This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253131D2F44B11F08D62759BDAE4EC9C.roa
File:                     253131D2F44B11F08D62759BDAE4EC9C.roa (raw, json)
Hash identifier:          2N5n47PofHF0woKSnnmjal7hRmsBT9XW3e1eJZw21RQ=
Subject key identifier:   1D:EA:91:68:62:3A:23:97:DC:F8:B9:B2:24:3D:03:B6:9D:81:61:7F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B558
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253131D2F44B11F08D62759BDAE4EC9C.roa
Signing time:             Sun 18 Jan 2026 08:53:24 +0000
ROA not before:           Sun 18 Jan 2026 08:53:19 +0000
ROA not after:            Mon 25 Jan 2027 08:53:19 +0000
asID:                     135097
IP address blocks:        154.212.164.0/22 maxlen: 24
                          154.213.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111960 (0x1b558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 18 08:53:19 2026 GMT
            Not After : Jan 25 08:53:19 2027 GMT
        Subject: CN=696c9f83-30b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:87:ce:5d:72:4d:f9:bc:b5:c2:bd:22:82:
                    7e:fb:ad:b5:50:16:4a:ca:27:84:76:f7:a1:3c:c8:
                    ed:ad:33:40:87:d6:a8:23:a9:06:6e:c3:5d:32:4c:
                    cc:a3:3c:4b:0d:b1:66:f4:1f:63:7d:a4:fe:8c:b7:
                    d4:dc:ee:f0:5a:d2:da:61:9f:00:1f:c2:49:c5:d8:
                    50:ab:55:da:06:e9:77:67:d3:4e:f8:53:79:35:a6:
                    06:54:b2:a2:98:60:bd:65:1f:0e:7e:4c:1f:71:5a:
                    57:dc:de:32:a2:3a:1a:eb:17:2d:10:40:34:f9:01:
                    71:a5:64:a1:82:28:5e:96:7f:97:e6:b1:db:ae:97:
                    df:a5:8e:f7:20:49:ee:e8:88:ea:83:90:ac:1f:0b:
                    c8:07:01:4d:3e:d6:34:02:04:c5:de:52:11:69:38:
                    26:1a:f8:30:9a:d9:d0:d3:17:af:e8:72:cc:ee:83:
                    c5:a1:f2:d5:25:ab:69:16:48:b0:b6:91:97:4f:11:
                    dc:a0:28:2b:87:ca:e8:f1:ee:df:87:d5:de:e3:51:
                    55:10:ae:5d:2d:ba:93:6b:11:67:f7:0c:0a:9c:8f:
                    03:b9:09:02:c0:d5:3e:f0:99:56:05:65:17:47:d2:
                    6b:68:81:92:19:f7:3d:93:67:02:77:10:3d:26:8e:
                    86:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EA:91:68:62:3A:23:97:DC:F8:B9:B2:24:3D:03:B6:9D:81:61:7F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/253131D2F44B11F08D62759BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.212.164.0/22
                  154.213.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:7c:e8:03:26:d6:4d:bb:da:56:47:dd:56:61:80:43:c0:
         70:03:33:ee:f1:72:22:4b:cc:01:c6:74:57:6e:2d:73:35:f0:
         8e:68:72:d1:d3:84:56:69:60:e6:c0:f5:cb:38:bb:26:c8:8a:
         38:c5:44:ec:d3:6b:3c:fd:10:1a:2c:b9:43:e2:ef:2b:d4:dc:
         34:b1:ff:c9:a9:69:1e:b2:5a:1c:00:5e:6f:a7:3f:d2:96:32:
         ff:4a:26:62:bb:3d:d8:25:20:c9:30:92:c2:0d:a8:ee:8c:87:
         1e:6a:eb:97:cf:55:a1:86:c4:29:15:97:79:76:ac:67:03:cb:
         ac:25:7e:57:c4:1f:ca:c8:38:56:97:5c:ea:9a:80:03:38:9d:
         5e:77:4d:18:29:04:76:ed:56:38:01:6f:01:4a:3a:8d:ed:55:
         2e:fb:21:6f:6f:e5:33:12:5a:cc:68:80:fe:1b:76:27:8a:27:
         ba:9e:5a:c0:17:ad:5f:34:d2:2e:d8:f7:bd:27:e4:65:d4:98:
         96:9a:b1:c6:2d:50:3a:db:1c:7f:52:29:5a:89:5c:1d:56:a0:
         42:48:90:80:fb:ef:b2:82:b5:5f:64:0a:3d:cf:70:66:67:a3:
         88:b0:67:33:ce:69:40:7e:91:ce:d3:f0:57:da:9f:ab:79:d0:
         12:a9:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:38 2026 by rpki-client