This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
File:                     85590228E97F11F0A6EA4DCFDAE4EC9C.roa (raw, json)
Hash identifier:          CoCEpK4mqyp7jTsV4Xsao0s4XyAGsWrmsLsGAd/6zu0=
Subject key identifier:   D2:F3:7A:2F:90:41:52:79:E3:FD:A7:87:F9:B6:2F:99:BB:AE:F8:E3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B322
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 15:10:36 +0000
ROA not before:           Sun 04 Jan 2026 15:10:31 +0000
ROA not after:            Thu 16 Apr 2026 15:10:31 +0000
asID:                     211826
IP address blocks:        154.197.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111394 (0x1b322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  4 15:10:31 2026 GMT
            Not After : Apr 16 15:10:31 2026 GMT
        Subject: CN=695a82ec-ee6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:9d:ba:aa:c9:df:71:f3:da:46:14:43:72:
                    c0:7b:d3:51:f5:cb:b0:44:d4:64:11:fc:8b:59:70:
                    6b:d0:a9:ac:3c:05:22:2b:82:42:54:15:be:de:c5:
                    9e:82:f3:4d:3b:85:1d:92:80:06:cf:8e:63:b1:3b:
                    80:8d:99:4c:d3:d3:c7:1a:b8:14:7f:a8:67:21:1a:
                    ab:b8:92:29:83:e8:e2:e3:8d:07:9d:80:f9:42:cd:
                    23:2a:29:62:42:a2:f3:63:13:5e:6d:56:47:4f:84:
                    6f:3e:ae:c8:89:45:4e:3a:ba:14:b9:52:bb:8b:77:
                    de:1c:9e:0c:ed:68:d0:57:23:fb:3c:47:a5:30:2e:
                    5f:22:fd:3c:e9:6b:70:87:17:8d:63:2a:1e:3e:24:
                    3f:c5:87:33:89:7d:46:13:f6:20:74:7f:7b:af:42:
                    d2:ae:2a:6a:1f:bb:7c:d2:ec:59:a7:90:3f:3c:14:
                    86:07:4b:a5:9d:ae:66:4c:a4:f3:7a:9c:9b:97:d3:
                    cc:9a:07:93:ef:71:0f:55:83:3d:20:83:ee:92:75:
                    5a:79:1e:a8:d2:bd:37:e6:33:9b:b8:70:4a:16:7b:
                    ad:b8:c1:a6:d6:dc:30:dc:db:e3:16:a0:6e:a3:48:
                    5c:2b:c0:15:fd:d2:de:b5:72:e5:a4:30:5e:84:ac:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:7A:2F:90:41:52:79:E3:FD:A7:87:F9:B6:2F:99:BB:AE:F8:E3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:ec:5d:22:1f:46:08:bb:ba:89:a7:cb:07:51:f0:76:27:
         86:43:8d:f6:7a:09:bc:0c:35:78:5b:72:fb:d9:6f:31:38:ad:
         0a:f7:fc:64:dc:49:57:e7:12:43:33:3f:fe:88:48:a3:8b:58:
         7c:ea:fd:17:86:a8:07:34:07:80:80:38:10:49:ac:1f:87:7f:
         b0:e0:5a:79:b7:ea:a7:f5:fa:a2:7e:02:bd:a1:1f:35:5d:12:
         11:79:63:60:4b:0e:5e:39:ca:a9:36:db:a0:b4:db:86:81:52:
         0c:aa:05:cf:57:c4:c5:50:1a:56:ef:60:84:b8:51:88:cb:1b:
         62:1e:f0:44:c4:5d:9c:3e:ea:37:77:40:88:f9:71:28:af:d2:
         6a:09:29:2f:cd:96:b4:49:62:d9:31:aa:0a:a2:dc:77:97:58:
         cd:02:ee:ee:29:01:d3:e8:49:df:db:4a:44:e4:36:18:c3:24:
         94:dc:1f:a0:ea:58:ec:19:95:74:2a:a5:3c:06:84:29:01:7f:
         35:9f:22:b4:bf:f5:7a:74:a2:66:23:61:50:3b:75:92:18:48:
         11:b9:ac:a7:9a:f3:72:59:a4:0c:ae:9d:f9:b9:e3:d3:1e:30:
         25:b7:ea:8e:d9:f6:a6:4a:7b:13:06:68:3a:6e:aa:3d:c7:27:
         ac:47:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:38 2026 by rpki-client