This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9CC5A0F5DC11F0AF900FBADAE4EC9C.roa
File:                     3D9CC5A0F5DC11F0AF900FBADAE4EC9C.roa (raw, json)
Hash identifier:          TwjcmyeXOyKI6E8mmdYDdzPb/qClPN9SNscXFzJCJs4=
Subject key identifier:   89:68:57:2F:3E:ED:B9:20:C0:9C:6E:85:62:C3:34:82:6D:89:17:02
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9CC5A0F5DC11F0AF900FBADAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:44:33 +0000
ROA not before:           Tue 20 Jan 2026 08:44:28 +0000
ROA not after:            Thu 26 Feb 2026 08:44:28 +0000
asID:                     6079
IP address blocks:        154.199.49.0/24 maxlen: 24
                          154.199.50.0/24 maxlen: 24
                          154.199.51.0/24 maxlen: 24
                          154.199.52.0/24 maxlen: 24
                          154.199.53.0/24 maxlen: 24
                          154.199.54.0/24 maxlen: 24
                          154.199.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112032 (0x1b5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 08:44:28 2026 GMT
            Not After : Feb 26 08:44:28 2026 GMT
        Subject: CN=696f4071-31c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:5f:d9:b3:14:9c:db:f9:2a:11:7e:17:e9:
                    dd:0f:8d:80:d7:1e:f0:56:60:07:c8:f2:e6:c3:f1:
                    eb:de:9d:0f:00:0c:14:d2:bb:d9:75:f5:5f:7f:e1:
                    ac:69:7f:3e:8c:00:72:05:0f:1e:4f:ce:73:1b:82:
                    f8:0a:4f:3c:38:98:bb:a8:43:c6:d8:bd:5b:ff:89:
                    10:fc:07:3d:ae:1b:84:fd:f1:d7:ff:84:54:f8:75:
                    7e:f1:6f:2a:5e:55:2f:f6:11:0f:d9:bb:74:a5:73:
                    2e:ab:b0:be:2d:85:2c:92:05:cb:23:a7:de:6f:a8:
                    34:74:52:96:4b:60:ad:2c:2e:1e:f3:23:85:b5:99:
                    69:c3:f5:e0:6a:eb:7c:23:37:5b:8d:2d:45:6b:fb:
                    cf:49:8d:76:e1:da:6d:12:c0:49:1e:78:9d:34:59:
                    51:2e:1c:52:85:da:41:07:81:e0:13:d7:1d:24:d7:
                    a8:fd:49:77:e8:99:b3:c9:4b:0c:05:f9:a5:a1:6f:
                    83:32:be:ba:58:87:68:d3:5c:10:69:1a:0a:93:72:
                    2f:cf:8a:17:b0:76:0c:29:78:88:ae:47:b3:3c:1b:
                    92:80:3d:f7:6c:b8:03:16:40:fe:cb:d4:08:55:bd:
                    ef:4a:ab:ef:b4:86:91:7e:50:e0:e5:20:8a:40:86:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:57:2F:3E:ED:B9:20:C0:9C:6E:85:62:C3:34:82:6D:89:17:02
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D9CC5A0F5DC11F0AF900FBADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.49.0-154.199.55.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:ab:38:aa:76:47:1b:19:ff:74:8f:13:74:b0:dc:8d:30:
         4b:69:8a:d4:87:71:68:cf:e6:f7:cc:bd:04:20:51:19:91:bb:
         7b:f3:1b:8c:0d:29:1e:5c:ac:31:5c:fb:ff:29:dd:29:8b:9d:
         bc:45:92:8a:df:90:9b:05:71:cb:a7:fa:be:c8:aa:cb:1a:35:
         e1:d4:8b:6b:0a:4f:b5:ca:9a:6a:bb:5d:11:72:bb:db:4c:40:
         ee:59:6c:ed:90:6b:2d:ab:ef:ad:2c:fb:7f:1a:61:36:c9:56:
         0d:d4:a6:39:b8:c6:fc:59:ce:13:c7:24:56:e2:ae:e5:53:00:
         35:46:ba:9d:f3:c5:2b:ca:ff:0a:47:ed:c5:35:c3:df:8e:78:
         5b:93:1b:53:c7:3b:85:f2:6b:9c:64:74:50:fe:9c:85:de:08:
         46:c4:f4:6f:aa:80:f1:7f:7e:96:30:bc:19:8d:a2:ba:e8:27:
         ab:8b:b3:3f:63:5e:59:af:ea:d5:da:0f:c9:b1:d9:a7:3c:98:
         d6:bd:df:5a:30:49:83:83:d8:93:81:74:50:3e:23:57:df:fc:
         21:49:e0:49:aa:90:55:8c:d8:21:de:d0:44:eb:66:80:dc:97:
         a7:ef:c0:8f:48:86:3c:b6:5a:40:f8:aa:e4:7b:cd:f7:0c:a2:
         bd:69:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:08:47 2026 by rpki-client