This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA97348E0F711F0BBEE75E4DAE4EC9C.roa
File:                     FCA97348E0F711F0BBEE75E4DAE4EC9C.roa (raw, json)
Hash identifier:          62ZAygBIgHRx4lM4woCxnDznMXoP9cBwGlIm6MGgp40=
Subject key identifier:   F8:45:A2:A6:66:59:8C:70:52:89:3E:EC:2C:9C:6D:EE:CF:6B:37:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B119
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA97348E0F711F0BBEE75E4DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 18:40:15 +0000
ROA not before:           Wed 24 Dec 2025 18:40:10 +0000
ROA not after:            Mon 09 Feb 2026 18:40:10 +0000
asID:                     214143
IP address blocks:        154.194.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 13:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110873 (0x1b119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 18:40:10 2025 GMT
            Not After : Feb  9 18:40:10 2026 GMT
        Subject: CN=694c338f-9d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:a7:5d:17:62:76:4e:8b:27:4d:0d:29:ba:
                    8e:14:2f:f3:dc:20:41:48:e2:3a:42:1e:f5:e1:09:
                    db:fd:a8:d3:0e:89:18:b5:3e:65:3c:20:6e:b5:da:
                    cc:5d:9b:0e:a3:22:16:0e:db:d6:37:df:fc:85:4d:
                    7d:d9:a1:08:a9:ab:c1:84:01:c6:5c:a2:8e:c3:94:
                    30:e5:22:29:c2:49:c9:23:b0:3e:9b:65:3d:4a:7b:
                    cc:05:a4:66:34:44:a2:fa:6c:4d:a8:02:29:54:15:
                    ab:87:f9:43:2d:79:13:46:7b:4c:64:14:c2:78:3d:
                    98:79:41:b7:48:2a:8f:2c:38:bc:85:5b:0d:c2:5c:
                    10:3c:c0:5e:eb:b0:e7:ab:ce:1f:41:62:28:f3:9a:
                    44:31:d4:d4:7d:44:b8:ff:5b:04:9a:1e:d2:a7:2b:
                    a4:d5:e6:a7:9e:f2:ca:86:3e:6c:1f:ef:d5:af:23:
                    55:6f:33:a2:14:7c:7b:c4:ff:12:14:24:12:f4:c5:
                    09:86:f8:fb:48:18:ec:5f:19:ec:79:ef:50:3b:71:
                    1d:fb:c4:e7:7e:6c:b4:0a:9d:b0:76:c0:0b:ba:ef:
                    3d:fa:38:b3:1e:f4:b3:74:81:19:83:9b:56:3c:e7:
                    29:8e:d3:a0:6f:b1:44:ef:21:e2:57:43:7a:a8:db:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:45:A2:A6:66:59:8C:70:52:89:3E:EC:2C:9C:6D:EE:CF:6B:37:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FCA97348E0F711F0BBEE75E4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:20:f5:e7:64:72:1d:60:16:a2:7d:ba:e2:23:c9:b5:ad:
         92:ed:78:6a:16:a4:9e:5d:bd:62:c8:60:f8:bd:d3:d6:d7:2a:
         a7:e4:a6:47:af:f8:61:52:cd:9f:82:22:d0:f4:78:ce:44:0e:
         33:39:6a:24:5a:d9:7c:d6:de:0a:78:52:75:9d:cd:50:83:05:
         f8:cf:ee:21:03:9b:d0:6b:82:37:b2:c0:cc:0e:4b:92:01:ca:
         8b:0f:05:da:5f:e2:ec:7b:86:e2:e5:e5:4f:8a:ad:c1:35:b8:
         26:93:a4:3a:27:e0:fc:cc:5c:bd:cb:17:9e:03:f8:80:a5:aa:
         20:ad:7f:14:5d:9a:0c:89:87:30:fb:ce:9f:7b:1e:e0:fe:6c:
         f4:ea:e5:aa:e5:31:66:d5:11:88:f3:ca:37:98:e5:ba:9f:a4:
         b5:b7:22:55:fb:c5:95:b5:b3:97:bd:41:79:6c:3d:01:20:91:
         bb:6b:78:7b:f4:35:e2:8d:b4:0d:15:93:50:c7:9c:21:98:2d:
         45:c8:b2:62:55:8a:10:a6:4e:e6:ad:f1:50:0a:e5:2a:9e:d1:
         0f:78:06:a2:b8:f5:9e:80:0c:ef:16:c0:10:e9:c6:8f:72:60:
         07:b0:6b:ca:73:65:cd:f6:c3:f7:07:80:5a:94:66:74:c2:c4:
         f2:48:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:27 2026 by rpki-client