This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176D3502F93A11F0933E29E6DAE4EC9C.roa
File:                     176D3502F93A11F0933E29E6DAE4EC9C.roa (raw, json)
Hash identifier:          KnxVWvvQF3lvK6wmcjA5PEAY/pEmUxBc4+vi88vo7vM=
Subject key identifier:   2D:DF:35:75:71:E3:5C:F2:4B:4C:FC:C5:5D:D5:01:3C:A9:4F:C4:EC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B630
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176D3502F93A11F0933E29E6DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 15:33:55 +0000
ROA not before:           Sat 24 Jan 2026 15:33:50 +0000
ROA not after:            Thu 12 Mar 2026 15:33:50 +0000
asID:                     214143
IP address blocks:        154.194.208.0/22 maxlen: 24
                          154.194.212.0/23 maxlen: 24
                          154.196.214.0/24 maxlen: 24
                          154.208.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112176 (0x1b630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 15:33:50 2026 GMT
            Not After : Mar 12 15:33:50 2026 GMT
        Subject: CN=6974e663-7729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d1:41:63:8e:42:e2:04:7b:be:88:44:72:06:
                    b7:d8:df:92:6a:38:12:31:4d:9d:da:97:d7:ca:a9:
                    50:49:fc:43:47:a0:ba:eb:5f:95:a7:1d:83:4b:d8:
                    47:33:c1:06:fd:b0:65:36:c0:54:7b:9b:c0:31:12:
                    1c:16:74:3f:40:0c:bf:f2:48:b8:02:9f:3b:2a:65:
                    8e:20:35:da:3e:41:0a:db:f6:10:8e:ef:59:55:a1:
                    ae:0e:0d:26:0e:42:72:76:4c:0a:73:e4:9d:81:a3:
                    04:1f:2f:ee:a9:09:7a:9c:59:fe:be:af:6e:19:fe:
                    5e:28:c7:f0:bf:87:fc:3c:cf:8c:fa:46:75:c6:44:
                    cb:ae:fc:8e:00:0d:27:10:37:47:62:97:22:e1:65:
                    0a:84:b6:d4:5e:a3:25:f9:48:69:48:61:df:b8:85:
                    7d:6b:a8:33:7e:b3:c9:12:b4:33:e9:cc:b8:03:01:
                    77:34:b9:0b:84:b1:8d:32:47:fb:30:fa:48:93:d5:
                    3f:ef:9e:51:ae:ce:cf:b0:7c:38:4b:35:0b:77:06:
                    d4:30:1c:00:32:47:e4:cf:4c:b7:f7:63:fd:9b:40:
                    68:f9:db:9a:09:f1:c9:52:6e:61:d8:e4:11:ab:cf:
                    d9:a7:1d:60:23:d3:32:51:76:47:2a:29:f8:ab:a1:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:35:75:71:E3:5C:F2:4B:4C:FC:C5:5D:D5:01:3C:A9:4F:C4:EC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/176D3502F93A11F0933E29E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0-154.194.213.255
                  154.196.214.0/24
                  154.208.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:82:e1:99:81:8a:3a:8d:e5:8d:ba:63:c4:b6:f4:09:aa:
         ee:c4:4d:f7:97:63:ae:86:0c:14:fe:76:d5:64:c6:b1:2b:4a:
         ef:6c:73:8f:dd:13:f4:da:f4:7c:b8:15:6d:96:e0:a0:4d:27:
         ed:e3:c1:ea:9d:56:db:3c:fb:3e:0a:06:69:a9:0f:4a:25:94:
         4e:bf:f7:32:53:ae:2f:c2:e6:67:f7:db:eb:f8:33:0e:f9:e8:
         b0:d2:da:14:a5:fa:8f:bb:38:de:b5:fd:bd:ae:78:6f:5d:01:
         62:af:3c:8d:48:f3:f8:2c:34:54:2d:eb:da:55:ca:3b:17:2f:
         bd:70:e3:67:c8:92:1e:c3:c6:16:c7:78:66:02:96:f1:db:cd:
         fa:4b:52:e2:19:df:54:ec:15:38:b0:35:79:b5:92:d4:18:66:
         87:86:71:e1:9b:b2:d8:a1:11:7a:a0:62:54:6b:34:0e:71:86:
         b7:95:5c:60:4a:42:64:27:0d:8a:e6:45:f4:68:20:6f:fb:15:
         7e:cc:b2:e7:8b:db:ee:c8:b2:38:c2:e7:88:75:ab:25:17:c9:
         f2:d2:37:20:bb:cf:7b:41:4b:ee:de:02:55:92:bb:e2:d8:91:
         93:bf:fc:b4:50:0e:d5:76:a1:b6:8d:b7:5d:44:87:9c:ea:f8:
         09:08:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:58 2026 by rpki-client