This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B853F4EF0A911F082A76CDDDAE4EC9C.roa
File:                     5B853F4EF0A911F082A76CDDDAE4EC9C.roa (raw, json)
Hash identifier:          O7v6unFyhX42Oqyl4RXC423NEjmRHaEy1Egah5fAeOw=
Subject key identifier:   E4:AA:3B:5F:E1:D7:1F:C6:7A:B0:2A:55:0C:18:26:D7:3F:D9:FC:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B484
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B853F4EF0A911F082A76CDDDAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 17:57:43 +0000
ROA not before:           Tue 13 Jan 2026 17:57:36 +0000
ROA not after:            Wed 18 Feb 2026 17:57:36 +0000
asID:                     395886
IP address blocks:        154.200.128.0/24 maxlen: 24
                          154.200.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111748 (0x1b484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 17:57:36 2026 GMT
            Not After : Feb 18 17:57:36 2026 GMT
        Subject: CN=69668797-d3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:9b:aa:9d:74:84:a7:8b:e7:c5:e5:4f:0d:
                    51:20:11:3a:e4:be:a0:05:3d:f8:e3:d2:45:38:bf:
                    e0:35:7b:29:05:af:fe:8e:02:d6:ab:bd:e4:00:8d:
                    d0:d9:02:08:33:b1:a8:90:03:10:e9:3d:8a:0c:9d:
                    d2:aa:dd:9d:89:37:96:99:94:81:ef:b5:f5:f3:b2:
                    55:14:d4:59:26:aa:45:8c:c9:22:8b:e2:fa:8e:67:
                    23:19:84:44:33:be:a8:95:73:70:53:0e:d5:e7:25:
                    ab:b5:3a:bf:d4:50:d4:dd:4d:46:ab:bc:aa:eb:cd:
                    51:77:09:a8:38:96:a2:a1:94:a1:a9:c3:ff:ed:d4:
                    06:09:ca:6d:16:7b:8d:57:2c:46:26:94:61:be:33:
                    69:e5:52:3e:e3:ef:09:c5:ee:45:aa:8f:ff:a9:70:
                    4c:6d:9e:86:25:3a:06:d0:25:38:14:38:b6:d0:cf:
                    16:b8:81:3d:a9:97:ac:66:4b:83:6a:eb:e5:73:a2:
                    aa:fd:75:60:54:71:54:35:6f:23:b2:a7:da:12:94:
                    08:8d:54:2d:26:62:47:3f:a7:c9:80:8c:94:f4:c8:
                    38:81:7d:f6:17:8d:63:ce:12:c8:e1:4c:f8:ce:e8:
                    53:3c:e1:bb:c8:38:a9:4b:d6:e9:87:f1:8a:fd:fe:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AA:3B:5F:E1:D7:1F:C6:7A:B0:2A:55:0C:18:26:D7:3F:D9:FC:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B853F4EF0A911F082A76CDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.128.0/24
                  154.200.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:62:93:e7:cd:60:f6:b0:d7:d9:f2:ee:2e:6f:a3:e1:2b:7e:
         3f:b0:f8:a6:19:93:e9:ec:f7:9e:5e:59:ff:f5:79:f5:5e:79:
         73:cc:d1:60:e2:e1:8c:e0:5e:0d:a6:52:ed:89:a7:40:e0:91:
         2c:d9:40:23:1a:9e:ff:06:09:f5:83:c0:62:c5:ee:b0:c7:fa:
         1b:5c:84:e2:c5:df:91:ad:7e:a2:fb:59:f8:97:aa:cb:98:fa:
         1c:0b:6e:03:76:a3:48:4c:60:00:e6:af:75:e0:31:09:e0:0c:
         0f:63:87:d4:11:b6:ce:ed:59:51:12:69:08:d6:8f:77:10:65:
         d8:cf:a7:28:7c:4a:8e:b7:7a:d5:ba:52:ba:1a:02:8c:7e:ae:
         a4:72:f4:44:d3:ae:cc:cb:3d:d5:21:ff:bc:58:c3:fe:ae:08:
         09:88:c4:9e:31:00:79:1b:e4:f7:de:05:de:10:25:3b:bb:28:
         18:5d:32:b5:6d:2e:a2:17:0d:75:80:c4:5e:e4:d7:31:9a:0b:
         17:90:3f:7e:fe:eb:cc:40:50:0b:f2:cb:7c:61:09:db:94:b8:
         2d:11:e6:8c:ed:c4:c5:12:3d:c4:ac:53:0f:4f:2d:33:97:a3:
         32:33:a6:97:f0:ce:a5:c1:d4:45:e2:f0:a4:c3:ad:05:8c:cd:
         b9:62:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:27 2026 by rpki-client