This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBDA998F69811F0A52EB1C0DAE4EC9C.roa
File:                     1FBDA998F69811F0A52EB1C0DAE4EC9C.roa (raw, json)
Hash identifier:          lGQFCteSwxPFvFetCU+graNMG/zORWg/n4LWidZjjQE=
Subject key identifier:   27:F3:0E:C6:A9:BC:10:B0:9B:75:A5:B6:08:A1:BD:76:5A:CC:9C:5D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBDA998F69811F0A52EB1C0DAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 07:09:28 +0000
ROA not before:           Wed 21 Jan 2026 07:09:23 +0000
ROA not after:            Fri 27 Feb 2026 07:09:23 +0000
asID:                     6079
IP address blocks:        154.81.200.0/21 maxlen: 24
                          154.83.48.0/20 maxlen: 24
                          154.90.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112098 (0x1b5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 21 07:09:23 2026 GMT
            Not After : Feb 27 07:09:23 2026 GMT
        Subject: CN=69707ba8-8045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:52:76:51:7b:47:5d:85:8f:62:b8:24:42:
                    99:37:c6:94:31:d2:0a:53:13:e3:8d:5d:85:b9:70:
                    87:48:ce:58:83:f6:82:c1:c2:ef:e4:e5:0f:ef:60:
                    13:0b:5f:b7:88:84:4b:35:7a:e5:b4:4c:5c:b0:77:
                    06:33:29:3a:b4:21:46:a5:02:21:57:47:9a:2e:db:
                    37:bf:6c:4c:e2:fd:6d:52:76:5e:cf:bf:d0:ab:47:
                    c4:e4:b8:cc:4d:7d:74:27:60:f8:4f:df:9b:9f:a5:
                    d8:50:dc:34:0f:49:4b:d6:96:8d:15:67:f8:48:a9:
                    fe:cc:17:73:b5:44:0e:8f:1d:b3:7d:6b:de:f3:26:
                    b3:87:0f:45:45:26:c4:93:22:55:be:00:85:e6:9d:
                    b7:e1:5a:fd:76:87:82:55:f4:97:7b:8e:9e:25:4d:
                    6e:43:59:64:c8:05:4b:dd:45:26:0d:ee:3a:2d:d8:
                    38:60:32:ab:31:8e:b6:6b:7d:04:45:4c:1c:34:64:
                    c0:3e:83:78:7b:d9:5e:ca:0b:b7:fa:ab:7a:87:7a:
                    c6:3e:c5:b5:7a:71:b5:16:e2:d8:81:c1:36:b0:32:
                    49:2c:37:97:03:af:f9:0c:24:74:f6:30:b9:10:a5:
                    60:20:24:a8:36:ca:47:d9:69:8f:f4:f3:b4:22:4d:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F3:0E:C6:A9:BC:10:B0:9B:75:A5:B6:08:A1:BD:76:5A:CC:9C:5D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FBDA998F69811F0A52EB1C0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.200.0/21
                  154.83.48.0/20
                  154.90.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:d1:ca:f0:71:c3:4a:38:05:4b:bb:8e:80:d3:c4:9e:0a:
         df:f4:07:c7:12:4d:13:2a:00:5e:7f:f2:86:b0:ff:35:14:22:
         b1:13:de:2c:e2:11:d7:7d:39:89:99:0a:bf:7e:e9:50:42:3c:
         2b:25:5d:a3:97:a7:f4:eb:4f:76:79:bf:09:7d:04:ae:75:bb:
         5e:70:60:59:fb:0f:05:2a:45:86:f2:66:9e:e6:c0:07:65:6d:
         3b:3b:90:c6:8d:cd:95:aa:29:dd:c5:9c:63:76:13:4c:24:e5:
         42:25:5c:e6:3c:ff:e8:e1:8a:b1:b5:89:c1:b1:c6:d5:c2:bb:
         6c:b4:45:71:ee:49:d7:fb:4d:3c:44:6b:bd:c9:b4:ab:12:0f:
         d9:77:07:d8:9d:e1:f4:b4:0c:fb:7c:62:f7:01:6f:fe:75:60:
         8d:eb:21:6d:e5:29:b2:35:f1:f1:65:9b:b0:d4:77:5f:3e:b9:
         18:b5:9f:48:04:45:bd:f1:df:b5:59:d1:d8:64:d2:b2:7f:db:
         51:0a:e2:ad:34:36:ed:7e:e8:02:d1:c8:40:a8:ce:cd:cb:48:
         b8:f4:2a:78:c9:95:e0:54:0a:7f:30:9b:e7:d7:7c:bb:d7:80:
         1a:fc:c3:47:c0:d7:91:1c:ea:17:fb:47:c6:58:81:9b:57:45:
         ac:be:91:b2
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbXiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTIxMDcwOTIzWhcNMjYwMjI3MDcwOTIzWjAYMRYw
FAYDVQQDEw02OTcwN2JhOC04MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5P9SdlF7R12Fj2K4JEKZN8aUMdIKUxPjjV2FuXCHSM5Yg/aCwcLv5OUP
72ATC1+3iIRLNXrltExcsHcGMyk6tCFGpQIhV0eaLts3v2xM4v1tUnZez7/Qq0fE
5LjMTX10J2D4T9+bn6XYUNw0D0lL1paNFWf4SKn+zBdztUQOjx2zfWve8yazhw9F
RSbEkyJVvgCF5p234Vr9doeCVfSXe46eJU1uQ1lkyAVL3UUmDe46Ldg4YDKrMY62
a30ERUwcNGTAPoN4e9leygu3+qt6h3rGPsW1enG1FuLYgcE2sDJJLDeXA6/5DCR0
9jC5EKVgICSoNspH2WmP9PO0Ik2b5QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCfz
DsapvBCwm3WltgihvXZazJxdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkJEQTk5OEY2OTgxMUYwQTUyRUIxQzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlHIAwQEmlMwAwQAmloA
MA0GCSqGSIb3DQEBCwUAA4IBAQATv9HK8HHDSjgFS7uOgNPEngrf9AfHEk0TKgBe
f/KGsP81FCKxE94s4hHXfTmJmQq/fulQQjwrJV2jl6f06092eb8JfQSudbtecGBZ
+w8FKkWG8mae5sAHZW07O5DGjc2VqindxZxjdhNMJOVCJVzmPP/o4YqxtYnBscbV
wrtstEVx7knX+008RGu9ybSrEg/ZdwfYneH0tAz7fGL3AW/+dWCN6yFt5SmyNfHx
ZZuw1HdfPrkYtZ9IBEW98d+1WdHYZNKyf9tRCuKtNDbtfugC0chAqM7Ny0i49Cp4
yZXgVAp/MJvn13y714Aa/MNHwNeRHOoX+0fGWIGbV0WsvpGy
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:41 2026 by rpki-client