This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603D78ACF83911F09FE209C7DAE4EC9C.roa
File:                     603D78ACF83911F09FE209C7DAE4EC9C.roa (raw, json)
Hash identifier:          KB9ihiunzmgJj9UR5xKT/OJjAoRTq1ytokV9uVq78DY=
Subject key identifier:   36:17:31:53:4A:C4:18:10:6F:18:F5:91:7E:05:38:85:F0:EE:73:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B619
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603D78ACF83911F09FE209C7DAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:56:16 +0000
ROA not before:           Fri 23 Jan 2026 08:56:12 +0000
ROA not after:            Sun 22 Feb 2026 08:56:12 +0000
asID:                     134365
IP address blocks:        154.194.248.0/21 maxlen: 24
                          154.194.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112153 (0x1b619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 08:56:12 2026 GMT
            Not After : Feb 22 08:56:12 2026 GMT
        Subject: CN=697337b0-29d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:97:1f:36:1d:8d:95:9b:83:ee:2f:15:36:
                    74:fa:28:f5:d7:1d:a5:72:eb:52:88:73:e2:43:5c:
                    b3:f1:e4:ba:e9:70:76:a9:1d:3a:0b:ed:da:1b:d5:
                    7a:cb:58:53:36:f5:f6:86:32:42:b2:c3:4b:ce:da:
                    ae:97:97:f4:ab:ca:85:aa:99:7a:90:d8:8b:2b:a0:
                    da:5a:af:bb:f2:0c:07:ec:0d:fc:5f:18:dc:d5:c8:
                    8e:8a:ff:7a:28:23:3e:47:ec:a4:ee:e8:aa:92:04:
                    00:3c:1d:ff:df:92:27:15:d6:2c:4b:b6:6b:7c:75:
                    ad:74:17:d0:b0:69:a3:f8:ab:04:f7:a8:03:ca:1a:
                    5e:1f:5d:36:f6:8c:37:f8:f2:9d:a0:a2:26:7a:07:
                    62:c1:31:e8:aa:0f:36:b7:af:94:82:b7:27:ae:40:
                    00:ab:6c:1c:38:52:96:d1:7f:5b:b2:e7:dd:b5:58:
                    7c:ac:7f:73:a9:a6:2c:59:ac:d3:c2:9e:2d:92:4e:
                    77:44:60:82:2d:f2:26:e1:14:c8:09:4e:7c:4a:4c:
                    15:82:f3:a1:75:71:5a:96:a5:01:47:02:7e:15:8c:
                    da:27:ad:e0:85:71:ea:da:fa:13:22:1d:b4:fa:1e:
                    84:d1:bb:ad:42:df:6f:ee:61:87:1f:4b:7e:e1:61:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:31:53:4A:C4:18:10:6F:18:F5:91:7E:05:38:85:F0:EE:73:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/603D78ACF83911F09FE209C7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:e2:62:8c:f9:12:dd:4c:3c:5a:1f:d6:ce:d2:1b:ec:c8:7f:
         0d:92:28:fa:93:52:df:9e:bd:47:64:81:61:2d:fc:5a:54:52:
         06:e0:2f:a5:a4:59:b2:8e:ef:94:2b:09:b2:22:47:a8:77:48:
         58:67:a3:59:24:c1:5a:c8:7e:3c:01:13:8b:55:67:0f:62:27:
         93:fb:bc:c1:ab:57:25:5e:4a:ed:ea:69:a0:45:65:af:7e:a9:
         8b:7c:da:06:b6:c6:39:83:c6:87:75:72:4d:f9:85:19:31:f8:
         05:9b:c8:56:50:e4:ed:68:e0:6a:92:d7:85:91:df:2d:2d:87:
         f0:5a:ae:f2:37:a0:24:0e:23:27:24:6c:41:26:0b:22:a3:c0:
         98:36:4e:33:af:e0:b4:7d:a8:11:7c:38:5c:d7:a4:1c:f2:0a:
         47:10:e3:84:c8:96:aa:7f:a8:4d:1c:9e:71:ea:e5:f6:87:74:
         b6:65:1a:ff:91:b6:ee:1a:dd:33:b5:03:95:73:65:fc:fa:5d:
         8a:cd:d5:b0:78:64:ae:7e:15:2c:85:76:8c:fa:78:ae:33:fc:
         56:0b:81:d2:16:8b:c2:0b:88:a1:e6:4e:22:33:c0:32:ac:5e:
         e3:9b:8f:6b:a6:36:2d:5c:00:7c:06:99:61:ea:02:cb:dd:d7:
         98:60:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:49 2026 by rpki-client