This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26A79370E56511F089F85391DAE4EC9C.roa
File:                     26A79370E56511F089F85391DAE4EC9C.roa (raw, json)
Hash identifier:          nDjaJGVJuPQbX19On/U5uhNe/3hCTis+mmGs+VUElLQ=
Subject key identifier:   A9:9C:82:6C:30:CE:7B:53:0A:68:68:3F:0D:83:D7:55:23:58:DA:9F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26A79370E56511F089F85391DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:51:45 +0000
ROA not before:           Tue 30 Dec 2025 09:51:41 +0000
ROA not after:            Fri 30 Jan 2026 09:51:41 +0000
asID:                     142032
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111074 (0x1b1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:51:41 2025 GMT
            Not After : Jan 30 09:51:41 2026 GMT
        Subject: CN=6953a0b1-8973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:ea:e5:5a:56:a0:bf:75:e7:71:eb:67:09:
                    7b:7d:96:3b:61:3b:53:7a:61:17:68:d6:b9:5c:da:
                    f0:dc:ba:9c:04:7d:d4:01:df:c1:06:38:ab:fc:d0:
                    61:21:92:27:8c:24:07:3e:ae:e3:46:cc:37:5a:6e:
                    2e:fd:21:59:68:d6:22:0f:c1:57:6f:be:21:90:b9:
                    29:c8:89:f0:2e:fb:da:25:d2:13:b0:c1:93:51:75:
                    77:34:75:7c:5a:a7:1d:2b:29:ae:bd:01:60:1c:82:
                    18:b5:30:4d:e0:41:ea:0b:1e:10:ed:b0:57:b5:9a:
                    d3:79:6e:5c:7e:db:be:53:dd:66:70:4c:d4:6a:ff:
                    48:a4:d8:99:e4:84:2c:e6:90:0d:6d:4f:83:4a:b8:
                    68:a1:14:57:38:79:c4:fd:79:e7:6d:c5:b8:9b:91:
                    8a:b6:7e:fb:ac:c9:fa:87:57:98:96:b6:c7:01:af:
                    28:a2:4b:dd:22:24:24:ab:1c:3d:1e:d7:d1:8c:50:
                    6e:fb:b2:a4:01:f6:09:df:2f:6e:86:89:ef:7d:90:
                    23:75:b7:8d:4c:7f:53:f6:73:a0:5b:df:93:d4:49:
                    fa:3f:49:81:50:f3:6c:b9:7d:5c:df:56:5c:5e:76:
                    3e:2c:5f:48:56:69:9c:08:75:18:95:8c:a3:32:a3:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9C:82:6C:30:CE:7B:53:0A:68:68:3F:0D:83:D7:55:23:58:DA:9F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26A79370E56511F089F85391DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:07:48:3c:86:01:9d:df:5c:3a:b8:16:b1:70:f2:f2:2f:
         4a:15:e4:b6:73:5d:5c:2f:b5:3a:e1:e2:dc:94:14:ea:7e:01:
         30:25:9d:1b:29:0a:a2:04:2b:93:46:04:24:da:cf:a9:29:66:
         67:a5:6b:e7:14:43:36:1e:15:2b:d9:d0:f8:05:02:34:a9:05:
         e8:77:75:c4:90:2d:f0:e6:72:fb:36:07:3a:f8:db:4c:ac:df:
         da:69:46:55:6f:d9:0f:2d:18:48:ab:51:2f:c8:ab:91:7d:d8:
         70:7e:ee:1b:43:ed:eb:81:ab:69:8f:0b:1f:ea:de:b6:1d:44:
         1e:37:2f:14:76:f7:9f:ef:d7:92:c9:10:34:0d:78:c9:ed:b1:
         7c:5c:83:e6:3f:ea:9e:16:16:e9:1c:2a:4f:95:df:93:1d:a2:
         6f:50:97:c7:a8:8d:3a:f6:cb:a2:22:e0:84:68:31:95:d6:b8:
         77:2f:88:4b:9e:36:58:f5:d0:78:8e:de:b4:0b:85:6a:7d:15:
         88:89:1c:2c:a3:1b:c6:d3:82:49:9c:75:a1:9c:8b:b1:da:6d:
         9f:f6:9a:04:a8:d4:8b:38:7a:2d:7d:0a:bb:e7:89:1e:45:3e:
         01:1b:c8:29:2d:df:bd:2f:f8:ec:28:c2:f5:6c:42:24:fd:f0:
         23:b3:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:49 2026 by rpki-client