This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65559D98F5DB11F0815224B4DAE4EC9C.roa
File:                     65559D98F5DB11F0815224B4DAE4EC9C.roa (raw, json)
Hash identifier:          9aPrjidNAKnGANcu9YtcpNuT28odSPf94pmy+r7N4F8=
Subject key identifier:   44:9D:5A:12:92:14:A9:6D:CD:FE:A8:C4:32:54:C6:9E:D0:2C:9A:5F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B59A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65559D98F5DB11F0815224B4DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:38:30 +0000
ROA not before:           Tue 20 Jan 2026 08:38:25 +0000
ROA not after:            Tue 24 Feb 2026 08:38:25 +0000
asID:                     138915
IP address blocks:        154.94.66.0/23 maxlen: 24
                          154.94.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112026 (0x1b59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 08:38:25 2026 GMT
            Not After : Feb 24 08:38:25 2026 GMT
        Subject: CN=696f3f06-301b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:6e:a9:ae:b3:f9:8b:76:93:16:4b:e6:86:
                    66:a0:c7:f4:13:4e:2a:be:95:d7:92:67:00:8b:4c:
                    89:d8:9d:05:8a:23:79:47:7e:65:c5:6d:06:6c:2d:
                    44:8b:83:9a:d4:63:e8:6a:3f:18:39:27:c7:fb:5c:
                    f3:62:48:76:5d:8c:30:d0:a4:20:73:cb:2b:7c:64:
                    3b:57:49:6f:46:f1:61:0f:ac:b7:8b:ce:5b:4f:07:
                    fe:df:0b:09:50:b2:39:5c:ab:41:ca:4c:0e:21:03:
                    ca:71:2f:5c:a7:91:e1:93:96:7f:0e:ce:1f:48:e4:
                    f9:6a:cc:9f:03:1a:c7:d0:d7:2c:cc:1d:09:c0:70:
                    a1:80:3e:a8:3c:46:60:e9:8f:96:b5:ab:cd:38:8f:
                    e8:cf:97:04:aa:aa:40:01:83:35:35:dd:2a:3b:b9:
                    b3:e5:22:20:12:bd:e4:dc:cb:d1:94:57:7f:5e:56:
                    41:14:87:22:17:f9:32:26:36:11:46:6e:8e:ce:6e:
                    98:cc:12:92:d4:fd:98:ae:dc:4d:e7:f1:2c:2e:61:
                    de:9c:75:d1:3c:3a:ed:63:82:ed:5f:03:1b:c0:bb:
                    17:bf:cb:09:bc:16:42:da:11:91:6a:75:3c:a5:d9:
                    e3:89:a0:8e:1d:4e:df:cd:21:e9:89:74:0a:27:2d:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:5A:12:92:14:A9:6D:CD:FE:A8:C4:32:54:C6:9E:D0:2C:9A:5F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65559D98F5DB11F0815224B4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.66.0/23
                  154.94.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:c1:07:f8:cc:6a:93:16:58:c1:8e:24:87:b6:11:f7:6e:
         e3:39:9b:60:d4:7a:c7:5a:a0:bc:a0:72:4a:8c:80:f2:45:3c:
         85:21:e4:38:c4:ca:a2:1e:db:62:df:18:24:99:1d:07:49:4a:
         b4:8c:35:75:b9:44:64:7f:b7:f2:df:45:a0:66:9f:75:c7:ae:
         fd:f9:26:bd:a3:ca:bd:b1:3c:13:a4:9c:95:7d:71:ce:ea:36:
         d3:23:ee:50:dd:1c:d9:ca:ca:5e:77:f7:0f:67:da:68:97:58:
         b8:fb:8e:58:9c:21:7f:45:a2:f1:d4:dc:f4:61:f3:6e:2f:b0:
         7d:6f:81:b1:c2:45:7d:15:32:1b:ee:0c:fe:aa:9b:22:a6:60:
         40:f4:5a:78:d1:1d:85:b2:22:b8:12:b1:7e:44:fe:68:7e:a8:
         e0:79:c0:dd:78:f6:cf:65:9a:36:34:ed:75:c2:a3:47:6d:c0:
         1b:d0:73:4f:42:28:4e:e9:c2:9c:77:10:76:af:6c:99:47:c4:
         41:8c:a8:0c:27:9b:53:eb:82:56:fc:ce:80:ed:83:37:9a:75:
         8e:34:0d:f9:3e:4b:6c:61:eb:77:2c:a0:6f:9f:d6:3a:55:e8:
         62:72:79:33:ef:01:de:7a:6c:54:c7:b4:f7:c1:79:61:11:d7:
         b8:6c:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:22 2026 by rpki-client