This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAECEB6F94311F09523E89EDAE4EC9C.roa
File:                     1AAECEB6F94311F09523E89EDAE4EC9C.roa (raw, json)
Hash identifier:          FmoUtjRngmFNIlUCgdMlJTrybK1MpzG0IEYFovxBvxE=
Subject key identifier:   98:1A:18:3D:92:40:FF:D1:77:64:E1:0F:FA:55:CC:85:C8:5D:CA:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B646
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAECEB6F94311F09523E89EDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 16:38:26 +0000
ROA not before:           Sat 24 Jan 2026 16:38:21 +0000
ROA not after:            Mon 02 Mar 2026 16:38:21 +0000
asID:                     9304
IP address blocks:        154.92.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112198 (0x1b646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 16:38:21 2026 GMT
            Not After : Mar  2 16:38:21 2026 GMT
        Subject: CN=6974f582-783e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:56:8b:c6:a9:e5:72:0c:97:47:fd:af:97:bb:
                    82:c5:3f:c4:95:0e:07:97:3f:89:5e:85:4c:34:dc:
                    b8:60:38:cc:6f:8c:e0:f6:15:45:25:eb:a4:dd:b8:
                    8c:fa:c9:11:7d:72:04:ec:5e:cb:af:1f:e4:ee:d6:
                    d1:16:ad:fa:3a:83:50:21:c5:26:28:49:75:08:d8:
                    3c:ce:ab:f1:5a:32:34:e0:97:39:a9:12:0b:69:69:
                    63:37:a1:97:37:3a:01:6d:38:c8:4e:a9:1f:c9:26:
                    9b:78:16:90:7c:b6:a8:9f:04:22:c8:e4:c7:6f:a5:
                    84:c8:26:ed:c7:0e:d7:17:94:72:17:1b:d0:2f:21:
                    b7:ad:93:af:bc:9e:99:ac:e4:32:1a:86:4a:32:78:
                    0d:e7:c4:36:68:ec:b0:73:f8:19:a0:f9:2d:19:3a:
                    4f:11:33:99:21:06:f7:4c:d1:54:bd:3c:ba:2d:13:
                    85:d7:f3:7a:85:1b:41:0a:b3:56:24:9b:6e:89:13:
                    e4:65:6b:3b:af:ba:25:a5:0b:48:a5:97:ed:98:f8:
                    8c:22:11:cf:f8:28:7a:13:9a:be:d0:6b:a5:f4:48:
                    f8:36:7b:ee:01:c8:b6:e8:51:d2:e8:07:ad:15:2f:
                    76:2b:1c:c0:cf:ec:27:53:d4:77:d3:4d:e0:95:09:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:18:3D:92:40:FF:D1:77:64:E1:0F:FA:55:CC:85:C8:5D:CA:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAECEB6F94311F09523E89EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:83:02:70:a3:25:a8:6c:b1:41:df:a5:6c:86:86:5a:f3:
         8d:f0:2b:e1:2c:9d:49:cc:61:92:d7:03:28:01:85:ab:8f:0e:
         7c:b3:ac:45:49:ed:e4:5c:28:bc:a0:f2:d4:c6:e9:12:df:8e:
         64:c1:da:bc:22:de:fa:56:af:65:87:94:fd:b5:b1:9f:59:b2:
         f0:e3:1c:bc:bb:a9:88:e5:8c:ac:4a:47:fc:50:1c:69:3e:6f:
         9c:0f:e8:b7:b2:4c:e8:58:f7:7c:d8:0d:c1:df:4b:90:35:34:
         2d:f2:eb:9f:fc:54:0e:d2:80:d8:1a:87:8c:ae:4d:71:06:c1:
         50:80:d4:f1:ee:06:a6:69:70:24:4e:70:db:f6:3d:a4:85:fb:
         1b:90:75:03:61:77:66:8f:52:33:6b:e3:0d:38:59:51:96:f4:
         0a:e8:8a:f2:06:af:04:69:63:76:c5:a9:7d:9a:36:83:2a:42:
         a7:f4:5e:7a:6a:04:07:26:a1:56:fe:af:71:d2:9d:a7:27:5b:
         e1:b2:b2:e6:2a:cc:7d:73:0e:75:c1:32:0d:bf:c3:8e:8d:39:
         f6:94:66:3d:7d:ba:09:20:28:02:b2:f7:b9:3d:7f:ae:85:1d:
         38:bb:3c:93:46:01:98:b9:07:43:68:ea:d8:f2:38:98:7c:58:
         f0:6c:72:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:49 2026 by rpki-client