This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15ADF57EE0F011F0A77FDEB5DAE4EC9C.roa
File:                     15ADF57EE0F011F0A77FDEB5DAE4EC9C.roa (raw, json)
Hash identifier:          V3KNJGojwyCMeTtdAp4AeURk9+UCgE/3TktCaF3p6DM=
Subject key identifier:   9C:6E:2E:7A:F4:1B:F9:A3:1D:77:DF:30:09:D5:97:C6:5C:19:5A:89
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B10D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15ADF57EE0F011F0A77FDEB5DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 17:43:41 +0000
ROA not before:           Wed 24 Dec 2025 17:43:37 +0000
ROA not after:            Thu 05 Feb 2026 17:43:37 +0000
asID:                     204548
IP address blocks:        154.222.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110861 (0x1b10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 24 17:43:37 2025 GMT
            Not After : Feb  5 17:43:37 2026 GMT
        Subject: CN=694c264d-882c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:52:00:c9:b8:16:69:ee:3d:ec:0b:61:8a:
                    63:b6:af:f4:fc:91:10:6a:b7:3b:b4:cb:33:a7:2a:
                    2c:fe:49:26:5e:63:8a:f7:64:ca:30:3a:5c:05:d4:
                    e0:64:65:51:7c:dc:4c:39:5c:89:93:c3:bb:fa:53:
                    7c:9f:c1:eb:c6:2a:f5:14:e9:bc:de:48:9a:48:9b:
                    12:ca:d9:13:a3:a4:8c:4e:c6:0c:15:21:2d:7a:5e:
                    63:27:3b:cd:be:08:54:3e:48:66:fe:d9:89:be:cb:
                    b5:ed:19:20:09:5f:b7:2b:20:33:bd:ea:76:e2:f5:
                    49:00:82:e5:70:b9:1f:78:8e:b1:7e:96:d1:de:b0:
                    74:8e:11:1a:5c:f5:cd:97:53:15:85:d7:3c:ab:f0:
                    b1:e6:56:58:8b:ce:26:60:d5:fc:3a:e8:54:ee:56:
                    e5:dc:2e:eb:73:60:a3:b7:ee:d3:59:4a:92:57:37:
                    df:26:ec:c1:bb:6b:ba:01:bc:29:72:3d:ef:d6:39:
                    30:51:9d:34:a8:aa:9f:2d:a7:08:81:b6:50:45:bf:
                    a3:a4:07:27:16:cf:47:ad:81:f2:fd:27:e0:69:55:
                    ff:6f:03:77:63:56:88:8a:c2:1e:13:b6:d4:23:8d:
                    8f:73:4f:06:4b:6b:31:32:e4:49:a1:ce:70:d7:f2:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:2E:7A:F4:1B:F9:A3:1D:77:DF:30:09:D5:97:C6:5C:19:5A:89
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15ADF57EE0F011F0A77FDEB5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:87:80:a2:e9:9d:22:d5:0a:35:65:91:28:97:90:d2:e5:c9:
         c8:13:d8:30:d1:6c:b8:b2:92:ce:33:ce:b8:02:cf:63:c7:8f:
         ca:b5:9f:6d:b8:2c:5a:ba:d6:f0:7b:1f:bc:dc:1b:f1:7f:c8:
         71:df:cb:4e:d8:9a:12:db:99:f6:b7:43:60:b0:f0:d2:4f:5c:
         cf:60:0d:04:a1:e7:c1:91:84:57:e3:51:70:2b:3e:8d:0b:3d:
         6b:e0:a9:74:a3:60:3a:46:91:08:54:49:f2:35:dd:11:47:9b:
         9c:82:a5:a1:82:8a:64:1f:b1:7d:3b:bb:2d:e3:be:41:3c:d3:
         08:28:3f:1c:69:44:c8:a8:c6:07:95:bd:11:36:90:2e:bb:6f:
         f3:17:df:e2:3c:4b:55:48:d6:6d:af:a6:a8:86:05:e9:93:5d:
         53:33:73:44:e6:bc:a8:0b:57:00:9b:c7:e9:fb:44:17:a1:99:
         9b:2d:79:20:67:fe:24:ab:47:bc:36:96:2a:a1:3b:11:2b:50:
         8b:cc:b3:60:89:02:f7:cc:38:2e:ca:b9:cf:97:69:7b:3f:c1:
         bb:79:9e:de:28:4e:70:b9:98:6f:db:48:1f:aa:dc:d9:87:69:
         ca:6b:f0:da:17:fc:b3:f5:2b:6e:5a:0d:fe:ea:07:d8:f7:20:
         e6:cb:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:09 2026 by rpki-client