This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D92AC9EE56011F0A9E72AF4DAE4EC9C.roa
File:                     5D92AC9EE56011F0A9E72AF4DAE4EC9C.roa (raw, json)
Hash identifier:          O5NgmKbh9F3xjFaOmMhnlmuRNlcbDjd06o8yqUw42I8=
Subject key identifier:   06:E0:80:DC:89:51:DC:A2:EA:C0:88:BB:CE:C5:57:D9:76:E7:8B:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D92AC9EE56011F0A9E72AF4DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:17:30 +0000
ROA not before:           Tue 30 Dec 2025 09:17:25 +0000
ROA not after:            Fri 30 Jan 2026 09:17:25 +0000
asID:                     401701
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111060 (0x1b1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:17:25 2025 GMT
            Not After : Jan 30 09:17:25 2026 GMT
        Subject: CN=695398aa-4618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:a6:13:f3:c5:54:d8:7f:b1:2f:fb:66:e7:
                    3b:35:27:c5:05:6d:07:d2:ed:a1:35:62:05:bb:2e:
                    93:0b:57:df:ae:ff:44:7b:4c:ef:73:28:4d:f5:c9:
                    23:ab:e1:c9:ed:08:df:77:ed:b5:d8:e2:d4:56:27:
                    8c:7c:0c:1d:de:d5:01:c9:3e:74:a8:84:25:58:47:
                    28:f4:fc:90:8b:01:74:48:be:ba:1f:c4:75:cd:a8:
                    b1:4e:d7:25:1d:f2:92:20:21:f7:ed:cb:d5:b0:7a:
                    3f:4b:7a:2a:58:30:35:22:c5:3b:5d:94:57:95:3e:
                    b3:82:6c:a1:7b:e4:78:12:d9:d3:a2:9f:32:d1:34:
                    84:7e:db:5e:98:95:74:52:14:61:b6:cd:3a:4b:26:
                    9f:33:9c:0b:c6:f5:dc:1d:1e:e4:fb:79:18:b6:f2:
                    7d:df:66:96:9b:85:5a:e2:f6:40:16:95:96:49:fb:
                    62:b1:e8:eb:95:af:db:bb:91:64:e0:e1:62:53:6d:
                    cc:05:cc:74:c2:f6:dd:d4:a8:dd:83:a5:0e:98:aa:
                    ae:d1:71:d5:bc:b1:ea:27:37:4c:42:f1:a5:5c:26:
                    c2:53:bf:73:7f:fb:14:ad:9e:aa:13:96:e8:b3:5c:
                    ab:4b:5e:65:73:9e:dd:bb:af:88:d2:c1:2a:25:ca:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E0:80:DC:89:51:DC:A2:EA:C0:88:BB:CE:C5:57:D9:76:E7:8B:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D92AC9EE56011F0A9E72AF4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:18:97:04:1f:6f:a8:ae:09:62:1d:19:56:49:12:26:8a:89:
         c4:62:9e:2a:66:b4:3a:7f:44:cd:66:df:fd:e3:b8:1e:6e:25:
         7c:66:4d:92:c9:5f:ff:fd:aa:02:69:d5:c6:3b:b0:6d:f7:aa:
         1a:c7:1e:20:84:0b:f2:2f:89:a5:0b:bf:93:1f:1b:cf:4e:67:
         b8:7d:04:11:e7:79:13:ac:d7:a9:ec:b4:78:b0:31:6d:25:e6:
         22:21:98:92:d5:ea:8f:d0:82:ae:cf:f0:1c:00:f9:67:a8:63:
         a1:a1:c1:18:0b:e3:a7:65:76:ab:87:fe:65:17:2c:9f:6a:de:
         9c:ef:ba:b6:0f:22:3e:b9:94:65:85:e1:62:d6:17:1b:c2:c5:
         64:4e:6d:c8:b9:89:9c:2f:62:e0:cb:37:d0:32:4b:28:ef:bb:
         a1:27:67:35:da:b3:ee:f7:8b:8f:4a:91:92:77:d6:b5:98:79:
         9c:b8:cc:10:60:8a:b5:6d:21:6e:73:f4:a4:6f:ed:22:30:c1:
         19:69:dc:52:7f:14:e2:1b:32:a3:ed:c8:fd:f5:32:fe:3d:94:
         aa:bf:06:2d:5c:f6:55:49:fc:44:82:44:e8:44:c4:cf:f6:d3:
         19:7c:57:15:71:86:43:6f:01:79:76:a2:f2:83:e0:57:45:80:
         24:bc:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:48 2026 by rpki-client