This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7C410F50B11F0BADABAB6DAE4EC9C.roa
File:                     09F7C410F50B11F0BADABAB6DAE4EC9C.roa (raw, json)
Hash identifier:          1/Cpf7/WKqNl1+CUBvdeFwFRXey+8lcHu7nDeA3GRCk=
Subject key identifier:   13:23:01:50:A0:A6:D2:A8:F8:05:7A:FF:DB:F7:63:20:4E:86:3E:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B561
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7C410F50B11F0BADABAB6DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 07:47:01 +0000
ROA not before:           Mon 19 Jan 2026 07:46:56 +0000
ROA not after:            Sat 28 Feb 2026 07:46:56 +0000
asID:                     211826
IP address blocks:        154.194.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111969 (0x1b561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 19 07:46:56 2026 GMT
            Not After : Feb 28 07:46:56 2026 GMT
        Subject: CN=696de175-7c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:b7:c8:6f:3e:09:79:cd:5d:e7:4e:ce:7c:
                    c2:35:67:10:e4:43:7e:3f:13:29:fe:04:93:4c:84:
                    93:b6:53:79:cc:c2:fd:c9:2c:ac:7b:58:37:ce:22:
                    30:d0:ee:0a:2b:bb:13:53:40:b0:12:3b:2f:ec:90:
                    5b:ac:84:90:34:e3:bb:33:24:93:16:7b:0c:61:0a:
                    2e:9e:04:59:d0:f9:57:6b:0a:df:f4:3d:8f:95:3b:
                    9c:1e:0b:78:79:8d:08:a4:e2:f5:72:1a:9b:ba:54:
                    f1:7e:04:26:92:3d:0a:78:ec:7f:0a:2b:80:fa:0b:
                    f9:01:c2:7c:08:bd:ab:43:e3:93:f4:8d:16:9e:5e:
                    cd:7f:45:8d:4b:23:d1:12:5e:ee:cf:fa:04:53:3f:
                    6d:9e:7f:34:b0:47:d4:e8:c1:92:35:bf:de:da:96:
                    c3:00:5a:35:2f:97:4b:87:54:96:5a:eb:6a:ac:52:
                    ef:ea:bc:dc:27:b3:02:ca:08:c8:b2:18:2d:23:ed:
                    29:23:df:ba:ce:08:31:10:21:fd:16:61:52:9e:78:
                    67:4e:1d:ab:90:d0:37:d0:82:84:83:9e:4b:ab:51:
                    84:68:b6:a8:24:d7:52:93:a9:81:f5:4b:a2:01:2e:
                    f4:11:d7:de:3d:32:98:7b:75:2c:74:4b:f1:94:3a:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:01:50:A0:A6:D2:A8:F8:05:7A:FF:DB:F7:63:20:4E:86:3E:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09F7C410F50B11F0BADABAB6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:ad:90:64:42:60:d3:ca:29:68:9c:09:bf:e6:9c:58:d5:
         23:95:b3:33:ce:cf:95:36:bb:bc:14:e7:30:f2:27:4c:b4:6d:
         ea:0f:da:25:fd:fc:d5:a3:78:fa:34:36:f3:5e:9b:33:ed:ea:
         f4:bb:30:aa:fb:2e:d7:be:8d:e1:91:f5:53:a1:81:db:ed:65:
         87:00:6b:c4:dd:f6:46:5a:63:36:ad:da:67:35:a0:92:25:e2:
         34:a0:04:83:cf:a3:44:36:24:f7:27:bd:1b:2f:8a:bb:7f:a8:
         e8:d8:ea:31:3c:2d:c4:f6:0f:a6:26:b6:a1:dc:2b:2d:25:f8:
         8c:e3:7f:57:f4:c8:9b:9a:22:e2:56:d4:9b:b3:26:d3:d7:bf:
         45:f7:07:e8:68:18:4f:7d:d4:a4:08:c0:19:46:d9:48:8e:ff:
         1a:a9:d0:ee:f9:58:d6:2a:01:7e:82:a2:1c:ee:87:d5:83:26:
         7a:f0:ba:a4:1e:21:0e:52:35:44:20:a7:0d:ef:38:c3:ce:dc:
         1a:f5:9a:ce:45:e5:02:34:35:6d:06:25:5b:06:8d:e8:38:51:
         8c:76:60:69:00:f5:8c:c3:c1:b8:8a:26:a3:cf:f7:ab:d6:43:
         52:03:c1:52:02:28:67:49:fd:d8:f9:33:5f:a3:f6:de:20:42:
         9d:8d:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:13 2026 by rpki-client