This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D4F7F4DFDB11F0BF56FCF2DAE4EC9C.roa
File:                     D6D4F7F4DFDB11F0BF56FCF2DAE4EC9C.roa (raw, json)
Hash identifier:          5e9PBlcJdWRpmE0VTUTC0GOH4WJLq3fK/N9yA0F4PT0=
Subject key identifier:   66:AC:D4:CA:10:91:AA:10:D6:0D:AF:26:09:14:17:0F:B8:6E:01:BF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D4F7F4DFDB11F0BF56FCF2DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 08:46:15 +0000
ROA not before:           Tue 23 Dec 2025 08:46:10 +0000
ROA not after:            Mon 26 Jan 2026 08:46:10 +0000
asID:                     6079
IP address blocks:        154.90.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110625 (0x1b021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 23 08:46:10 2025 GMT
            Not After : Jan 26 08:46:10 2026 GMT
        Subject: CN=694a56d7-09da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:42:94:dd:57:c5:98:ae:37:21:ba:4f:31:
                    16:30:a3:74:e1:53:8c:1a:0b:b4:0b:0d:ce:41:97:
                    ea:8f:c2:65:33:24:d5:bc:93:6d:08:71:6a:77:af:
                    f0:78:0a:37:1a:41:89:e8:50:11:5b:b2:aa:ac:42:
                    c0:1d:40:78:0f:8e:00:c0:52:38:2e:be:93:3e:e7:
                    d9:70:71:98:24:2d:70:13:3d:89:b8:06:53:7c:f8:
                    95:f7:32:ef:1a:f7:c9:10:d1:64:f3:c6:92:f7:aa:
                    ea:ad:94:0c:db:4c:22:21:de:44:5d:72:21:e6:1e:
                    ed:26:5d:73:32:92:89:dd:a9:6a:08:30:a8:18:a5:
                    37:e8:b7:00:14:cf:57:50:5b:c8:d6:9e:0f:5d:9d:
                    63:61:b5:b6:67:91:47:35:43:93:66:50:9d:53:fe:
                    c0:8b:83:a0:04:92:c6:52:48:97:55:55:68:d1:34:
                    cd:0d:4d:c2:f2:bf:a5:4e:89:05:fb:c8:04:b6:3c:
                    65:c6:5b:1e:f9:94:46:8f:e7:15:36:00:79:50:41:
                    10:15:b5:4b:c0:4e:4a:09:45:36:a2:a0:80:5d:67:
                    3d:f3:ff:73:c7:c5:ac:14:8c:b9:5e:31:a2:17:02:
                    05:44:dc:64:a1:c3:e7:b0:11:ac:d1:5e:cb:92:de:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AC:D4:CA:10:91:AA:10:D6:0D:AF:26:09:14:17:0F:B8:6E:01:BF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6D4F7F4DFDB11F0BF56FCF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c5:c8:35:27:f0:de:20:74:5c:c3:7e:47:d6:be:df:63:c6:
         bd:e9:14:34:76:81:0b:fd:47:af:9a:29:e0:88:88:cd:13:94:
         3a:df:05:83:26:ad:03:8c:7d:f3:26:f3:fd:56:88:5f:89:55:
         1d:08:37:16:49:17:ce:50:93:97:d3:af:3d:a4:b8:51:18:0a:
         a7:6b:74:f2:7d:69:e1:2f:29:5a:a7:60:92:b7:13:17:36:06:
         53:bf:89:5a:78:e1:a8:e8:98:12:b5:a2:0a:a9:9f:7d:7a:ef:
         8a:8a:0e:30:7c:77:5f:65:d4:8e:4e:2c:02:d2:56:fb:86:f0:
         3a:16:c6:c6:a0:d5:11:6a:72:2e:ff:50:7b:ac:7f:97:ef:59:
         e3:c0:95:ab:d3:c1:19:df:9b:f2:0e:76:94:c2:df:64:02:af:
         a3:26:9d:a5:b1:67:94:c9:4e:80:8c:42:9d:9c:ac:9e:15:f7:
         e0:cc:5b:bb:f0:26:bc:70:69:28:1e:de:e6:fc:fb:ff:aa:fa:
         4f:ba:a9:ca:dd:38:28:64:43:b3:0f:7b:2f:45:92:85:9b:47:
         d6:f1:a4:a7:df:c9:cd:b2:a3:44:d5:6c:dc:a7:03:a7:8a:6c:
         0b:8d:be:8f:1e:0c:b3:e2:dc:2e:57:80:8f:2c:e1:a0:4a:ab:
         39:4c:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:52:01 2026 by rpki-client