This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05BB45CF05911F0A5594880DAE4EC9C.roa
File:                     C05BB45CF05911F0A5594880DAE4EC9C.roa (raw, json)
Hash identifier:          M9254H15x3NVgCJ4avMaGpPUV06dGYuwcjyvBHMreBs=
Subject key identifier:   2F:EE:77:B2:A3:96:EE:B0:ED:AB:EC:5F:DB:93:B4:38:3C:F6:3E:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B465
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05BB45CF05911F0A5594880DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:27:52 +0000
ROA not before:           Tue 13 Jan 2026 08:27:47 +0000
ROA not after:            Mon 09 Feb 2026 08:27:47 +0000
asID:                     401696
IP address blocks:        154.222.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111717 (0x1b465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 08:27:47 2026 GMT
            Not After : Feb  9 08:27:47 2026 GMT
        Subject: CN=69660208-2af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:5e:72:a4:3c:1e:d7:34:49:35:44:7d:4a:
                    e3:54:6d:ba:55:7f:02:bd:9d:30:7a:ed:c2:c4:f4:
                    a1:e5:ea:9d:c0:d0:91:f8:8f:36:03:44:dc:fb:31:
                    4a:1f:c5:38:b9:06:a0:5d:4a:5e:fa:9d:75:47:d4:
                    20:92:fa:f8:25:5b:d4:73:22:25:de:43:02:67:09:
                    79:48:6c:d4:82:a8:6b:dd:d4:4d:37:93:da:32:b8:
                    3b:d5:d6:b5:15:0f:de:63:01:ff:85:74:1d:b7:f3:
                    53:e5:35:20:d7:f8:50:98:3b:fc:61:4f:40:78:ed:
                    d4:1b:c3:bd:35:fd:37:dd:f9:cc:36:c6:4c:6f:2a:
                    1d:e0:cd:2f:65:ee:76:d2:50:71:dc:64:c7:d2:b3:
                    23:57:de:4e:c6:0a:77:7d:ff:21:57:8b:56:22:ad:
                    aa:99:6f:28:26:5f:c7:fa:d7:a1:36:bc:df:9d:fa:
                    dd:89:b6:4a:93:10:0b:52:d8:9d:28:3f:f7:22:27:
                    38:8d:c1:25:7c:1c:b4:27:84:8e:7b:b8:4a:a1:8e:
                    f5:78:8c:a1:b3:52:d5:a9:7f:90:df:b8:12:5d:5e:
                    dd:2b:b7:4a:1a:7e:4f:e0:a8:97:9b:48:b5:2d:f3:
                    2b:19:23:48:d1:0e:21:ba:d4:26:92:2e:66:6f:ec:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EE:77:B2:A3:96:EE:B0:ED:AB:EC:5F:DB:93:B4:38:3C:F6:3E:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C05BB45CF05911F0A5594880DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:21:9f:78:5f:2d:d0:d7:89:7d:98:9f:89:b6:03:1f:90:
         f7:4e:c9:fa:0f:ea:a3:69:9e:65:b0:cc:c8:fb:fc:3d:fc:c2:
         22:82:b0:de:82:19:da:27:da:67:60:29:84:33:60:6e:c1:a7:
         7f:06:25:82:f1:12:0d:b1:83:c5:c4:6a:01:9f:f4:da:59:b1:
         11:98:07:3c:42:f6:d6:26:6a:e7:99:b0:66:25:c3:10:0d:99:
         d1:4d:bd:71:2e:3e:71:78:23:2c:90:66:34:c6:a6:26:ec:b8:
         12:d3:b8:24:5e:57:af:78:9d:d4:dc:40:ab:cb:d2:2e:26:43:
         ac:3b:52:0f:13:30:5c:3f:9e:25:c7:05:ef:69:b0:29:ab:ee:
         d3:4d:73:9e:11:61:80:82:c3:46:19:f5:aa:cb:ea:c0:bf:6a:
         7e:91:b7:1d:c1:49:59:f4:da:a5:6a:53:20:71:0c:c4:5c:d8:
         eb:6d:7b:8e:10:90:f5:5a:1e:98:e7:c5:35:df:da:b7:23:d8:
         b8:62:54:a2:5f:8b:c5:b5:c5:34:43:92:94:80:d1:f4:94:93:
         c9:f4:dc:47:0f:19:07:fa:59:dc:07:02:f2:aa:1d:0d:e7:58:
         79:ee:78:69:fc:f5:c8:bf:1e:a9:da:c1:6d:aa:7c:a0:57:64:
         4c:54:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:47 2026 by rpki-client