This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D25DDCF95F11F0AB88C1CADAE4EC9C.roa
File:                     57D25DDCF95F11F0AB88C1CADAE4EC9C.roa (raw, json)
Hash identifier:          VwwXW59fU6RUzmizwflzyYkUyxTnM69DUwf/ziF7/b4=
Subject key identifier:   2E:33:FF:60:FD:5C:87:E3:C5:03:09:D0:2F:3D:DD:16:33:95:47:91
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B692
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D25DDCF95F11F0AB88C1CADAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:00:35 +0000
ROA not before:           Sat 24 Jan 2026 20:00:29 +0000
ROA not after:            Tue 03 Mar 2026 20:00:29 +0000
asID:                     62240
IP address blocks:        154.194.79.0/24 maxlen: 24
                          154.196.55.0/24 maxlen: 24
                          154.196.56.0/24 maxlen: 24
                          154.196.57.0/24 maxlen: 24
                          154.196.58.0/24 maxlen: 24
                          154.196.59.0/24 maxlen: 24
                          154.196.60.0/24 maxlen: 24
                          154.196.61.0/24 maxlen: 24
                          154.196.62.0/24 maxlen: 24
                          154.196.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112274 (0x1b692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 20:00:29 2026 GMT
            Not After : Mar  3 20:00:29 2026 GMT
        Subject: CN=697524e3-8a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:1a:da:63:32:a4:0a:45:e1:29:d3:f9:87:
                    7b:d6:72:76:44:b6:ce:62:52:b9:9f:30:ed:0b:fd:
                    ba:0b:fd:ed:3b:d9:f0:1d:9e:73:30:1f:6e:07:f5:
                    7b:a0:0e:72:8f:ea:9b:21:5e:0c:91:97:75:49:32:
                    2b:fd:4d:da:ce:7e:62:5a:e2:c8:9d:b2:d1:5a:f5:
                    ec:da:c6:98:d5:cb:ff:91:1e:65:32:27:ec:6e:08:
                    64:3f:44:b6:12:70:4f:fb:72:75:c0:cc:7a:99:a7:
                    e6:a6:5c:73:4c:41:4f:26:95:c1:2e:58:4d:4d:dc:
                    fc:96:e2:6f:96:94:63:b9:48:a4:76:78:65:a1:01:
                    58:4e:21:fe:38:91:92:66:01:30:46:77:2c:2f:15:
                    48:11:74:cc:b0:8d:c8:80:fc:97:ad:e2:c2:49:f8:
                    80:bb:45:ba:9f:56:06:ad:97:3c:a0:09:7b:41:73:
                    16:4d:a2:1b:bc:0b:f5:83:dc:fa:cc:b1:c8:6c:3e:
                    e4:29:7b:16:50:2d:46:2a:74:78:20:39:25:a6:5e:
                    a0:97:d6:5b:0f:b5:81:75:f2:e4:c0:6a:6f:e8:bc:
                    55:c0:0c:f8:ba:43:f9:f3:bc:8c:40:bd:43:15:5f:
                    a0:6a:17:6a:a3:e3:69:27:a2:29:b9:91:7b:ee:74:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:33:FF:60:FD:5C:87:E3:C5:03:09:D0:2F:3D:DD:16:33:95:47:91
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D25DDCF95F11F0AB88C1CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.79.0/24
                  154.196.55.0-154.196.62.255
                  154.196.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:82:ce:86:04:2b:a6:74:df:39:ce:d1:db:64:22:dc:6c:b7:
         17:77:4f:76:3f:50:bd:21:09:8d:80:f5:48:d1:4f:ae:fd:17:
         c7:8d:28:0c:67:c5:aa:28:d2:81:e6:fb:24:5c:8b:a9:d7:e9:
         c4:19:f2:9b:bb:0d:06:5f:c2:b0:4e:61:f0:bd:90:ed:56:57:
         5c:cc:7e:97:4f:d6:80:d4:db:bd:4b:35:45:60:70:b8:66:26:
         86:2e:ea:6b:62:37:7e:84:35:a8:2b:92:e2:cd:3c:a9:73:bb:
         7e:4e:3b:89:c4:bf:97:d8:b9:01:20:f6:94:ce:3c:f3:d0:99:
         c3:c3:8f:63:65:c1:10:eb:84:39:9d:63:26:90:65:37:0c:b4:
         86:53:3f:9c:17:f3:9c:ed:d3:e1:bf:e6:7d:3c:e6:61:77:6c:
         6d:45:13:88:51:4c:49:5c:63:95:6e:3f:c8:b7:04:7a:9b:f4:
         d4:91:66:9c:6e:cb:4a:7a:89:63:b4:5b:ac:14:69:ae:c2:b9:
         0b:42:69:3b:1d:5d:58:cc:6d:1e:03:33:4a:58:2c:f7:b0:f4:
         cd:2d:a7:e4:da:b4:6f:09:55:ee:6d:e6:f4:cc:d9:c6:a4:79:
         47:f0:10:63:ec:55:e5:a4:0c:f4:f0:38:63:25:a2:01:b2:80:
         6c:e9:9c:b9
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbaSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI0MjAwMDI5WhcNMjYwMzAzMjAwMDI5WjAYMRYw
FAYDVQQDEw02OTc1MjRlMy04YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs8ga2mMypApF4SnT+Yd71nJ2RLbOYlK5nzDtC/26C/3tO9nwHZ5zMB9u
B/V7oA5yj+qbIV4MkZd1STIr/U3azn5iWuLInbLRWvXs2saY1cv/kR5lMifsbghk
P0S2EnBP+3J1wMx6mafmplxzTEFPJpXBLlhNTdz8luJvlpRjuUikdnhloQFYTiH+
OJGSZgEwRncsLxVIEXTMsI3IgPyXreLCSfiAu0W6n1YGrZc8oAl7QXMWTaIbvAv1
g9z6zLHIbD7kKXsWUC1GKnR4IDklpl6gl9ZbD7WBdfLkwGpv6LxVwAz4ukP587yM
QL1DFV+gahdqo+NpJ6IpuZF77nSAjQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFC4z
/2D9XIfjxQMJ0C893RYzlUeRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0QyNUREQ0Y5NUYxMUYwQUI4OEMxQ0FEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmsJPMAwDBACaxDcDBACa
xD4DBACaxEAwDQYJKoZIhvcNAQELBQADggEBAE+CzoYEK6Z03znO0dtkItxstxd3
T3Y/UL0hCY2A9UjRT679F8eNKAxnxaoo0oHm+yRci6nX6cQZ8pu7DQZfwrBOYfC9
kO1WV1zMfpdP1oDU271LNUVgcLhmJoYu6mtiN36ENagrkuLNPKlzu35OO4nEv5fY
uQEg9pTOPPPQmcPDj2NlwRDrhDmdYyaQZTcMtIZTP5wX85zt0+G/5n085mF3bG1F
E4hRTElcY5VuP8i3BHqb9NSRZpxuy0p6iWO0W6wUaa7CuQtCaTsdXVjMbR4DM0pY
LPew9M0tp+TatG8JVe5t5vTM2cakeUfwEGPsVeWkDPTwOGMlogGygGzpnLk=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:32 2026 by rpki-client