This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
File:                     0FA43584E65511F0A53AF0D2DAE4EC9C.roa (raw, json)
Hash identifier:          1e676Jvidf1FUadtMQ4q6uXjtusHik8vlMOBEVdn4TM=
Subject key identifier:   FC:F7:49:43:56:35:98:C4:67:D1:31:26:91:06:6F:DB:0D:99:4F:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 14:29:06 +0000
ROA not before:           Wed 31 Dec 2025 14:29:01 +0000
ROA not after:            Sat 31 Jan 2026 14:29:01 +0000
asID:                     140869
IP address blocks:        154.81.32.0/24 maxlen: 24
                          154.81.33.0/24 maxlen: 24
                          154.81.34.0/24 maxlen: 24
                          154.81.35.0/24 maxlen: 24
                          154.81.36.0/24 maxlen: 24
                          154.81.37.0/24 maxlen: 24
                          154.81.38.0/24 maxlen: 24
                          154.81.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111127 (0x1b217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 31 14:29:01 2025 GMT
            Not After : Jan 31 14:29:01 2026 GMT
        Subject: CN=69553332-f35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:c2:1c:70:ef:c3:84:0e:6e:c0:a7:05:be:
                    b3:0f:ce:d5:49:9a:c2:c6:f3:b3:a3:e2:33:bf:7d:
                    94:b3:c5:07:c1:70:4e:ab:90:8e:81:1c:03:7b:e8:
                    30:17:34:c2:bc:85:cb:1a:e6:e2:2b:05:6b:46:45:
                    f9:cd:08:5e:ed:9e:45:9e:0d:3d:0a:87:54:ce:e5:
                    72:71:c7:bd:c4:a7:17:32:ef:a7:8b:fc:5d:5e:01:
                    09:38:08:cf:76:65:5c:4a:34:7a:ec:06:b1:dc:a8:
                    80:8a:90:0b:3b:99:39:9f:d6:1c:ad:04:fc:c9:6f:
                    bd:80:7e:cc:c6:6a:9d:c2:fb:d1:32:36:cb:76:ab:
                    f2:05:d6:30:94:2c:d1:de:a5:06:f2:a3:3f:33:5a:
                    12:3c:1e:f4:c3:8c:92:3b:62:fa:c3:94:1f:c4:ae:
                    51:df:8c:fb:e9:56:4b:69:54:c9:cd:04:82:59:f4:
                    a8:c6:cc:d7:5a:b4:ac:f4:96:d9:be:b1:27:7f:70:
                    be:14:95:72:d2:6c:ab:3d:fd:9f:8f:18:20:e9:ee:
                    49:56:20:f5:6e:ea:b4:0a:6f:9e:f0:b9:74:45:6b:
                    c7:ba:55:21:34:1c:31:9c:04:15:ca:39:43:ec:75:
                    c3:c8:30:ad:4c:29:85:b2:83:a5:16:50:c8:c8:f9:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:49:43:56:35:98:C4:67:D1:31:26:91:06:6F:DB:0D:99:4F:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:53:ce:dd:9a:a0:65:fd:c4:d2:30:d3:1c:a9:92:22:08:
         e4:83:1e:62:cf:3d:1a:8b:74:fe:95:8a:0a:36:d4:5a:5c:1f:
         66:9d:ab:46:f2:28:9c:e2:76:63:28:ec:39:23:b2:d9:ba:2c:
         ad:f4:eb:bc:34:29:c8:f2:ea:66:66:7b:94:5c:95:67:5b:ac:
         01:e0:65:d3:f4:29:ab:81:00:7a:cc:3a:39:f2:c6:b1:28:3e:
         5d:71:4b:9a:5e:0e:97:ab:1e:79:1a:b3:54:eb:42:fe:ce:fc:
         fc:e4:a4:6d:55:7d:41:b3:1a:fd:95:9f:55:9e:03:28:4f:3e:
         b1:4c:11:28:7e:0e:d3:47:a9:72:67:43:25:1e:24:2d:a8:a6:
         d2:8b:ab:68:55:62:99:3c:32:1e:b2:d0:40:12:f8:20:5f:af:
         1a:89:52:bc:36:50:41:6a:2b:44:dc:63:97:a1:59:9e:7b:87:
         9d:5e:64:12:77:76:49:7f:eb:c5:5d:55:94:25:fe:f1:f2:0b:
         7f:01:99:a5:ec:0a:01:9b:67:7b:96:7a:7f:d0:16:93:38:20:
         5c:f5:02:8d:72:5c:ac:05:70:12:10:0e:d2:f6:80:9a:33:5f:
         f9:a0:e3:16:dc:3f:52:9e:81:ad:fe:f6:42:3e:1a:ef:68:72:
         08:e6:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:43:15 2026 by rpki-client