This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A6B856EBBB11F0B784DC91DAE4EC9C.roa
File:                     51A6B856EBBB11F0B784DC91DAE4EC9C.roa (raw, json)
Hash identifier:          ojrjxDGz0mIp9s+P2OM7tnvvfUvZKSVpO9Up8VQL+uQ=
Subject key identifier:   A6:FC:54:5A:56:98:E7:DE:18:52:84:42:67:1B:3C:B9:90:D8:C7:8F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B38C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A6B856EBBB11F0B784DC91DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 11:23:41 +0000
ROA not before:           Wed 07 Jan 2026 11:23:37 +0000
ROA not after:            Mon 16 Feb 2026 11:23:37 +0000
asID:                     209242
IP address blocks:        154.197.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111500 (0x1b38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 11:23:37 2026 GMT
            Not After : Feb 16 11:23:37 2026 GMT
        Subject: CN=695e423d-a61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:db:2f:a2:7c:46:c5:89:4d:2a:02:bc:a7:
                    a2:fe:f5:49:07:29:56:4a:28:ea:d5:78:7c:b6:42:
                    05:61:3c:f4:3c:ab:c7:4f:73:6b:55:24:6b:b9:f4:
                    dd:fb:8a:a3:09:86:65:54:c1:43:57:83:db:f1:5f:
                    c3:f7:7c:40:ff:5b:93:dc:a1:16:2e:67:a7:e0:ed:
                    9f:af:30:9c:54:25:0a:94:63:35:25:cc:15:86:e0:
                    cf:dd:4c:68:d0:8a:bb:5a:15:55:52:5b:f8:1c:25:
                    96:a1:c9:f7:90:3d:4b:00:0f:42:81:64:62:ab:49:
                    cd:2f:e0:e2:fd:2a:4a:18:7a:4b:c4:62:93:f8:b5:
                    24:cb:90:20:6e:ae:75:b3:22:2c:46:ba:d9:17:ba:
                    07:a3:09:78:e1:81:2d:23:c5:9e:99:a5:51:10:ed:
                    32:f7:cd:7f:a1:b3:0e:02:34:ae:3f:74:96:6a:44:
                    cc:79:9b:8c:82:17:86:a0:c3:43:3c:3b:84:8a:1a:
                    73:63:53:35:a4:dd:10:55:28:de:1d:e8:1e:5f:58:
                    93:c9:d2:75:cb:d3:ce:7d:ae:f9:46:57:10:19:8e:
                    07:c6:1b:aa:2f:b3:a4:c0:8a:3a:32:96:e8:6a:72:
                    87:b3:6c:2d:2d:05:99:6b:39:93:8e:ea:4a:3b:c6:
                    ca:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:54:5A:56:98:E7:DE:18:52:84:42:67:1B:3C:B9:90:D8:C7:8F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51A6B856EBBB11F0B784DC91DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:48:f7:5b:92:15:84:64:08:d8:00:4a:01:c9:0c:dd:dd:a1:
         75:cc:70:42:24:5a:2b:30:2f:3f:96:58:02:9c:84:b1:9d:0b:
         7a:2b:eb:4e:d8:7c:89:e4:33:c7:4d:4b:9c:5d:29:d4:86:15:
         21:7b:42:70:9c:e3:f5:53:99:ec:50:28:1e:7b:27:5e:b1:8c:
         6c:f6:ea:64:2f:b6:6b:e7:10:31:7d:8b:d6:46:d4:67:91:6e:
         c4:7c:63:4d:1d:8f:80:40:f4:91:36:77:9c:df:e7:22:ba:83:
         2d:9f:c4:58:65:fc:66:d1:2d:3c:81:4b:fa:43:40:46:eb:9a:
         d9:77:3c:8e:db:dc:44:01:0e:64:dc:d1:a8:a2:dd:84:2b:31:
         8b:37:81:31:48:0e:8a:8c:86:29:d4:59:98:23:be:92:08:47:
         71:d1:01:66:00:e4:af:3c:df:b7:83:a9:63:84:0c:04:52:33:
         55:b7:98:a5:d8:3c:85:8a:78:96:46:18:3e:bb:bb:dd:04:20:
         33:33:7d:b8:3c:cb:4a:62:43:79:e1:36:db:cb:19:a4:34:f2:
         6a:a5:30:18:9b:bf:ef:83:84:53:af:d4:51:62:1a:ae:1a:de:
         3b:9e:a1:d3:9c:7a:46:00:67:52:2d:80:93:20:c3:15:56:3e:
         49:63:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:53 2026 by rpki-client