This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
File:                     2A5D456AF97811F0B1F9BADEDAE4EC9C.roa (raw, json)
Hash identifier:          zOLtpcgZenRM5LkH9Yycl5PgjnPZ2doqh3fmDP2cJ4s=
Subject key identifier:   D6:CE:A7:45:4C:EE:17:EF:DB:75:B7:4E:73:22:93:83:E5:43:7E:9E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B6A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 22:58:16 +0000
ROA not before:           Sat 24 Jan 2026 22:58:11 +0000
ROA not after:            Tue 03 Mar 2026 22:58:11 +0000
asID:                     14315
IP address blocks:        154.194.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112296 (0x1b6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 22:58:11 2026 GMT
            Not After : Mar  3 22:58:11 2026 GMT
        Subject: CN=69754e88-15af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:2d:dd:81:21:67:fb:32:78:b3:e2:61:59:
                    d7:b9:53:cc:26:d0:e4:3e:63:80:70:a4:7f:96:11:
                    33:b5:7b:be:fa:15:5d:e8:0f:fb:33:aa:bf:14:ef:
                    81:f4:97:15:52:c1:90:64:f0:a5:ef:c6:35:6a:ef:
                    da:07:17:27:3c:c4:36:5e:a3:e5:a0:ca:ca:83:01:
                    1f:f2:80:a4:e4:9f:77:f3:f5:e5:12:e3:06:e6:82:
                    3d:01:5a:39:1d:97:f5:71:9c:9e:00:e1:2e:98:ff:
                    9e:b4:21:a9:47:7b:60:63:76:9d:83:e3:52:b7:37:
                    e5:14:af:75:29:a9:c2:5d:57:d4:64:6c:25:f8:a9:
                    ec:11:ac:5b:45:4b:0a:66:b4:59:e5:b4:a6:0d:e8:
                    32:85:f8:fc:57:c4:db:d3:af:44:23:f9:b1:ce:a3:
                    ec:de:89:a3:b2:33:f0:11:0c:52:96:07:d7:5c:59:
                    17:1e:98:ca:d0:59:da:4d:ff:a8:ff:88:de:1a:58:
                    5a:e4:7f:a9:62:6d:e2:80:3b:41:9e:69:bd:74:84:
                    e6:27:6b:44:bf:f7:ee:d5:5d:c8:04:39:ed:8f:de:
                    ca:1a:7e:c3:c5:c8:5a:66:5a:8a:44:de:c7:bf:13:
                    65:43:a0:ca:98:68:3b:da:be:8d:e1:3b:21:44:d6:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:A7:45:4C:EE:17:EF:DB:75:B7:4E:73:22:93:83:E5:43:7E:9E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:37:d8:9f:6f:bf:4f:47:26:b1:ec:77:d2:8d:48:43:f3:
         68:0a:a8:38:fd:30:fe:6b:a0:4b:70:fa:db:55:3b:45:8a:bd:
         7a:b6:02:82:7d:64:bb:8a:74:c5:85:33:ea:7e:d4:f2:d0:1f:
         dd:75:ba:16:81:1d:c8:f5:e6:5e:36:9b:40:bd:cb:ae:3c:36:
         f6:51:95:69:61:17:9d:58:91:a7:42:5c:f0:2a:a7:2c:60:7f:
         81:71:cf:26:b1:5e:c9:db:41:ea:f1:2e:89:d8:6e:a1:cb:a9:
         b5:a3:b7:cc:fe:30:37:2e:e6:56:f5:73:7f:11:77:c5:b1:35:
         86:6a:95:2f:9c:fd:a8:b3:12:15:de:0d:89:b6:89:33:bb:f1:
         f9:da:4b:e6:a5:78:09:1b:d6:8c:89:b6:42:22:0e:23:39:17:
         eb:2e:e3:59:ef:43:8b:79:9b:dc:ac:7e:cd:9a:42:d9:8c:e9:
         a6:15:dd:88:ae:2b:de:61:c8:ba:89:bd:f5:1b:9c:1d:6d:1f:
         07:da:46:87:af:0d:0d:fc:38:9e:3f:07:07:74:ee:01:86:02:
         60:19:e6:14:9a:5d:f7:bb:48:72:3e:10:a4:3e:a9:eb:4f:e9:
         1b:fc:80:a0:0e:b0:fe:e3:e1:e1:56:8c:60:ca:74:17:74:63:
         e7:57:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:11 2026 by rpki-client