This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/179052DEEEA011F0B9A9A0DBDAE4EC9C.roa
File:                     179052DEEEA011F0B9A9A0DBDAE4EC9C.roa (raw, json)
Hash identifier:          NXe1lB7nTtnGiTFwLnIujanNzAA5QQDGiGNnbTEz0F0=
Subject key identifier:   A8:98:48:A9:B6:90:34:DF:A5:44:63:D2:C6:CE:B8:CE:0A:4A:2C:D5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B437
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/179052DEEEA011F0B9A9A0DBDAE4EC9C.roa
Signing time:             Sun 11 Jan 2026 03:46:21 +0000
ROA not before:           Sun 11 Jan 2026 03:46:16 +0000
ROA not after:            Wed 18 Feb 2026 03:46:16 +0000
asID:                     139880
IP address blocks:        154.194.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111671 (0x1b437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 11 03:46:16 2026 GMT
            Not After : Feb 18 03:46:16 2026 GMT
        Subject: CN=69631d0d-9129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:df:d1:60:da:5d:f3:e7:62:56:57:ca:97:
                    99:28:5f:ef:04:da:62:56:1b:8b:ae:75:27:e9:a9:
                    8e:8d:46:7c:33:4b:9e:94:83:7e:6d:a1:9d:35:a1:
                    ab:a5:61:b3:9e:27:e1:9c:31:83:e0:99:0f:13:8e:
                    1b:bf:8d:2d:f8:d7:b5:41:a7:81:78:96:25:f9:0d:
                    6d:71:f1:13:83:e5:e3:8e:3e:cf:b7:a6:30:5b:52:
                    c3:2c:04:08:67:fe:4f:55:2f:61:f8:70:d8:d2:28:
                    30:32:7e:f4:79:c8:cb:8d:c4:26:e4:96:3b:15:3e:
                    2f:60:ab:0e:76:e0:0d:f5:03:86:a0:8b:65:84:1f:
                    02:60:97:a3:f4:7c:02:df:8d:65:8f:f1:19:f3:0c:
                    d2:a9:12:84:d3:98:ae:34:b4:9f:6e:bb:22:dd:8b:
                    70:5e:1d:9a:ac:b6:6f:a2:03:6e:b5:f2:7c:c9:72:
                    45:83:32:be:5c:20:f1:fb:69:d9:2a:e9:9d:e6:81:
                    70:3f:4d:a9:52:c6:53:15:51:58:0a:24:94:24:49:
                    45:c1:d3:f3:f0:a3:16:d4:d7:e9:aa:fa:4d:8b:73:
                    ad:22:2e:52:67:e1:92:86:83:13:05:63:e3:b3:b3:
                    d6:6a:dc:02:dd:f3:ea:e4:de:fa:97:d5:07:45:b8:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:98:48:A9:B6:90:34:DF:A5:44:63:D2:C6:CE:B8:CE:0A:4A:2C:D5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/179052DEEEA011F0B9A9A0DBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:76:54:cb:dd:45:8d:24:2c:d2:0e:5d:a3:06:08:9d:19:
         0e:8d:34:5c:4d:08:f9:52:42:05:09:89:52:fd:dc:6c:fc:16:
         8b:0b:8a:dc:10:dc:9f:5b:5c:96:28:05:df:7b:5a:11:71:e5:
         5c:86:d1:bf:56:26:8b:10:31:d9:de:88:8e:a4:2e:9e:d0:3f:
         34:f7:b8:2e:05:94:f0:1c:0c:d5:db:17:08:42:a1:14:e2:c7:
         4d:e4:e6:76:7c:e1:bd:f5:d5:8d:54:61:dc:4c:4a:0c:b1:ea:
         89:37:5e:76:63:a6:09:3d:3b:ca:4c:51:72:8c:d8:25:48:05:
         cc:7f:71:16:5f:38:75:3e:d8:a4:4f:16:75:fc:af:fd:de:11:
         1f:ba:4b:8a:38:6b:3b:27:67:48:12:23:8c:cb:c8:2d:2c:1d:
         40:9b:78:2c:bd:a5:5b:1c:24:05:77:f9:4f:5a:c4:1a:56:64:
         01:0e:50:b1:ea:45:8d:90:7e:6d:1b:f3:05:86:9a:f6:3e:c7:
         d8:d9:c4:80:bc:96:6c:04:88:39:aa:02:86:60:bc:e1:fa:02:
         9b:aa:9c:e3:d9:42:f7:41:01:ba:bf:db:a9:28:ee:d6:48:7e:
         e7:22:6f:a7:2f:38:ca:63:f9:12:7c:67:7b:29:47:6b:b6:76:
         ef:d4:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:00 2026 by rpki-client