This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6370CF3EE70811F0BAD8EEA7DAE4EC9C.roa
File:                     6370CF3EE70811F0BAD8EEA7DAE4EC9C.roa (raw, json)
Hash identifier:          6BcJZmXdjiYmWVO0LffjdLjuE7ykoSOLLKXBS85wlPo=
Subject key identifier:   B4:07:D0:9C:E5:57:F4:9E:70:AF:21:7F:E4:6E:F4:9E:80:AE:DA:CC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B29A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6370CF3EE70811F0BAD8EEA7DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 11:52:46 +0000
ROA not before:           Thu 01 Jan 2026 11:52:42 +0000
ROA not after:            Wed 08 Apr 2026 11:52:42 +0000
asID:                     399077
IP address blocks:        154.82.64.0/18 maxlen: 24
                          154.82.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111258 (0x1b29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 11:52:42 2026 GMT
            Not After : Apr  8 11:52:42 2026 GMT
        Subject: CN=6956600e-35f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:7b:29:3c:40:36:aa:56:7f:4c:5a:ae:4e:
                    17:00:e7:fa:bd:93:e6:df:85:6a:77:73:ae:ab:49:
                    c1:b3:c5:6c:50:37:b0:2b:62:6a:ac:1e:62:18:91:
                    e1:94:dc:84:c4:ce:7a:8c:7b:88:51:2a:70:10:fd:
                    61:69:0b:c5:2e:86:ac:dd:a3:e6:23:c7:7d:f5:b6:
                    80:4a:ef:83:1e:de:c0:4c:00:bb:92:dc:87:cd:a8:
                    68:08:5a:3a:d8:03:bc:ba:77:1e:d3:82:d9:8b:cd:
                    33:af:08:c8:ac:f1:66:c4:02:41:14:f4:49:30:ad:
                    95:68:fa:9c:7a:5a:e2:b9:61:84:d5:8e:32:de:ed:
                    d7:e8:60:e5:a0:fd:d2:6c:f2:c4:62:2c:89:c1:4a:
                    8a:5c:80:f9:80:f7:bb:28:1c:b5:ae:0a:ae:f1:c8:
                    19:28:f9:7f:7c:5c:91:e9:cf:5d:6e:e1:eb:80:fa:
                    d3:01:ea:02:f1:0f:f9:03:4b:fc:24:7f:02:50:55:
                    8f:1a:60:e0:5c:6f:5a:ea:59:f4:4f:c3:e4:59:0b:
                    c8:4f:3d:0f:93:3a:47:89:4f:84:a5:9d:a7:32:8d:
                    cc:47:10:99:41:5a:fb:d7:58:7b:1c:16:44:0c:5f:
                    81:a1:e6:13:3a:63:17:8f:d6:bb:07:b2:c7:01:73:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:D0:9C:E5:57:F4:9E:70:AF:21:7F:E4:6E:F4:9E:80:AE:DA:CC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6370CF3EE70811F0BAD8EEA7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:43:b7:a0:f2:3b:33:91:b4:b5:e2:c3:57:ea:15:58:22:09:
         3c:b1:c7:f1:52:b5:52:05:36:a4:a3:47:46:9e:83:78:e8:dc:
         c3:56:86:6b:6f:8b:d5:a1:e1:00:9f:ce:fd:d6:5a:18:e5:19:
         a0:be:21:6b:a8:a2:a2:e5:af:48:16:83:57:a8:aa:96:c1:25:
         c5:04:f6:50:c2:85:3b:9d:c4:29:8d:65:e6:c9:2f:5e:d8:94:
         ff:31:df:c2:ce:81:c8:34:fb:6c:70:62:0c:b9:f8:38:1e:91:
         cf:85:78:ad:98:3a:c1:bf:ee:79:96:da:14:01:5b:5f:50:ac:
         15:a0:3c:16:e3:dd:79:b5:88:2b:79:57:a8:c9:e9:45:7b:ba:
         db:c2:d5:7f:27:54:ea:7b:1b:66:a7:11:3f:aa:ec:51:1a:7f:
         4e:af:6a:f4:8f:eb:96:46:80:de:e8:5c:38:99:00:ae:2f:e3:
         06:8c:de:d0:a6:fe:05:64:dd:08:82:fb:d6:f7:98:45:0a:9c:
         1e:e1:fd:3a:61:43:d8:fc:5b:49:44:11:e4:24:1f:20:3d:f4:
         06:da:5f:fa:7f:a5:7c:b3:b6:9b:a9:cb:13:38:d9:3e:25:3b:
         a0:7d:d5:71:47:95:4c:92:f9:69:36:04:0f:03:f8:9b:a2:54:
         98:3b:16:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbKaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTAxMTE1MjQyWhcNMjYwNDA4MTE1MjQyWjAYMRYw
FAYDVQQDEw02OTU2NjAwZS0zNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6AV7KTxANqpWf0xark4XAOf6vZPm34Vqd3Ouq0nBs8VsUDewK2JqrB5i
GJHhlNyExM56jHuIUSpwEP1haQvFLoas3aPmI8d99baASu+DHt7ATAC7ktyHzaho
CFo62AO8unce04LZi80zrwjIrPFmxAJBFPRJMK2VaPqcelriuWGE1Y4y3u3X6GDl
oP3SbPLEYiyJwUqKXID5gPe7KBy1rgqu8cgZKPl/fFyR6c9dbuHrgPrTAeoC8Q/5
A0v8JH8CUFWPGmDgXG9a6ln0T8PkWQvITz0PkzpHiU+EpZ2nMo3MRxCZQVr711h7
HBZEDF+BoeYTOmMXj9a7B7LHAXPpmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLQH
0JzlV/SecK8hf+Ru9J6ArtrMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MzcwQ0YzRUU3MDgxMUYwQkFEOEVFQTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmlJAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhQ7eg8jszkbS14sNX6hVYIgk8scfxUrVSBTako0dGnoN46NzDVoZr
b4vVoeEAn8791loY5RmgviFrqKKi5a9IFoNXqKqWwSXFBPZQwoU7ncQpjWXmyS9e
2JT/Md/CzoHINPtscGIMufg4HpHPhXitmDrBv+55ltoUAVtfUKwVoDwW4915tYgr
eVeoyelFe7rbwtV/J1TqextmpxE/quxRGn9Or2r0j+uWRoDe6Fw4mQCuL+MGjN7Q
pv4FZN0IgvvW95hFCpwe4f06YUPY/FtJRBHkJB8gPfQG2l/6f6V8s7abqcsTONk+
JTugfdVxR5VMkvlpNgQPA/ibolSYOxZr
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:23 2026 by rpki-client