This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64246BA6F94C11F0B4D001D8DAE4EC9C.roa
File:                     64246BA6F94C11F0B4D001D8DAE4EC9C.roa (raw, json)
Hash identifier:          izLygtFN79DN+L2m/GpbuHfus8WCc9RhAzkNjmHOBRA=
Subject key identifier:   6D:95:AA:1F:5E:0D:60:3E:26:38:84:50:F2:AB:1C:0F:B7:FF:FF:85
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B654
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64246BA6F94C11F0B4D001D8DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 17:44:54 +0000
ROA not before:           Sat 24 Jan 2026 17:44:50 +0000
ROA not after:            Mon 02 Mar 2026 17:44:50 +0000
asID:                     32043
IP address blocks:        154.95.6.0/23 maxlen: 24
                          154.95.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112212 (0x1b654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 17:44:50 2026 GMT
            Not After : Mar  2 17:44:50 2026 GMT
        Subject: CN=69750516-25d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:ad:c2:01:42:d2:cc:a5:98:fa:e9:67:93:
                    1d:30:18:80:a5:d4:b6:09:d8:94:57:31:97:61:30:
                    dd:0b:6c:59:91:86:4b:50:8d:ef:d9:a9:46:18:7e:
                    f9:01:13:1b:b3:99:a8:e2:cd:6f:1a:94:17:cc:e4:
                    fd:58:f5:16:33:d1:ac:7a:a6:24:72:6c:55:27:e6:
                    4d:1b:97:3e:45:62:6b:e1:82:0a:db:80:21:e1:59:
                    d2:eb:d3:ac:8d:52:a6:8e:de:02:a4:fb:df:91:17:
                    53:78:c7:4b:ae:c3:79:23:09:37:21:a5:18:79:b8:
                    78:1d:36:6b:17:f4:48:3f:47:e4:2a:ba:f2:f0:e9:
                    f8:b2:6b:e7:2a:2e:29:c0:bd:11:c6:09:de:74:b6:
                    96:d7:d2:6e:8d:af:03:2c:2b:2d:6a:6c:5c:74:62:
                    23:67:e9:8a:0e:fc:82:8f:70:ed:65:48:e5:02:3b:
                    46:61:81:4f:17:b8:6f:71:bf:3d:af:26:f6:82:0e:
                    56:75:ae:d5:17:ac:e0:d0:8d:5b:32:67:22:94:70:
                    49:20:3e:a0:7c:e0:a0:85:21:8a:e9:3a:3f:83:c7:
                    bb:4c:ee:04:1f:6e:8f:b5:68:b9:46:e3:6f:d2:44:
                    91:b5:30:85:5d:ef:ea:71:79:ef:90:b1:95:e1:36:
                    81:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:AA:1F:5E:0D:60:3E:26:38:84:50:F2:AB:1C:0F:B7:FF:FF:85
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64246BA6F94C11F0B4D001D8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.6.0-154.95.9.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:a5:e9:94:4d:bd:2f:73:be:22:9a:39:5d:8d:58:c1:62:
         24:a6:9c:a3:27:91:f9:2d:55:74:9e:ef:73:27:7f:0f:8c:8d:
         64:25:19:35:5f:06:9c:a7:64:af:ae:0b:29:bf:d9:4a:da:38:
         a8:f8:2d:d7:ea:d5:bb:7c:a5:bb:34:f9:f1:af:7d:e2:75:8a:
         a1:94:d6:7c:de:de:bb:13:09:8c:cf:d6:6d:37:23:49:6e:23:
         7f:ea:ac:8e:23:fc:37:c4:8a:a4:39:ac:bf:66:5f:da:fc:dc:
         19:9d:37:b9:d9:76:ed:65:7a:20:af:ad:06:b8:c7:16:fd:d5:
         0f:14:1c:e5:c4:c7:91:60:ab:60:ec:02:38:c3:52:3e:eb:56:
         6d:d3:85:07:fc:69:d4:c7:98:e0:18:f4:6f:e9:20:ff:54:27:
         d3:55:16:59:24:fb:2d:21:47:79:4f:33:db:ab:b9:b1:77:a3:
         a4:6f:77:4a:d2:d9:35:eb:ff:f5:95:4c:4b:41:59:5f:dd:b4:
         af:4d:06:46:df:8a:b0:1e:39:1c:d5:79:70:dd:0b:e5:a4:44:
         30:c3:a9:26:91:a3:99:e3:2f:4f:62:e8:34:96:7d:9e:83:60:
         5b:56:f9:2b:66:14:20:95:28:5f:3e:7e:e0:ad:20:34:31:19:
         17:1e:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:47 2026 by rpki-client