This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFDEE1AEF7F11F0B66A4CC8DAE4EC9C.roa
File:                     FBFDEE1AEF7F11F0B66A4CC8DAE4EC9C.roa (raw, json)
Hash identifier:          bmyx3MxlZuoFELOIenEpSTX0kc5fyo9DOTuXOz9i+8Y=
Subject key identifier:   AB:92:42:DA:3E:80:56:CB:BC:11:FE:8E:73:3F:46:C7:7B:F9:4B:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B446
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFDEE1AEF7F11F0B66A4CC8DAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 06:29:02 +0000
ROA not before:           Mon 12 Jan 2026 06:28:57 +0000
ROA not after:            Sun 15 Feb 2026 06:28:57 +0000
asID:                     271916
IP address blocks:        154.205.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111686 (0x1b446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 12 06:28:57 2026 GMT
            Not After : Feb 15 06:28:57 2026 GMT
        Subject: CN=696494ae-7772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:83:52:db:91:a7:84:90:41:91:b4:5a:df:
                    50:1e:ce:25:35:30:91:86:73:67:36:ca:45:3f:65:
                    b7:53:85:88:16:57:ba:c1:a2:88:d0:9f:91:d8:5e:
                    d1:83:4a:79:95:7a:7b:b3:34:cc:fb:80:af:b3:0e:
                    17:6d:93:99:f1:c4:ea:17:1a:9e:07:f9:2e:1c:27:
                    32:eb:98:22:a2:44:d5:ce:f6:ee:8e:04:1b:bc:2f:
                    e4:26:9e:e7:53:98:df:f8:ae:97:9a:42:22:46:76:
                    14:43:6f:b6:9f:d1:c0:59:98:5b:5e:6b:3f:e6:d1:
                    4d:61:db:bb:1e:26:08:93:dd:57:42:58:34:6d:0e:
                    aa:8a:20:fd:3d:bf:a9:7b:59:af:c4:c5:67:9a:bd:
                    8e:ba:dd:a3:d9:d3:4c:c8:44:51:07:2a:ba:aa:7d:
                    47:de:a5:b2:82:0d:dd:0d:ba:0a:f5:46:21:51:fa:
                    79:31:ae:5f:2f:62:fc:5d:59:4b:e4:e1:b2:02:08:
                    92:e3:fb:8d:90:5a:0c:5e:82:bb:0d:3e:32:04:ab:
                    31:a9:13:6c:c5:e5:8f:3a:28:6d:45:ee:3c:f1:28:
                    3f:ef:e4:d8:e7:af:b2:1f:00:04:07:42:47:60:85:
                    f5:e0:98:b6:fa:33:e3:43:1d:3a:d9:5f:86:88:e9:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:42:DA:3E:80:56:CB:BC:11:FE:8E:73:3F:46:C7:7B:F9:4B:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FBFDEE1AEF7F11F0B66A4CC8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:3e:a1:7b:60:e1:c6:11:9e:19:33:82:d3:b1:ab:b3:ca:
         cd:eb:52:d1:2e:bf:5e:67:65:ba:63:5b:c2:d5:bf:54:5b:3c:
         63:69:4b:97:52:af:a2:4f:c0:e5:34:10:ed:b6:2a:16:4f:a3:
         ea:7c:c5:75:a2:79:64:fc:09:4b:c1:90:f1:1c:1d:a1:97:b3:
         6b:57:75:c0:f2:7b:5b:c7:17:ec:93:6d:45:db:d9:22:1c:19:
         9f:68:5d:34:66:d5:f7:e8:92:1f:e6:48:6c:99:05:bb:0f:48:
         38:7f:89:3a:8f:99:30:71:76:e7:6b:06:a9:95:de:c1:5f:dd:
         57:b7:68:ba:92:eb:f0:b8:6a:7c:46:d2:ca:0e:f9:71:25:ea:
         0b:60:b2:9d:c9:9b:71:5a:de:a4:43:38:7b:dd:84:6a:d0:07:
         7d:f1:1a:a5:e4:21:99:98:9e:26:2a:e0:a2:3b:a0:80:c5:81:
         1c:60:e5:b4:eb:ca:9f:24:c8:cb:c1:f2:ac:09:5c:50:b6:90:
         47:11:be:34:b9:96:d2:8e:ca:4a:a0:e8:54:c9:12:c7:94:19:
         4f:e5:0d:82:ba:af:e8:37:42:63:e8:1d:d9:ff:fe:0e:4f:d0:
         32:9b:50:11:0f:4d:52:4c:69:38:0d:92:83:6d:eb:cf:f5:78:
         7e:3b:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:08:41 2026 by rpki-client