This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE370ECE97511F0B66DB795DAE4EC9C.roa
File:                     CCE370ECE97511F0B66DB795DAE4EC9C.roa (raw, json)
Hash identifier:          de5V46jBEai4lmK1iDamwAmTnRfd4vgbOY1vRjIzuU0=
Subject key identifier:   F9:DC:5D:63:1E:5F:69:5E:D6:F5:A3:DB:27:15:D3:C9:32:1F:79:D9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B314
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE370ECE97511F0B66DB795DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 14:01:01 +0000
ROA not before:           Sun 04 Jan 2026 14:00:56 +0000
ROA not after:            Sat 14 Feb 2026 14:00:56 +0000
asID:                     147176
IP address blocks:        154.197.102.0/24 maxlen: 24
                          154.197.124.0/24 maxlen: 24
                          154.212.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111380 (0x1b314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  4 14:00:56 2026 GMT
            Not After : Feb 14 14:00:56 2026 GMT
        Subject: CN=695a729d-55f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:9e:dd:1f:4d:2d:54:77:b0:54:74:18:0f:
                    ad:47:63:a1:14:51:eb:7b:bd:55:b7:83:c4:3d:2b:
                    be:bd:71:b7:9b:f5:2b:69:43:63:f2:4c:2e:92:1f:
                    70:cb:61:1f:21:7f:80:e7:71:28:3d:84:11:ea:2c:
                    3a:d0:3a:d6:06:b5:12:16:b4:e7:87:95:bd:78:bb:
                    ba:b8:bb:72:1f:12:56:a5:ac:6d:00:63:f0:ac:f7:
                    ac:c8:09:3e:74:21:8b:b7:6f:35:4d:30:2f:04:82:
                    a8:11:f2:c9:f2:8f:ec:19:c8:33:0a:53:ef:a3:3c:
                    06:a6:ab:47:e1:5f:59:ab:5e:68:a8:6d:63:bd:14:
                    54:33:d4:64:87:44:54:a2:e5:0a:02:6c:31:e9:d0:
                    bf:bd:8e:a3:54:ac:ec:15:96:91:6d:22:b9:a4:0e:
                    7b:89:1a:34:1a:36:3a:d9:4c:37:ea:c9:ec:f9:ec:
                    d5:e1:41:38:b9:23:47:2a:e0:6c:0b:13:02:56:70:
                    9d:da:0a:e1:9c:47:42:cc:21:25:37:a1:aa:9b:d3:
                    7b:ee:0d:45:fb:53:11:be:92:bb:5b:07:fd:08:05:
                    40:30:c3:92:35:64:8c:f2:c5:0b:b1:a8:e1:17:f6:
                    4f:3b:ad:82:61:65:5b:a3:62:e6:89:b2:04:80:42:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DC:5D:63:1E:5F:69:5E:D6:F5:A3:DB:27:15:D3:C9:32:1F:79:D9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCE370ECE97511F0B66DB795DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.102.0/24
                  154.197.124.0/24
                  154.212.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:55:1b:b4:9d:d2:e6:b9:02:05:77:15:1f:09:63:e2:f8:de:
         4f:13:d4:10:88:f7:50:94:75:7f:f7:fc:8e:78:68:80:11:48:
         3d:fb:c2:e2:f1:96:20:49:46:6d:2b:31:7d:73:40:18:e7:4b:
         7e:9d:bb:aa:79:e1:18:6e:a5:1f:3f:0e:46:0c:08:62:5a:c7:
         b8:12:d5:5f:af:65:33:6a:f6:57:7c:41:66:9c:ca:16:33:b2:
         aa:62:a2:32:23:ca:24:5e:9f:69:64:55:d2:82:0b:37:fb:d5:
         9c:e3:b0:5d:92:f9:98:7b:57:4a:da:33:00:fe:38:94:ea:37:
         cf:09:10:f2:f1:34:9b:6b:e8:85:b7:89:47:d9:64:fe:d5:a7:
         ce:78:1a:50:06:d3:6c:80:3a:f0:5f:87:84:c9:d6:84:32:8a:
         5a:8c:9a:88:92:5b:62:5a:ce:28:c4:d0:d4:5b:46:5e:22:e3:
         04:d9:cb:56:92:28:f3:11:2d:41:d3:c1:e5:cc:a1:d2:aa:e7:
         e1:77:ad:70:6f:d3:6a:b0:f2:60:14:8c:88:79:fe:e9:ee:7f:
         e2:fc:71:16:57:97:38:ce:3a:1a:8c:10:73:42:80:c4:1b:20:
         6f:c7:ca:8c:31:2d:b0:74:86:a8:24:fd:2f:96:d4:20:43:39:
         14:b8:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:19:29 2026 by rpki-client