAE4EC9C.roa
File:                     B58A0570FF4911F0A20BA7B6DAE4EC9C.roa (raw, json)
Hash identifier:          Qi2hx1UDAjiTo7lCT9VOMJEmnYkUfnTh1h0YH6M1+D4=
Subject key identifier:   B3:B1:88:0D:4C:69:15:4F:E9:4D:AA:BE:4D:E6:4C:12:69:7B:09:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B7FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58A0570FF4911F0A20BA7B6DAE4EC9C.roa
Signing time:             Sun 01 Feb 2026 08:40:49 +0000
ROA not before:           Sun 01 Feb 2026 08:40:45 +0000
ROA not after:            Sat 07 Mar 2026 08:40:45 +0000
asID:                     398993
IP address blocks:        154.90.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112636 (0x1b7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  1 08:40:45 2026 GMT
            Not After : Mar  7 08:40:45 2026 GMT
        Subject: CN=697f1191-04aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:86:3c:30:d9:65:5b:6c:60:be:9d:35:0c:
                    95:99:cc:e3:d8:8b:b8:ad:98:e6:92:9f:4b:79:8d:
                    69:19:15:15:33:d0:c0:8d:1b:9a:0f:73:b3:4b:64:
                    f5:91:3c:bb:0b:4a:7f:62:e1:d3:48:88:21:e1:5f:
                    49:46:5e:6b:bb:11:bf:d5:b0:8e:24:19:93:96:37:
                    0c:d1:7f:99:9c:ee:62:8a:d3:ac:b7:5d:df:46:1d:
                    c5:2a:ce:77:58:6a:38:4d:88:26:bd:71:1e:81:84:
                    52:8b:1b:d8:3c:bd:96:e4:13:fb:fb:1c:fe:07:00:
                    cb:05:ce:29:c2:73:5c:40:e7:67:e3:68:e1:81:fa:
                    4b:61:85:95:03:56:c5:32:22:ea:64:96:e6:b2:83:
                    12:44:50:61:f4:be:0e:e3:09:47:a5:32:02:05:68:
                    42:86:ba:be:8e:5a:bc:16:e9:cc:97:09:74:90:60:
                    0f:72:8f:bc:7a:32:7f:21:58:e2:29:99:3e:e9:b1:
                    b7:34:9d:6a:7b:0e:04:e4:04:52:92:2b:8e:7b:3d:
                    56:52:ae:42:e3:f2:42:65:84:0f:d3:81:e8:d3:91:
                    c7:ca:5c:2e:12:2b:6f:85:4f:dc:4f:bc:7c:d3:74:
                    1d:df:c5:06:53:e2:ae:78:03:3a:d8:55:49:f8:5d:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:88:0D:4C:69:15:4F:E9:4D:AA:BE:4D:E6:4C:12:69:7B:09:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B58A0570FF4911F0A20BA7B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:bd:e7:f7:9b:d2:b4:df:8c:93:df:24:8a:97:98:eb:3b:30:
         dd:33:7c:ca:41:cc:12:4c:fd:ba:6b:52:ce:0b:3a:cc:57:66:
         5a:aa:2a:3d:43:a7:d0:0a:76:92:59:f5:c5:f7:32:6d:8d:00:
         f9:c6:b3:bd:62:2c:a2:cb:2b:07:d5:32:0f:b9:7b:5c:f8:1f:
         55:a2:2f:ea:d8:77:06:f9:bb:bc:bf:46:fa:62:07:ad:9d:8a:
         73:0e:a8:da:6a:af:3f:8c:2f:23:4e:90:b9:4f:e0:47:c3:51:
         6e:5f:24:c1:fd:fb:65:47:ed:88:54:e0:b9:24:d1:ea:54:ba:
         61:13:8b:2b:ba:b0:85:d0:97:f3:11:4e:9a:a8:6f:67:bb:23:
         3d:14:00:45:de:50:3e:70:f0:3a:4f:7a:7d:26:2c:20:79:f4:
         40:90:b7:db:d7:09:8b:7d:ca:b9:f8:e3:49:c9:15:e4:18:7a:
         01:88:26:57:35:50:32:4c:ff:71:71:ab:fc:ee:de:99:a9:6f:
         cd:f7:20:f2:69:66:24:0d:85:5f:a2:99:96:c2:59:b6:4f:11:
         b4:8f:05:f3:5f:fc:7e:41:a8:df:3b:9f:34:a6:10:20:71:6a:
         4a:69:99:bc:3f:50:bc:59:5b:d5:02:0f:d5:89:8b:b9:45:fd:
         98:9c:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:03:44 2026 by rpki-client