This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3CF9EEF99411F0B0A95B90DAE4EC9C.roa
File:                     1E3CF9EEF99411F0B0A95B90DAE4EC9C.roa (raw, json)
Hash identifier:          EIiwmXMcyx1rF7S3sK5V6F4vtp25r5mGxK/1oqsf1Es=
Subject key identifier:   D3:00:F8:D1:CD:9B:56:B1:74:71:CA:C5:D1:CA:94:95:D8:AC:21:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B6AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3CF9EEF99411F0B0A95B90DAE4EC9C.roa
Signing time:             Sun 25 Jan 2026 02:18:21 +0000
ROA not before:           Sun 25 Jan 2026 02:18:16 +0000
ROA not after:            Sun 31 Jan 2027 02:18:16 +0000
asID:                     38638
IP address blocks:        154.194.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112299 (0x1b6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 25 02:18:16 2026 GMT
            Not After : Jan 31 02:18:16 2027 GMT
        Subject: CN=69757d6d-001a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:7d:84:1f:53:63:5e:c7:1f:79:d8:99:de:
                    b0:f9:48:78:ea:08:c7:85:6a:cf:c5:46:66:02:87:
                    d8:50:fd:36:8e:c0:f9:09:2a:8f:08:99:bb:f6:e7:
                    9f:18:17:67:e4:3d:f0:48:7e:1a:81:c5:92:fc:36:
                    6c:aa:3a:00:0e:56:89:40:f2:34:bf:66:8f:98:2a:
                    68:0f:7c:c8:25:46:23:39:40:1b:be:5e:31:1b:f4:
                    17:2c:4b:a1:10:5e:e8:82:43:54:83:18:0b:b5:5c:
                    e9:11:26:36:2c:32:7d:36:04:63:3a:e2:cc:8f:ce:
                    57:5a:63:d0:9c:49:56:37:b5:24:0c:e4:58:70:fa:
                    05:26:5a:e5:1a:9a:23:1c:2a:de:d5:72:26:23:2a:
                    00:4a:4c:de:89:37:9b:da:c0:a6:44:a0:43:19:97:
                    e9:4a:a8:f2:fc:59:51:1d:47:1c:44:bb:16:89:c4:
                    96:9e:c5:a9:c7:a7:2f:7d:54:53:1e:b9:e4:ad:8e:
                    ed:dd:00:48:8a:d4:52:47:f4:68:b8:cc:47:ab:5c:
                    e8:18:a4:fd:1c:cc:17:c4:a7:d1:70:b5:43:53:40:
                    7d:dd:19:63:d1:4d:2f:4b:02:7b:ac:9a:4a:4e:f8:
                    75:f3:78:8a:28:78:d2:69:aa:ee:c9:2f:7e:97:52:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:F8:D1:CD:9B:56:B1:74:71:CA:C5:D1:CA:94:95:D8:AC:21:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3CF9EEF99411F0B0A95B90DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:7d:85:5c:e1:81:c7:3b:08:60:93:91:1a:61:61:54:66:7d:
         ab:87:57:26:65:a0:f4:c5:f5:d5:72:55:06:02:7a:49:d9:00:
         06:5c:3b:78:90:2a:11:5b:04:22:39:34:37:e6:03:a0:ac:66:
         d8:2f:9c:49:78:87:7a:32:93:de:74:26:83:0c:44:8f:aa:e3:
         d7:d6:c3:84:f5:f0:b0:5f:b5:a7:bf:b0:b7:93:02:50:a3:c6:
         0e:99:35:7a:40:a8:92:15:47:4b:12:f3:14:d8:12:a4:3f:c2:
         ee:73:d0:e2:58:21:37:68:7b:42:7e:cf:03:b3:82:21:97:ee:
         a6:47:c3:27:a2:b9:90:24:a8:46:81:c6:e0:31:ef:ba:fa:a1:
         86:62:18:99:fd:56:1b:1d:5d:87:20:04:83:c5:25:24:f2:9f:
         90:7c:04:92:2b:22:03:20:90:58:79:0f:22:71:03:2b:6d:8b:
         d8:10:ac:42:19:f8:c1:be:89:e9:0f:fa:56:16:5b:d9:90:b4:
         df:04:d0:ec:60:bf:0d:16:ba:3e:f4:e3:0f:9b:9d:64:27:b3:
         5e:7e:5d:cc:11:31:3b:15:c7:68:fb:10:49:30:36:8e:35:98:
         de:3c:cf:66:99:d1:0a:38:61:3b:4e:1a:cc:ba:24:6a:5c:fb:
         34:a2:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:33 2026 by rpki-client