This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A44B376F95811F08D02A0A1DAE4EC9C.roa
File:                     7A44B376F95811F08D02A0A1DAE4EC9C.roa (raw, json)
Hash identifier:          yzse7jpiot8rxnliA223CcNRtwgTCV0YlVRqK/kPxe8=
Subject key identifier:   FE:E5:AB:6E:2B:B2:E4:72:AB:C1:C7:4E:23:1D:95:3C:A3:69:74:8C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B67C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A44B376F95811F08D02A0A1DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:11:26 +0000
ROA not before:           Sat 24 Jan 2026 19:11:21 +0000
ROA not after:            Thu 12 Mar 2026 19:11:21 +0000
asID:                     25160
IP address blocks:        154.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112252 (0x1b67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 19:11:21 2026 GMT
            Not After : Mar 12 19:11:21 2026 GMT
        Subject: CN=6975195d-cab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:c9:13:c1:7c:48:8e:87:b6:7d:5e:e7:14:
                    11:12:92:e5:1f:d6:2f:ba:62:3c:77:a5:13:ce:11:
                    52:0c:02:dc:fa:d1:fe:30:fb:3d:b1:2c:98:fb:97:
                    42:20:32:1c:10:5e:74:21:fc:8d:c3:a8:1c:f4:16:
                    2c:92:64:4e:c1:a2:9c:72:ca:7a:5d:ff:1e:07:27:
                    d5:72:2b:eb:eb:d6:d0:0d:15:35:20:7f:6e:ab:ef:
                    bb:fd:e1:b0:3a:99:6c:d4:95:41:46:76:80:de:be:
                    52:f8:36:15:95:e7:04:f2:ab:72:76:2a:d5:08:ea:
                    50:ce:86:25:c6:58:57:e6:0b:9e:e2:39:1f:30:92:
                    c3:e0:00:ca:74:cb:3b:2c:49:4a:71:9b:c7:72:79:
                    5c:19:34:a9:1d:8f:d4:d4:48:23:b6:a5:41:a4:22:
                    78:35:f2:36:72:91:9c:85:3a:49:12:f2:ed:e5:d1:
                    e9:e3:46:33:02:84:9f:ee:b5:40:a1:49:cf:d9:fe:
                    ad:6e:1e:05:f3:cd:87:8d:05:0a:32:f4:8f:5d:fc:
                    7f:f5:34:57:b5:c9:bb:84:77:5f:7c:1f:23:37:5b:
                    24:94:21:10:28:89:f1:24:f6:41:59:3c:c3:9f:aa:
                    69:f3:aa:6c:01:5a:d0:37:a4:a7:2e:87:fd:f0:9c:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:AB:6E:2B:B2:E4:72:AB:C1:C7:4E:23:1D:95:3C:A3:69:74:8C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A44B376F95811F08D02A0A1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:34:cb:f7:59:e6:51:29:26:39:a4:1c:3a:88:c8:bb:66:f1:
         45:8a:84:3e:cc:a6:f1:44:cf:7d:0b:58:09:7c:9c:a5:ff:18:
         f2:57:a2:e9:a0:2a:da:19:d5:41:fc:17:1c:84:7f:d7:ad:68:
         6f:a7:18:d8:16:7b:50:ef:ab:d7:bf:43:64:40:1d:1d:21:06:
         e3:01:fa:36:4b:0f:02:04:a0:2a:1a:cc:23:90:4e:ad:e0:b0:
         70:99:d3:39:f5:20:11:79:97:13:d4:72:ae:41:ca:ac:b1:52:
         0a:17:b5:2c:5b:0b:e7:82:91:36:f7:30:d7:87:23:ae:ff:0b:
         30:5a:aa:16:fb:5a:34:97:c9:8d:71:96:2c:63:18:c8:c5:c3:
         20:44:96:5f:fc:4d:c8:60:03:4f:2e:2c:41:ba:98:52:3d:a1:
         c5:35:9a:9d:e5:7c:44:86:ce:40:07:fc:c3:64:39:07:91:8b:
         89:c0:87:51:a2:61:a7:34:06:2a:9c:6c:c5:9d:e1:8a:d7:8b:
         3e:9d:4e:bd:08:3e:87:ab:1b:da:9e:5b:57:97:a5:f7:d4:35:
         b1:b7:8f:3a:fc:53:46:6d:d2:10:e8:f1:ca:68:22:43:44:67:
         54:09:c7:41:68:48:bd:85:61:ce:eb:2b:10:fd:88:b9:a8:07:
         db:11:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:47 2026 by rpki-client