This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC3624E66011F09B520497DAE4EC9C.roa
File:                     74FC3624E66011F09B520497DAE4EC9C.roa (raw, json)
Hash identifier:          M5kEguKYl+DvbYzS9Xwdxhw5sSxtn4jvLEOkOwr+iU0=
Subject key identifier:   5F:3E:75:54:7D:C4:BE:FF:55:D6:61:5D:7E:51:36:D2:6C:D9:9A:20
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B223
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC3624E66011F09B520497DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 15:50:41 +0000
ROA not before:           Wed 31 Dec 2025 15:50:36 +0000
ROA not after:            Sun 31 Dec 2028 15:50:36 +0000
asID:                     17561
IP address blocks:        154.84.128.0/24 maxlen: 24
                          154.86.118.0/24 maxlen: 24
                          154.91.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111139 (0x1b223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 31 15:50:36 2025 GMT
            Not After : Dec 31 15:50:36 2028 GMT
        Subject: CN=69554650-1ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:eb:5c:16:e1:36:b1:83:eb:95:d9:70:b9:
                    41:9e:60:9b:5e:0d:6f:22:99:07:5c:e0:9a:da:3f:
                    c4:7c:9c:22:c3:2c:28:68:32:5d:d1:7b:05:9f:f9:
                    cc:59:ac:37:d9:0a:17:5d:7f:b4:2e:77:77:fc:32:
                    f5:df:a3:06:fe:86:19:11:02:19:5f:c9:90:b8:1a:
                    39:37:f9:9a:31:e8:ea:f8:f1:8a:2b:bd:90:be:d4:
                    9e:f4:34:43:04:58:0c:a0:62:a1:a8:00:b8:cd:72:
                    7f:b3:42:e3:bc:50:43:34:16:59:b6:f7:b4:e7:4a:
                    5a:6a:db:54:fb:65:d4:6b:3a:8d:9a:00:61:59:f3:
                    46:b7:03:64:79:9c:df:6a:14:3c:57:5f:a1:ef:8b:
                    64:c8:34:16:6e:40:74:63:6f:b0:7f:d6:ae:43:6c:
                    ce:d5:8c:91:32:dc:7d:a5:5b:f4:06:56:dd:90:54:
                    7f:45:e1:91:1f:42:a4:1b:2f:e7:f1:a9:2c:96:9a:
                    b6:c8:07:a7:4e:18:f5:ec:ea:6b:03:d9:35:4f:67:
                    de:8d:1e:48:14:c2:f5:0e:e6:7b:b0:3a:f0:38:51:
                    72:4c:2a:7e:a1:a9:86:69:b0:66:95:d9:94:15:b6:
                    81:e4:46:8c:00:10:f6:d8:ee:50:89:0d:38:aa:85:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3E:75:54:7D:C4:BE:FF:55:D6:61:5D:7E:51:36:D2:6C:D9:9A:20
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74FC3624E66011F09B520497DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.84.128.0/24
                  154.86.118.0/24
                  154.91.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:66:fe:c6:72:57:92:c0:02:88:5e:71:b7:1b:2a:f4:c6:a6:
         6a:ed:ed:f6:5e:c2:e9:83:e3:75:75:67:a5:73:b6:dc:42:b4:
         ab:20:96:53:d1:f6:b0:13:53:03:45:49:65:63:4b:83:13:33:
         19:ab:1a:18:36:a3:c2:4d:8a:ca:d7:44:d6:7c:56:07:e3:55:
         ab:69:08:29:d5:8b:f9:f1:8d:e4:a0:c5:9e:f7:4b:f1:f2:c2:
         87:0b:40:fa:2e:3f:1b:41:e8:32:55:f9:c2:2c:56:e8:b3:2b:
         c7:63:6a:c5:bf:4b:9c:ad:54:c6:2a:7f:41:1b:e2:bd:72:30:
         07:63:8a:5f:a8:2e:33:02:05:d9:df:dd:5c:a1:4d:72:bb:64:
         99:13:a8:bf:56:2c:1e:81:5b:a7:9a:9d:c4:15:bd:db:97:23:
         89:a6:84:8d:8c:18:00:8e:42:66:e7:1a:d8:7c:8f:20:2d:de:
         ec:ef:92:a6:08:34:8c:fd:15:44:cb:10:47:a9:fe:09:76:07:
         d3:7d:50:70:b7:1b:bf:60:fd:9c:2f:38:e3:cb:f5:6a:40:44:
         7f:37:be:a4:4e:02:33:17:c4:55:07:6f:21:4a:99:d6:f6:ac:
         31:1c:83:15:b7:ae:8e:a0:6c:a5:03:bb:79:a2:a8:a0:79:8b:
         8d:86:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:50 2026 by rpki-client