This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D37A152F5EE11F0ADD137A8DAE4EC9C.roa
File:                     5D37A152F5EE11F0ADD137A8DAE4EC9C.roa (raw, json)
Hash identifier:          /ZsfaiLfB3dHi99IelvuhaHjh56ppRQcNEfPLfEjXBo=
Subject key identifier:   ED:7D:FD:4C:F0:95:3B:66:46:30:26:EE:69:D7:7D:B0:79:C1:A0:F1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D37A152F5EE11F0ADD137A8DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 10:54:17 +0000
ROA not before:           Tue 20 Jan 2026 10:54:12 +0000
ROA not after:            Fri 30 Jan 2026 10:54:12 +0000
asID:                     54801
IP address blocks:        154.213.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112077 (0x1b5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 10:54:12 2026 GMT
            Not After : Jan 30 10:54:12 2026 GMT
        Subject: CN=696f5ed9-4425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:1b:ad:48:e8:75:0b:68:7f:e8:c2:0c:c2:
                    18:eb:76:ae:74:dd:f0:db:b8:85:cb:9f:9d:37:f1:
                    31:bd:67:6b:7c:91:69:f3:b8:14:19:44:d5:d4:e4:
                    cd:43:f1:a2:e1:5f:ee:ef:75:fa:a9:1a:cc:63:7e:
                    ac:20:58:e0:2e:47:38:9e:c4:3a:38:ab:4b:c2:6b:
                    a6:c0:19:84:b3:9c:cd:a0:60:17:60:75:b3:5c:60:
                    4b:a2:65:d7:ab:60:dc:97:1a:1d:dc:95:0d:04:6d:
                    66:6e:b6:23:b1:2b:50:8d:6e:48:60:96:c1:25:91:
                    68:63:cc:2d:aa:d1:d3:ad:63:7f:be:3a:05:7f:ee:
                    f1:ea:01:69:62:02:ba:44:9a:c4:c2:ed:a0:9a:72:
                    84:03:dd:2b:b9:52:27:a0:6a:b1:f6:3f:e1:93:cd:
                    7a:53:15:bf:ea:22:a6:dd:e2:5f:a8:88:e1:26:fa:
                    73:e6:dd:52:fc:0d:53:f0:ba:09:8f:4e:a2:cc:8b:
                    7d:11:33:67:c5:02:1a:d2:37:22:bf:76:33:63:c3:
                    a9:e5:72:60:61:a8:34:c4:64:71:06:72:92:e9:dc:
                    30:ea:3b:65:67:4f:0c:17:67:45:ce:4b:e8:b8:99:
                    95:26:ed:38:8d:10:53:76:17:f9:f5:80:e9:9c:89:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:FD:4C:F0:95:3B:66:46:30:26:EE:69:D7:7D:B0:79:C1:A0:F1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D37A152F5EE11F0ADD137A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:09:d6:57:9d:82:52:d7:e4:12:90:b8:65:e5:22:b5:9e:
         04:05:c6:c3:fa:98:aa:68:f9:86:47:ff:dd:d7:55:bf:a3:a9:
         cc:ab:9c:b7:31:3f:03:81:5b:b9:0e:0b:02:24:98:33:c2:85:
         21:fe:d5:f8:8e:0c:78:32:f1:99:c4:1e:17:e9:95:4e:37:6f:
         88:00:07:a4:c7:b0:97:ac:77:0b:1e:90:c0:36:89:10:bc:63:
         88:8d:f8:79:9d:1a:d0:a2:ab:21:8e:38:14:2a:9a:31:0a:fe:
         89:96:c7:4f:48:6f:82:24:29:b5:08:cd:92:31:56:61:c1:b3:
         21:21:4d:be:4e:b8:d1:b6:e3:f3:60:3d:80:5b:e9:4a:60:bb:
         84:6e:5c:33:d4:4c:25:c7:b1:8a:47:dd:1a:6d:0d:3f:44:bb:
         9f:32:a2:2c:96:75:39:a3:be:af:52:60:9b:4d:ed:a1:cc:42:
         20:11:0f:3a:ed:f5:3a:72:2f:35:dd:ad:63:71:1f:d9:c1:2c:
         bc:51:cc:dc:db:b1:fa:af:4f:38:f7:c6:74:3f:5d:a3:8e:e9:
         8b:fe:5b:1d:7b:f6:a9:cf:c1:01:e5:ff:f3:51:bb:e8:9c:0c:
         1c:f1:f4:28:29:11:a1:0d:c3:9b:69:1b:3e:9d:e3:57:a8:77:
         af:8c:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:13 2026 by rpki-client