This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0AACDCF3EA11F0B95EB0B7DAE4EC9C.roa
File:                     3C0AACDCF3EA11F0B95EB0B7DAE4EC9C.roa (raw, json)
Hash identifier:          FUWekxH2IdhXuFx8oK4PINGxx4gyb2Qolsz0ndv5asc=
Subject key identifier:   92:40:03:1B:08:0B:68:B4:A7:3D:BA:BD:45:A3:E5:CA:E4:FE:FA:3E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B542
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0AACDCF3EA11F0B95EB0B7DAE4EC9C.roa
Signing time:             Sat 17 Jan 2026 21:19:41 +0000
ROA not before:           Sat 17 Jan 2026 21:19:36 +0000
ROA not after:            Tue 24 Feb 2026 21:19:36 +0000
asID:                     58931
IP address blocks:        154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111938 (0x1b542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 17 21:19:36 2026 GMT
            Not After : Feb 24 21:19:36 2026 GMT
        Subject: CN=696bfced-8995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:10:78:71:73:ca:8a:a8:4d:d0:1c:cc:fb:
                    f5:b2:94:80:0e:67:96:b7:80:af:b4:05:32:65:a2:
                    54:68:d2:f5:df:6a:9a:43:5e:ae:50:f6:cf:f8:af:
                    86:99:91:29:bc:a2:17:af:ec:35:49:62:7a:e3:c1:
                    8a:9e:38:2c:9f:0b:9f:67:8c:97:e8:bb:ee:69:99:
                    d9:65:4f:69:da:30:69:73:3e:f2:de:8f:78:b6:33:
                    04:60:07:33:20:3e:87:85:93:58:32:42:6c:14:3e:
                    e4:48:74:5c:3e:9a:ac:ee:25:de:8a:83:a7:48:d2:
                    5f:77:cc:98:25:15:5a:88:e3:19:bc:21:9b:c1:6f:
                    8f:82:61:cf:47:90:b0:11:cc:d8:3a:d2:f2:f4:f9:
                    58:f8:f3:01:81:f7:31:94:12:eb:4b:de:69:45:a4:
                    ff:16:29:0c:73:9b:b3:ab:2d:ad:42:4c:f0:6e:48:
                    e6:3a:fd:2e:0a:78:08:1b:52:4c:c6:37:b4:df:3d:
                    4c:da:92:4a:5d:c1:9c:42:a5:7b:50:7c:63:15:a3:
                    eb:7c:70:39:49:12:42:84:25:0e:02:5c:83:01:ab:
                    16:c8:df:15:0a:a0:67:20:59:c0:80:a9:8e:9b:6c:
                    cf:2d:17:d7:d9:71:22:6b:f0:7a:ce:e5:0f:80:e2:
                    75:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:03:1B:08:0B:68:B4:A7:3D:BA:BD:45:A3:E5:CA:E4:FE:FA:3E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C0AACDCF3EA11F0B95EB0B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:b2:d0:17:e3:0f:bc:e5:bf:fa:2e:f1:80:4d:6d:bc:8b:
         f6:f1:04:32:79:2a:c8:bf:1e:ce:00:37:fb:eb:71:b8:0e:05:
         33:3d:72:5a:e9:a0:87:a3:ea:81:59:1e:52:d6:41:35:b2:f5:
         02:49:9b:aa:28:30:92:61:48:3c:50:e2:b0:31:57:fa:73:c2:
         a3:09:70:de:e9:fd:62:15:fa:e9:61:69:63:de:bc:2e:6e:cc:
         c2:b8:6c:b4:ef:01:4a:5e:5c:ee:94:31:06:ff:f0:a2:94:17:
         ef:99:f7:59:83:24:df:95:d3:68:0f:f1:5f:e0:e6:df:98:af:
         71:b6:6f:8f:f5:08:9b:62:d3:92:40:17:15:0a:df:0b:a7:7b:
         bc:91:07:f4:b1:80:c4:d1:c4:ab:97:0d:52:97:9a:75:b8:96:
         54:da:9e:72:6b:3e:39:1c:43:02:ee:fc:c3:7d:6e:55:d7:9e:
         85:84:35:a7:be:23:99:81:0f:de:b2:ee:ee:99:e7:89:5f:05:
         24:e2:6b:50:6c:31:cd:76:b6:85:c8:48:dd:4c:bc:3b:af:4a:
         1a:23:c3:c9:03:60:db:73:a3:10:bc:28:37:a6:74:17:36:d2:
         5b:1d:73:85:ce:40:b9:89:09:c1:32:88:e2:56:42:66:d3:48:
         f7:e9:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:49 2026 by rpki-client