This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4712C3FAF69F11F0A2F0EAEBDAE4EC9C.roa
File:                     4712C3FAF69F11F0A2F0EAEBDAE4EC9C.roa (raw, json)
Hash identifier:          38BNb44gB04xdRA8crlGMluvjoidDtytM3fqi3N0a5g=
Subject key identifier:   2F:05:CF:2D:FF:02:3D:48:81:4F:AF:A6:93:7C:85:19:25:77:0A:7E
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4712C3FAF69F11F0A2F0EAEBDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 08:00:40 +0000
ROA not before:           Wed 21 Jan 2026 08:00:36 +0000
ROA not after:            Mon 23 Feb 2026 08:00:36 +0000
asID:                     215224
IP address blocks:        154.83.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112108 (0x1b5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 21 08:00:36 2026 GMT
            Not After : Feb 23 08:00:36 2026 GMT
        Subject: CN=697087a8-cfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:fa:3f:66:71:cf:cd:20:8d:03:40:19:c5:
                    9b:34:3a:1b:6d:2c:a2:af:b4:99:16:03:de:22:8e:
                    28:7b:8b:7c:88:13:4c:42:7b:9c:d4:a9:c8:e7:ad:
                    46:19:87:0d:60:25:8f:3b:a6:48:6f:f7:ca:f0:4c:
                    4b:c8:52:fd:d2:57:4a:58:01:a0:d7:cd:42:d3:c5:
                    92:5c:66:19:84:87:9e:34:0c:83:2f:79:8b:d5:3a:
                    80:28:9b:76:46:55:5f:e8:51:c8:d6:d5:18:96:a9:
                    e5:ac:94:79:58:47:f5:4d:71:bf:65:1f:ce:74:0e:
                    dc:72:cc:a4:f7:6f:21:98:35:9f:61:03:70:fb:4a:
                    19:3e:a6:1d:e7:29:c1:05:6e:c6:b1:d1:54:bb:56:
                    f2:9e:4c:47:c8:f0:d9:11:17:21:72:75:81:2f:b4:
                    fe:4e:6b:40:84:49:a1:5f:0f:47:79:8c:d5:1f:aa:
                    ce:fa:8f:7a:7a:27:06:7a:c2:33:ea:9d:9b:57:13:
                    98:a1:a2:19:69:5a:14:e0:b3:d8:21:e5:9b:7e:44:
                    7e:41:cb:1d:2c:6b:ba:24:65:d4:30:19:74:22:1c:
                    5e:8e:58:1a:a9:3f:b6:c0:4c:d1:f9:2c:df:cb:21:
                    2a:f5:6b:00:ac:07:4a:39:d8:39:cb:1a:7a:3f:35:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:CF:2D:FF:02:3D:48:81:4F:AF:A6:93:7C:85:19:25:77:0A:7E
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4712C3FAF69F11F0A2F0EAEBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:c5:cc:5d:fe:29:da:70:93:f0:a3:ed:27:df:9c:d2:f8:
         a5:ba:54:c4:30:c5:2b:ac:09:94:15:9c:e4:51:dc:2f:fd:25:
         b1:d9:2a:04:71:29:29:9e:2c:3f:ce:f4:37:3a:ff:9f:e7:f7:
         f2:13:ae:6d:22:9e:f3:c7:af:4b:1f:04:4c:c7:32:e9:37:9d:
         84:95:63:da:39:2e:50:fb:6f:44:58:f8:0f:24:c8:fa:5a:3a:
         52:0d:47:98:f6:c2:5e:be:66:32:c0:a0:fe:32:66:ea:8f:a4:
         d1:d2:48:32:d0:b4:5d:60:1a:dd:2d:a6:68:70:e7:6e:17:d7:
         97:3d:01:20:5d:31:e7:9d:e4:b4:10:5b:8c:8e:24:3f:ad:09:
         ad:66:88:4b:b9:4d:b2:cd:88:5f:71:77:35:c3:6f:59:52:41:
         75:2e:2c:0d:41:dd:69:46:35:6f:b5:07:08:95:0b:33:b3:31:
         bd:8e:9b:83:f8:64:6a:59:99:22:1c:df:a6:ae:0f:9f:b1:08:
         01:34:d6:f3:1f:73:60:cf:e1:91:03:01:a8:b7:1c:bb:55:ba:
         7e:39:36:5e:fc:16:91:82:f8:56:53:1d:b1:bd:25:e8:72:fd:
         71:a5:23:00:88:ec:2d:d7:ab:dc:35:f0:1f:16:7f:dc:d9:ef:
         bd:c2:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:39 2026 by rpki-client