This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5373756E56511F0A91F7A95DAE4EC9C.roa
File:                     D5373756E56511F0A91F7A95DAE4EC9C.roa (raw, json)
Hash identifier:          B06+S4SfA0NMefDC8e44dQB5KXlbQ8bgi+z+dKfeOTw=
Subject key identifier:   37:70:11:20:E7:D5:5B:C1:C6:77:D8:29:D9:6D:53:E9:F2:4B:28:8D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5373756E56511F0A91F7A95DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:56:38 +0000
ROA not before:           Tue 30 Dec 2025 09:56:34 +0000
ROA not after:            Fri 30 Jan 2026 09:56:34 +0000
asID:                     55933
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111076 (0x1b1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:56:34 2025 GMT
            Not After : Jan 30 09:56:34 2026 GMT
        Subject: CN=6953a1d6-aba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:44:65:81:89:8e:f1:0a:bf:59:e5:cc:fe:
                    69:54:4d:37:42:87:70:23:6f:6b:e6:b5:42:ac:ed:
                    97:9d:ef:03:00:77:50:d4:7e:bf:52:2a:20:d7:30:
                    cb:01:11:59:76:ce:f3:5e:65:22:d5:63:78:28:c4:
                    ec:e6:a7:6a:50:86:9c:70:1a:bd:a2:8c:81:d9:72:
                    32:29:85:92:0e:d9:5e:f8:ea:0d:c4:80:f9:d0:4e:
                    5c:c0:19:06:4a:3f:2c:c5:6d:42:f4:e0:39:f7:1e:
                    40:de:cc:f4:c6:a8:2c:1e:9f:2d:40:c0:d7:a0:af:
                    f9:cd:57:78:fc:fb:79:e3:35:cc:d5:db:bc:a3:6b:
                    b7:f0:f5:18:b7:59:c3:d0:22:ed:43:ef:86:6c:86:
                    00:42:82:ac:1f:f5:e2:70:e4:fa:ff:5c:41:c1:6a:
                    f5:bf:89:c9:52:a2:e1:96:83:77:27:04:b2:02:9e:
                    90:cf:2f:3a:3b:2c:49:ff:db:af:73:64:1d:b8:c3:
                    47:9a:55:16:83:39:3e:4c:ff:f4:96:dd:1d:6b:b8:
                    e9:b4:7c:ef:88:ba:fa:fb:37:41:1f:70:01:9f:89:
                    b6:c7:9c:6e:8a:32:1f:c2:12:fc:c6:7a:67:6e:58:
                    70:2d:64:f5:42:d3:4b:8d:cc:c1:dd:f7:dd:d6:91:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:11:20:E7:D5:5B:C1:C6:77:D8:29:D9:6D:53:E9:F2:4B:28:8D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5373756E56511F0A91F7A95DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:38:65:62:ac:03:04:55:19:ed:8f:7a:5e:9f:3c:88:8f:25:
         25:2f:ab:ce:41:cb:8a:84:44:9f:ac:92:39:67:6f:70:b2:33:
         21:1c:ec:c4:e3:3d:cf:82:34:4b:d8:dd:ee:60:a2:58:51:64:
         5b:f6:87:9e:7c:8f:c4:6c:91:ec:72:64:9f:7e:b0:b7:36:f6:
         4d:00:35:62:81:48:42:0a:42:65:b6:90:4b:9d:ec:f4:1c:b6:
         2c:5d:07:96:17:17:ca:29:06:6b:e7:a2:09:a7:16:d0:03:43:
         62:50:7f:f5:d6:25:7e:c5:f1:f4:4b:93:59:e9:2c:6b:bc:d5:
         6d:3f:3d:29:67:7e:e1:aa:6e:dc:d9:50:74:47:ff:44:fc:56:
         9d:8a:f9:22:31:72:8d:30:ee:d6:fa:09:89:d9:34:e5:30:8a:
         49:04:c4:ff:0d:f0:89:85:3e:c8:dc:9a:37:7c:4b:ea:8c:8c:
         81:98:4e:b2:42:a3:50:6c:d9:b8:b2:97:e8:7a:8a:81:67:fe:
         42:ce:4f:89:5a:30:07:1b:17:13:be:75:4d:20:63:7e:c0:d8:
         93:de:16:90:ed:41:02:01:a5:bf:7d:6d:ff:82:3f:c0:70:51:
         74:4f:af:93:89:e2:bb:76:23:2c:e5:55:0e:c8:56:7e:af:c3:
         d2:33:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:10:09 2026 by rpki-client