This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F027AEEAFA11F0BF2A1CE8DAE4EC9C.roa
File:                     43F027AEEAFA11F0BF2A1CE8DAE4EC9C.roa (raw, json)
Hash identifier:          OPXTD7uyJWAasUfMc9dyu4QwOBakui74ShkudbcigYU=
Subject key identifier:   8E:94:19:B8:D8:01:30:66:07:75:C1:23:86:9B:19:5E:97:5B:6B:33
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B346
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F027AEEAFA11F0BF2A1CE8DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 12:21:46 +0000
ROA not before:           Tue 06 Jan 2026 12:21:40 +0000
ROA not after:            Thu 12 Feb 2026 12:21:40 +0000
asID:                     328608
IP address blocks:        154.88.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111430 (0x1b346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  6 12:21:40 2026 GMT
            Not After : Feb 12 12:21:40 2026 GMT
        Subject: CN=695cfe59-8a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:e1:1e:33:fd:0e:6d:5c:c6:72:3d:39:42:
                    96:67:76:7a:ea:d7:1d:39:d9:23:81:d7:67:17:b7:
                    3e:88:a6:bf:6c:e5:f4:34:16:23:e7:4e:96:cc:52:
                    90:11:a1:99:f2:f6:82:d8:ea:16:f0:32:82:d8:57:
                    f3:3b:26:d1:95:61:34:e5:58:2d:d9:7b:2d:b3:2f:
                    df:14:35:f9:ce:9a:b0:83:4b:df:61:49:29:94:3b:
                    87:3d:5a:09:6e:5d:7a:72:d9:5b:22:73:e1:7d:46:
                    f9:66:23:61:a6:a0:c5:f8:4a:d7:a5:e0:46:e7:59:
                    a8:7d:d3:5b:75:35:fb:ff:e5:92:99:c2:bb:68:0d:
                    4c:f2:bb:4e:35:f6:91:43:5d:52:3e:f9:01:ba:cb:
                    1e:6b:17:90:41:3d:3c:25:0c:0d:f9:d4:ab:b0:8d:
                    ad:79:53:bb:bf:01:76:d7:e6:14:ca:d7:b8:49:6e:
                    b1:b7:9b:19:50:ca:83:93:58:31:db:8d:58:b6:1d:
                    64:f2:04:35:62:18:0f:30:f2:d8:3c:08:27:ab:c7:
                    2d:ed:5a:3f:65:d8:ae:c6:3a:95:08:a0:53:ba:a9:
                    b7:0b:94:67:88:70:59:97:48:af:7d:47:fa:9a:12:
                    cf:37:5d:1f:43:5b:55:0d:26:ec:26:c3:f0:e7:ef:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:94:19:B8:D8:01:30:66:07:75:C1:23:86:9B:19:5E:97:5B:6B:33
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43F027AEEAFA11F0BF2A1CE8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:e1:4f:df:3e:0b:4e:c6:53:31:09:77:8e:81:eb:0b:d8:d4:
         7d:7a:11:10:74:e0:a0:04:98:65:d1:10:b6:11:c4:97:fc:02:
         da:06:7e:d6:5c:eb:fd:7d:d7:18:fc:79:a6:5c:3f:f0:4d:08:
         ce:15:cd:4d:62:83:27:0f:80:50:a6:33:13:9c:b2:fe:f0:05:
         51:0e:35:25:b7:da:bf:c1:25:76:67:3e:7a:08:13:3d:4b:e2:
         64:db:38:9c:77:be:f0:a7:2a:6b:83:17:d1:ab:20:fa:15:bf:
         46:4c:8f:10:c0:cc:22:e5:17:fa:df:4a:d1:2c:c7:7c:2f:8f:
         0d:1b:e0:1e:47:f8:cd:78:cc:51:52:7b:e3:da:8e:de:d8:7a:
         ef:85:6b:eb:3b:8a:31:4d:a7:db:06:08:de:5a:80:b4:0e:ae:
         fb:d8:49:43:0f:06:c0:43:f5:9e:9b:3f:31:bb:16:9d:78:9c:
         88:0e:11:bc:9d:85:98:48:57:1b:27:b4:ac:cc:8a:e5:ba:91:
         d4:21:17:7b:4a:13:7b:1d:f7:11:87:fc:f6:55:39:d6:bf:d5:
         2d:13:29:59:b1:bb:2a:a0:66:ec:25:e4:b1:29:d3:91:2c:a3:
         3f:f1:44:c6:3d:1e:89:5f:46:88:f6:60:f1:0d:54:f7:1e:8f:
         51:ae:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:45 2026 by rpki-client