This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A26DC2F05E11F0B0B32499DAE4EC9C.roa
File:                     00A26DC2F05E11F0B0B32499DAE4EC9C.roa (raw, json)
Hash identifier:          yL/pvP57Xs6e6R6/Ubhoh0Qj3NJkyzONl2//xcQrzmQ=
Subject key identifier:   FF:6C:F2:F7:3F:E4:BE:FF:51:34:01:3E:40:4A:D8:F4:47:47:F9:80
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B471
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A26DC2F05E11F0B0B32499DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:58:18 +0000
ROA not before:           Tue 13 Jan 2026 08:58:13 +0000
ROA not after:            Tue 17 Feb 2026 08:58:13 +0000
asID:                     54801
IP address blocks:        154.81.181.0/24 maxlen: 24
                          154.81.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111729 (0x1b471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 08:58:13 2026 GMT
            Not After : Feb 17 08:58:13 2026 GMT
        Subject: CN=6966092a-e611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:be:bc:88:63:ed:74:47:49:c9:f4:01:e6:
                    20:a9:06:f5:58:47:7d:7a:5b:f3:f0:29:96:14:d4:
                    78:b2:c7:ff:10:6d:7b:7f:ba:ee:fb:fb:9f:2f:a0:
                    e6:09:14:4e:a7:b0:00:a7:cb:4c:15:61:8e:f8:65:
                    4a:d4:2a:d8:0c:a5:bb:71:0d:a6:e8:d4:f1:4f:65:
                    35:a4:85:96:69:01:60:0d:b2:b4:25:02:93:42:ff:
                    ca:c0:14:1b:00:e2:62:69:09:b5:80:75:1d:74:d4:
                    8b:48:d9:8c:54:e7:6f:00:55:24:73:f9:bc:50:2b:
                    59:50:ef:b3:11:27:a1:b6:f5:53:11:8b:64:14:3c:
                    15:0c:c0:94:24:5f:2f:8f:7a:c5:6d:94:ef:02:c6:
                    79:72:31:17:d0:42:a7:85:43:80:be:98:ee:29:72:
                    90:bc:b6:f0:2e:d2:45:f6:3f:ad:fc:24:de:00:ab:
                    a7:16:bd:17:9c:9e:e5:9f:3e:87:69:00:64:ae:69:
                    b2:2a:a8:59:e6:8b:f0:69:0f:a8:9b:77:9a:d4:50:
                    4e:e5:dc:72:fb:3a:84:c6:b6:bd:51:3f:55:43:2c:
                    37:fe:d3:b4:4b:7c:db:a6:02:4c:9a:f1:57:ed:31:
                    1a:cf:f8:d1:3f:d3:6f:b7:0b:a4:89:a6:45:45:a9:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6C:F2:F7:3F:E4:BE:FF:51:34:01:3E:40:4A:D8:F4:47:47:F9:80
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00A26DC2F05E11F0B0B32499DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.181.0/24
                  154.81.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:37:70:a9:07:bd:05:fd:a5:5b:28:8d:b4:bc:c1:3b:75:31:
         ee:62:1b:b2:fe:fd:e0:be:54:1a:08:59:27:86:8a:ae:6b:24:
         7f:94:04:94:3a:93:fe:55:49:cf:0c:f9:e6:ba:4b:d8:b8:a5:
         af:58:94:33:cb:c8:23:47:6b:46:32:aa:9e:29:30:87:cd:cb:
         d9:c0:1a:7e:b0:ad:3d:80:db:7c:3e:18:63:02:8f:16:aa:a7:
         59:08:ad:83:aa:47:89:9f:b5:ae:6c:e0:3d:09:25:3e:58:81:
         d0:13:37:3c:54:ed:2e:fb:97:7f:5a:d1:59:9a:cb:31:9a:8c:
         39:df:7f:a6:93:41:86:fc:22:30:41:b4:09:93:15:2d:09:0c:
         4e:b0:e7:eb:59:d6:39:1e:d4:0c:ab:16:a9:1b:60:7b:8a:a0:
         e0:28:66:be:06:e2:1d:1b:e4:25:75:dd:53:77:d7:24:d8:f0:
         41:2f:e9:83:a2:b4:4c:a4:b1:9a:a2:f8:20:80:20:02:69:96:
         b1:bf:6a:0f:87:1d:df:ac:08:f7:1f:8d:75:77:8d:ff:b9:5a:
         06:db:dc:6d:cc:ec:9f:f1:c1:c2:b8:16:99:97:81:70:18:1e:
         08:e1:91:39:5f:81:a7:dd:e6:76:f3:44:8a:9c:f1:5c:4a:93:
         77:ff:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:14 2026 by rpki-client