This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A281EAF84A11F0A046CDACDAE4EC9C.roa
File:                     70A281EAF84A11F0A046CDACDAE4EC9C.roa (raw, json)
Hash identifier:          WWmdPLbq6gEuNyCuiS1gk2JSAx8VAf1L9xj5wA4RpYg=
Subject key identifier:   0C:3B:8C:4D:70:4A:4A:DA:53:5C:DB:13:6C:52:BC:9C:31:29:15:53
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B61B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A281EAF84A11F0A046CDACDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 10:58:25 +0000
ROA not before:           Fri 23 Jan 2026 10:58:21 +0000
ROA not after:            Tue 03 Mar 2026 10:58:21 +0000
asID:                     14618
IP address blocks:        154.197.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112155 (0x1b61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 10:58:21 2026 GMT
            Not After : Mar  3 10:58:21 2026 GMT
        Subject: CN=69735451-ea21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:b7:57:0b:84:fe:2c:29:a7:70:1b:23:03:
                    73:26:3a:44:24:a1:e6:13:d6:15:6e:4e:d3:f4:b7:
                    29:e7:b6:a2:93:df:53:cf:61:f7:f5:72:db:93:de:
                    16:ab:52:01:ca:a5:66:fb:3a:fc:96:98:e1:b7:af:
                    8a:89:ea:db:cb:7e:fa:25:13:ae:f6:2e:5d:b5:f0:
                    72:32:3a:00:bb:40:65:27:d4:86:0c:12:45:f2:e0:
                    28:da:84:62:6c:1c:dd:f1:21:83:75:10:9f:0d:f5:
                    16:38:cf:f4:f0:39:ae:85:c2:f3:77:2d:5b:93:dc:
                    fc:11:70:16:cd:bd:6b:65:17:82:20:d3:ba:62:98:
                    a7:cc:2e:93:21:56:62:86:0c:83:5d:20:37:c6:aa:
                    b8:27:b8:ec:47:e8:e9:f2:7b:05:0b:f8:00:d2:3f:
                    6f:10:91:e6:37:25:fd:05:d4:a1:1d:e2:58:73:d8:
                    68:17:68:5b:d2:ac:1f:0a:2e:ff:93:60:d4:bd:41:
                    28:1f:29:86:29:2e:7c:eb:ca:c6:51:d9:9d:80:b3:
                    92:33:b2:d2:8e:1c:a0:70:2f:44:5a:21:dd:30:7a:
                    42:06:94:bd:55:02:84:57:ce:f7:96:34:30:ce:00:
                    01:15:ab:83:ac:2c:c8:d6:87:12:8d:4b:6b:22:fe:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:8C:4D:70:4A:4A:DA:53:5C:DB:13:6C:52:BC:9C:31:29:15:53
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70A281EAF84A11F0A046CDACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:40:6a:53:90:3e:f8:9f:a0:9c:7a:ab:94:17:7c:c4:81:
         27:aa:b4:2e:15:48:77:8d:3e:58:07:25:e3:43:6a:a6:9e:45:
         6c:9e:2a:e3:b7:a8:19:da:a7:02:8b:95:6d:62:69:70:a0:4a:
         bf:e2:a8:89:68:2c:29:ee:59:04:58:e0:ed:05:29:8a:0b:c5:
         b1:cd:a1:ad:d1:41:85:42:9d:74:4e:f8:5d:e5:22:4e:59:da:
         7a:60:6c:99:b6:2c:e8:de:1b:48:bb:4f:b4:ef:cf:b3:30:74:
         69:43:1e:80:68:20:27:78:36:1b:28:8f:c6:d0:6b:62:1e:dc:
         0a:20:64:5b:ab:ca:2c:06:d6:2e:19:44:6a:38:34:4b:cc:a4:
         78:7e:f6:25:14:88:5e:68:bb:9d:d1:d3:5e:fe:8e:71:3f:ed:
         02:51:4f:5a:cc:58:07:a2:88:8c:ba:c8:f7:ce:5e:aa:b1:7c:
         70:fd:bc:07:13:9a:36:21:af:93:2a:01:24:f1:34:b1:2f:2f:
         37:9a:69:a8:ce:c4:11:40:ae:4c:43:8a:c8:e0:09:51:e3:81:
         bb:b5:4d:16:22:0b:d2:56:df:81:ff:fd:eb:31:eb:4c:4c:31:
         a8:22:7a:54:5e:20:d8:65:7c:2b:d8:e8:94:d9:2a:e5:fc:02:
         f6:55:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:22 2026 by rpki-client