This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9CB4B70000611F1A21C88C2DAE4EC9C.roa
File:                     D9CB4B70000611F1A21C88C2DAE4EC9C.roa (raw, json)
Hash identifier:          ixznc4GzVzcT8F4GcctLZbMh6+XpgQpPHm5lDh3yB4I=
Subject key identifier:   79:6F:31:19:40:6B:B5:6D:EC:94:10:BC:F8:D6:83:E3:12:73:DC:B1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B839
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9CB4B70000611F1A21C88C2DAE4EC9C.roa
Signing time:             Mon 02 Feb 2026 07:14:45 +0000
ROA not before:           Mon 02 Feb 2026 07:14:41 +0000
ROA not after:            Thu 12 Mar 2026 07:14:41 +0000
asID:                     139646
IP address blocks:        154.86.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112697 (0x1b839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb  2 07:14:41 2026 GMT
            Not After : Mar 12 07:14:41 2026 GMT
        Subject: CN=69804ee5-a769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:1c:72:af:31:a1:56:3c:95:d6:30:0e:0f:
                    f7:e6:54:c3:d2:33:e1:b7:df:c0:90:b9:a4:dc:38:
                    67:82:14:b5:b0:c6:3c:8e:e5:05:ab:6f:67:16:02:
                    a0:fa:e5:c7:0f:72:03:cb:4a:d2:48:41:6e:cd:26:
                    2a:96:3e:b5:5b:0f:09:ed:00:cd:65:2e:3c:de:2d:
                    a4:9b:ab:8b:f5:78:b7:05:d0:50:58:ff:b3:20:45:
                    fe:05:d1:51:9a:fb:79:e2:c8:1e:71:3e:05:ca:23:
                    6b:69:60:02:b4:c9:2b:fd:2f:3d:c5:6f:46:91:ea:
                    98:2b:eb:9a:17:da:20:a4:65:e3:d7:88:eb:6e:e2:
                    df:03:c2:eb:6d:52:0c:9c:02:30:3b:28:7d:50:31:
                    4a:a7:9f:8b:99:44:bd:b4:e4:a0:9f:20:d7:dd:22:
                    cc:f7:af:2c:6b:98:33:c7:0c:82:bf:b4:59:d0:5d:
                    18:57:46:2c:a2:19:43:52:a7:ba:57:a5:3b:f8:73:
                    36:2e:e2:0f:97:ed:43:16:a4:3d:12:42:9f:5f:ad:
                    2d:89:0c:01:fa:7f:e2:39:68:0e:ab:d2:0a:dd:fc:
                    22:ff:d4:8d:35:e6:58:d8:4d:40:d2:d9:27:2c:8f:
                    0a:55:ff:82:75:b8:6e:f0:95:78:2b:e7:d3:18:cc:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6F:31:19:40:6B:B5:6D:EC:94:10:BC:F8:D6:83:E3:12:73:DC:B1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9CB4B70000611F1A21C88C2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:44:c0:01:7b:5e:3e:09:b8:35:5e:70:8d:5e:c5:ae:fb:8c:
         b1:10:93:4e:bb:3f:a3:dd:32:b9:6a:01:dd:cc:54:a9:1d:c0:
         7b:96:ac:f8:fc:98:a8:88:17:4b:92:0f:d5:88:18:16:9f:5f:
         51:cd:44:19:99:0d:b9:bc:4f:d8:d5:59:c5:e3:ff:9d:c7:b1:
         ad:f0:c7:c7:67:71:4c:c0:58:15:90:6c:e8:16:45:89:ba:b3:
         7c:f9:46:ec:67:46:95:5c:fb:99:e4:82:14:47:ad:1c:41:e6:
         bd:3e:43:2b:94:6d:e2:4b:37:76:7c:8e:e4:f9:84:76:d6:c1:
         f0:c5:22:fa:6f:20:28:e6:29:f0:14:0e:61:cc:c8:33:23:fb:
         82:db:f3:07:26:af:ab:97:e0:2b:fc:19:24:34:ad:8a:6b:14:
         9e:aa:c3:da:f1:62:cc:31:cb:4b:05:f5:ef:ae:ca:b1:0d:1c:
         dd:1a:05:03:72:f0:8f:31:cc:0b:4b:ff:e6:d9:11:7b:9e:df:
         a8:ed:a1:9f:36:6c:03:5d:db:53:8d:3c:d5:b4:69:de:1f:3a:
         9f:45:7d:54:ab:4f:0a:a0:7b:84:7c:af:23:a9:59:d7:cc:d5:
         db:99:6c:b0:ac:9d:15:a6:73:79:05:ee:f6:1d:e0:5d:eb:84:
         56:8d:c4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 19:56:50 2026 by rpki-client