This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCAEA2AF2CE11F0810C4B78DAE4EC9C.roa
File:                     BCCAEA2AF2CE11F0810C4B78DAE4EC9C.roa (raw, json)
Hash identifier:          rgf8VmcjfRVtYuo6YVpFqTiOMznhlEz7AT+HfhM/lqc=
Subject key identifier:   98:E8:D8:94:4A:F1:64:9A:31:29:F0:0E:A7:FC:B5:6C:D6:6F:A7:AB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCAEA2AF2CE11F0810C4B78DAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 11:30:20 +0000
ROA not before:           Fri 16 Jan 2026 11:30:15 +0000
ROA not after:            Tue 27 Jan 2026 11:30:15 +0000
asID:                     395793
IP address blocks:        154.92.205.0/24 maxlen: 24
                          154.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111874 (0x1b502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 11:30:15 2026 GMT
            Not After : Jan 27 11:30:15 2026 GMT
        Subject: CN=696a214b-52ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:90:a5:3c:f7:93:b6:e4:79:44:ab:00:c4:
                    32:38:4f:3d:f0:33:5d:da:a2:5a:5f:28:94:02:05:
                    0a:3f:e6:75:49:05:bd:86:cf:d1:01:07:3b:be:b9:
                    e2:ac:b3:bd:d4:42:97:4a:3b:51:97:42:b3:bb:e5:
                    c3:10:36:64:79:a7:3a:fb:83:01:4c:3c:26:ef:ed:
                    9b:94:ee:d0:75:a5:b5:a1:51:3a:9a:a4:14:68:bb:
                    2a:ab:54:a6:91:59:2e:8f:ec:8a:e8:a9:2b:ed:59:
                    da:3a:91:5b:ce:6b:59:42:15:05:6b:19:40:27:7d:
                    aa:b4:31:87:aa:6a:5f:a5:4e:5a:cc:a8:16:cd:4b:
                    e7:86:5c:65:b5:1d:65:68:ba:76:59:0b:2b:19:70:
                    87:b9:4c:41:d4:da:89:ce:9e:2f:03:26:cf:20:8f:
                    57:5d:16:45:37:9b:c5:be:42:90:9a:d2:c2:b2:cf:
                    82:c8:5a:0e:06:36:0b:7b:25:39:53:e6:74:11:1f:
                    d2:1f:5f:b5:52:0f:88:4f:45:36:a1:48:4b:d9:6e:
                    a8:b4:fb:86:70:ca:15:c0:4a:0f:33:38:c7:48:0f:
                    b9:36:75:df:5b:dd:ac:23:63:fe:ca:a1:3a:fd:38:
                    a6:61:80:ec:ce:6b:01:bb:a4:8b:56:3b:28:78:44:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:D8:94:4A:F1:64:9A:31:29:F0:0E:A7:FC:B5:6C:D6:6F:A7:AB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCAEA2AF2CE11F0810C4B78DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.205.0/24
                  154.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:63:3d:30:01:57:da:8b:a9:75:3a:a2:21:b9:ae:38:97:6f:
         10:48:9f:f4:58:16:89:40:1b:68:5a:4f:97:89:0e:4e:30:2a:
         1b:e8:c2:8e:3a:9e:32:ce:89:3c:6f:07:63:b4:54:78:bd:cb:
         27:71:b8:7f:fa:c2:5e:26:2f:9c:f4:e4:33:43:fa:ea:44:04:
         a6:3e:5a:22:c6:5c:04:51:7c:f7:0b:da:46:a5:e8:a4:ea:e7:
         d2:e5:c6:3a:98:aa:cf:ba:2c:b8:97:70:7f:25:32:46:71:82:
         ce:5f:86:3f:9e:81:82:07:24:02:9d:8e:cf:92:83:7d:0a:a3:
         32:ff:ec:53:1c:36:d6:cb:ed:6b:a9:99:8e:97:d6:62:a9:f7:
         aa:e8:81:cb:c0:69:54:ba:b5:6c:34:12:65:cb:5b:9a:7e:d0:
         e7:ff:6a:ce:a9:87:13:be:58:dd:02:89:5e:34:66:82:6e:5f:
         18:48:4f:cd:d6:4f:bd:6c:f2:42:70:66:ac:7d:18:02:6e:28:
         ce:04:4b:7f:36:c1:1e:3d:31:c8:b1:d0:c7:f4:b8:b2:9a:a2:
         a4:e5:bb:b6:33:3d:bf:3f:6c:8a:1a:45:73:1d:2d:a9:1d:75:
         6c:88:ee:72:33:80:c5:0d:c7:e0:eb:38:ba:5c:60:ac:94:50:
         c4:5a:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:09:25 2026 by rpki-client