This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A34588F95711F0994C6199DAE4EC9C.roa
File:                     14A34588F95711F0994C6199DAE4EC9C.roa (raw, json)
Hash identifier:          YevkYKOQh4IJ+olrcIdwH0L9bCxV5YmsUDjphOZutkk=
Subject key identifier:   F2:03:6B:40:C0:A4:B4:FD:64:39:6D:BA:59:D2:3D:FD:D4:C3:0E:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B676
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A34588F95711F0994C6199DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:01:25 +0000
ROA not before:           Sat 24 Jan 2026 19:01:20 +0000
ROA not after:            Thu 12 Mar 2026 19:01:20 +0000
asID:                     3257
IP address blocks:        154.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112246 (0x1b676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 19:01:20 2026 GMT
            Not After : Mar 12 19:01:20 2026 GMT
        Subject: CN=69751705-8695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:ed:45:95:51:1a:2e:57:d3:9d:43:85:30:
                    43:86:f3:ba:bb:f2:78:44:de:72:21:b9:6e:d4:41:
                    47:8a:46:b6:26:37:a0:46:88:47:57:4c:6e:4f:77:
                    14:65:3d:62:88:7d:a9:19:ad:ae:66:78:c5:00:26:
                    fd:fe:68:d6:a0:46:09:61:6b:31:7a:dd:97:68:9c:
                    01:b1:a0:7e:dc:0d:f9:c1:28:8c:49:ef:f5:00:99:
                    28:48:9f:f1:26:ea:9f:fa:97:15:b6:ff:54:0e:38:
                    5c:ed:c5:b1:16:0c:43:22:b9:39:1c:d4:89:33:e6:
                    6b:8e:4b:81:dc:2b:3d:3f:32:1c:b5:e9:92:fe:76:
                    93:01:2c:f8:73:0e:65:db:d4:89:a2:84:79:44:9d:
                    6c:7f:8b:63:04:2a:f8:53:d2:cf:fc:03:40:75:e3:
                    63:cd:1c:8f:62:ca:38:24:ce:70:64:8a:1e:a6:9d:
                    38:08:a7:58:a1:05:e6:47:87:2e:c5:e3:49:07:6e:
                    8f:01:b0:ff:a8:ca:ad:ce:ca:db:b3:c4:db:ac:c4:
                    4f:e4:9c:4d:50:77:7a:67:d4:34:c8:fc:ac:7e:24:
                    a0:a3:8d:04:94:7c:cc:ba:39:c8:34:7f:af:78:46:
                    25:fd:e5:63:cd:b8:f6:5a:a8:d2:0f:56:e0:d2:d3:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:03:6B:40:C0:A4:B4:FD:64:39:6D:BA:59:D2:3D:FD:D4:C3:0E:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A34588F95711F0994C6199DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2c:c5:8b:04:a8:7d:3e:26:e3:7a:33:6f:1b:64:91:69:64:
         74:32:49:67:bd:cc:8f:79:41:48:90:b5:40:3b:da:94:56:af:
         a9:22:94:50:46:54:b9:6d:08:56:35:7f:0c:ce:52:bc:08:e7:
         54:ad:a5:e5:6f:ae:a3:2d:95:39:f1:28:4f:a2:e3:ec:ce:ed:
         a9:0e:0a:8f:93:40:82:7f:80:c7:ae:40:ef:07:37:fd:8a:23:
         19:55:9f:a3:db:d5:a0:b0:15:04:28:06:d2:68:3d:46:1d:69:
         03:dc:ba:7e:b9:04:35:11:5a:3c:d7:c7:93:e3:5e:0a:ef:76:
         1d:35:a1:7a:09:a6:85:1e:df:12:71:4d:fb:58:12:72:ed:0a:
         98:f8:13:8e:96:b2:85:c3:a5:c9:78:15:ae:8b:97:f6:88:60:
         b4:58:0e:8b:6b:46:1a:5e:0b:d3:1d:1e:6f:1a:bd:36:3a:2f:
         ae:61:55:07:f6:50:35:fb:2b:13:a8:b5:3c:fc:a2:32:a0:db:
         58:ca:8f:d4:7a:3a:8a:72:32:d8:52:cf:fe:49:27:58:6b:db:
         06:fa:39:5c:4d:03:e7:6b:92:69:00:9f:88:19:5b:d1:d3:3e:
         4f:21:24:16:99:42:96:4a:6b:91:40:72:56:22:2f:0d:4f:13:
         68:63:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:36 2026 by rpki-client