This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1243A6FC4211F0BC9A459ADAE4EC9C.roa
File:                     FF1243A6FC4211F0BC9A459ADAE4EC9C.roa (raw, json)
Hash identifier:          3H+7g089EbgMsecOkd7TAi3BvMdb7xwlYkmVR1Pj8u8=
Subject key identifier:   12:21:91:E6:96:17:4A:7B:38:1D:04:41:9A:BD:EE:1D:C8:0C:ED:7D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B727
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1243A6FC4211F0BC9A459ADAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 12:15:13 +0000
ROA not before:           Wed 28 Jan 2026 12:15:08 +0000
ROA not after:            Sun 28 Jan 2029 12:15:08 +0000
asID:                     17561
IP address blocks:        154.202.190.0/24 maxlen: 24
                          154.202.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Feb 2026 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112423 (0x1b727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 28 12:15:08 2026 GMT
            Not After : Jan 28 12:15:08 2029 GMT
        Subject: CN=6979fdd1-32b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:5c:5e:c2:00:c4:86:0e:50:29:16:dd:17:
                    43:13:45:1a:a5:ac:81:98:e4:7d:cd:d8:b7:5d:61:
                    23:1c:48:54:3c:27:3c:e9:47:84:92:fc:a3:c0:1f:
                    60:75:75:f8:45:06:95:57:ad:29:5c:07:c1:df:2d:
                    d1:99:d3:ad:ed:81:91:8c:bf:33:1a:30:cf:24:d3:
                    37:d8:86:54:2c:dc:e5:3f:68:60:32:3c:93:f8:8b:
                    b4:86:f0:96:e9:79:66:19:52:29:71:4f:90:c4:e0:
                    c0:ce:39:c1:a4:15:0c:82:52:23:5b:95:ea:d3:2f:
                    81:a1:76:34:5a:e9:72:ab:60:fe:0d:9c:6f:06:16:
                    db:4a:3f:ff:b8:cb:57:28:f6:45:0a:b5:b4:ec:11:
                    1c:6f:91:2a:9f:46:3f:d1:c5:83:42:28:ed:33:95:
                    7d:3a:51:02:2c:ca:a1:40:e5:ad:ed:f0:88:d6:1d:
                    60:3f:df:72:48:9e:fc:d4:69:7a:48:c7:be:eb:72:
                    d5:08:36:cb:2c:30:3d:8e:97:77:53:a1:b3:e5:91:
                    d5:42:53:f7:26:45:c3:95:e3:04:49:1a:27:14:54:
                    8d:f0:2e:6d:a7:57:c1:d8:d6:0e:ac:04:52:f9:53:
                    bc:f6:04:ae:6d:b8:a6:ed:14:28:e5:cd:42:fb:e4:
                    01:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:21:91:E6:96:17:4A:7B:38:1D:04:41:9A:BD:EE:1D:C8:0C:ED:7D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF1243A6FC4211F0BC9A459ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:78:f8:6f:70:64:12:59:33:3e:b0:c9:03:8d:d1:2a:d6:72:
         6f:82:3d:02:73:4a:1b:b6:74:fa:d7:1d:47:b4:74:79:e0:a6:
         38:2f:83:3e:50:a2:ff:1c:6e:f5:d5:bb:25:c7:0e:e3:74:d3:
         4d:fb:ba:35:2f:c5:1b:5d:ec:3b:2c:51:fc:49:ad:a4:21:99:
         17:84:58:b7:91:a2:be:f6:1e:23:83:55:74:59:9b:54:22:91:
         8b:97:e8:56:e8:73:97:92:b9:e1:be:3a:70:ad:cb:b9:d8:fb:
         e7:f7:b5:a8:4b:14:b2:82:ed:8a:48:e5:d3:19:6c:3f:12:ac:
         06:7f:fe:37:ec:62:83:ee:d6:cb:c6:bf:23:19:d7:59:8c:e7:
         ff:e7:db:72:96:96:dc:8c:0c:22:27:d1:2a:28:77:4d:a0:d5:
         a4:df:fa:1b:de:14:af:5a:c7:ae:23:3e:65:c2:fd:c1:96:e1:
         63:fd:9f:66:b7:18:b6:45:7d:7c:19:d3:4b:10:e6:b5:fe:b7:
         54:fe:40:a9:57:cb:3a:39:98:3f:3e:a0:c2:7b:41:9e:27:62:
         1a:7c:2c:6e:f3:37:0e:9f:ed:58:f9:69:93:3a:62:eb:e9:32:
         d8:fa:f7:b5:d3:cb:b7:dc:91:e9:53:31:1f:ac:65:63:c1:5e:
         b7:d2:fa:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbcnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI4MTIxNTA4WhcNMjkwMTI4MTIxNTA4WjAYMRYw
FAYDVQQDEw02OTc5ZmRkMS0zMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvd9cXsIAxIYOUCkW3RdDE0UapayBmOR9zdi3XWEjHEhUPCc86UeEkvyj
wB9gdXX4RQaVV60pXAfB3y3RmdOt7YGRjL8zGjDPJNM32IZULNzlP2hgMjyT+Iu0
hvCW6XlmGVIpcU+QxODAzjnBpBUMglIjW5Xq0y+BoXY0Wulyq2D+DZxvBhbbSj//
uMtXKPZFCrW07BEcb5Eqn0Y/0cWDQijtM5V9OlECLMqhQOWt7fCI1h1gP99ySJ78
1Gl6SMe+63LVCDbLLDA9jpd3U6Gz5ZHVQlP3JkXDleMESRonFFSN8C5tp1fB2NYO
rARS+VO89gSubbim7RQo5c1C++QBSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBIh
keaWF0p7OB0EQZq97h3IDO19MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjEyNDNBNkZDNDIxMUYwQkM5QTQ1OUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsq+MA0GCSqGSIb3DQEB
CwUAA4IBAQCRePhvcGQSWTM+sMkDjdEq1nJvgj0Cc0obtnT61x1HtHR54KY4L4M+
UKL/HG711bslxw7jdNNN+7o1L8UbXew7LFH8Sa2kIZkXhFi3kaK+9h4jg1V0WZtU
IpGLl+hW6HOXkrnhvjpwrcu52Pvn97WoSxSygu2KSOXTGWw/EqwGf/437GKD7tbL
xr8jGddZjOf/59tylpbcjAwiJ9EqKHdNoNWk3/ob3hSvWseuIz5lwv3BluFj/Z9m
txi2RX18GdNLEOa1/rdU/kCpV8s6OZg/PqDCe0GeJ2IafCxu8zcOn+1Y+WmTOmLr
6TLY+ve108u33JHpUzEfrGVjwV630vqD
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:24 2026 by rpki-client