This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E3A1C6F93B11F0A51D66EEDAE4EC9C.roa
File:                     87E3A1C6F93B11F0A51D66EEDAE4EC9C.roa (raw, json)
Hash identifier:          1MUFpY8DHitLqJnKsjjZEYiSIx3i9IIMr//G5RI+4ro=
Subject key identifier:   8A:2F:F9:A4:17:28:54:C6:C0:9C:BE:50:51:6A:5F:25:FB:3D:58:16
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B634
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E3A1C6F93B11F0A51D66EEDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 15:44:13 +0000
ROA not before:           Sat 24 Jan 2026 15:44:08 +0000
ROA not after:            Mon 02 Mar 2026 15:44:08 +0000
asID:                     2914
IP address blocks:        154.197.12.0/22 maxlen: 24
                          154.222.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Jan 2026 22:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112180 (0x1b634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 15:44:08 2026 GMT
            Not After : Mar  2 15:44:08 2026 GMT
        Subject: CN=6974e8cd-41d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:1f:ac:7c:0d:0b:74:5b:9c:a6:5c:89:2f:
                    a0:a3:6e:d5:a3:55:70:bd:84:7a:53:d3:13:7c:d8:
                    f7:da:bb:8a:0e:9e:e7:4c:7a:f3:fb:7f:5a:b9:76:
                    0c:71:21:34:52:62:5e:89:f4:5f:32:56:a0:92:c6:
                    28:de:5a:eb:6e:b4:6a:de:e6:0d:98:d7:ff:39:cc:
                    a5:4d:db:f6:0e:81:48:76:89:1c:a0:93:9c:69:c6:
                    63:bd:bc:38:9a:7b:ed:03:e3:f8:b3:56:44:83:bc:
                    8c:2e:f8:76:40:df:2e:6b:8c:0c:bc:ae:02:4d:cb:
                    85:ba:2f:a8:62:f3:ab:45:ad:6d:6d:de:6a:b9:fe:
                    08:36:67:5f:b8:71:f5:ad:d9:55:ff:44:89:ce:7f:
                    6d:38:63:81:31:28:6b:37:0d:e8:cf:8b:95:92:d2:
                    93:ca:f7:b3:f2:3d:ea:5f:bf:04:9f:04:03:9b:fa:
                    8d:60:91:89:30:a2:1e:50:e6:c2:95:28:9a:6c:c5:
                    05:75:2b:d1:e2:37:7b:fb:4c:1c:6d:8d:bc:8a:7f:
                    76:58:f4:f8:5a:30:dc:02:d0:cc:ad:21:cd:b9:e5:
                    45:49:cf:96:b4:6c:88:67:3a:d1:65:ca:28:10:e1:
                    43:1e:0d:b2:11:94:2c:c5:8a:58:6a:eb:6b:82:76:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:F9:A4:17:28:54:C6:C0:9C:BE:50:51:6A:5F:25:FB:3D:58:16
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E3A1C6F93B11F0A51D66EEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.12.0/22
                  154.222.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:b7:7e:3e:29:56:75:72:c2:d5:70:ba:70:69:2b:dd:40:4a:
         7c:25:55:4d:71:68:86:a4:4d:1c:ee:8f:fb:b2:c5:f8:c8:f4:
         2f:30:a5:25:f0:5c:a3:fb:cb:6d:81:44:02:7b:25:d3:b9:66:
         04:c2:f1:90:79:58:11:c2:ca:0e:0b:01:ca:ea:cd:20:ac:7b:
         5c:ee:85:e0:83:ff:b9:f4:ab:2e:4a:e9:82:b4:27:c5:0e:1e:
         db:96:dd:73:86:76:90:d2:ed:93:59:f7:41:c1:62:c0:3e:28:
         68:90:0f:03:ec:75:09:a7:d2:d7:34:c7:4b:ba:b0:67:c5:c0:
         72:25:db:d0:73:d6:8d:cd:e2:56:8f:bc:aa:43:dc:2a:5d:e0:
         3f:f0:9f:97:c2:e1:2d:bf:ae:64:ae:17:96:e8:97:ac:c0:e0:
         b6:48:c2:5c:bc:c6:2d:e3:6b:5d:43:4f:08:69:b2:2a:a5:cb:
         c4:64:93:69:4f:4b:04:28:c5:e4:00:3e:3e:6f:32:a8:48:60:
         cc:86:fa:59:29:e4:b2:b3:f1:73:fb:40:66:fe:ae:05:b7:50:
         fa:08:fe:db:bf:a1:13:17:3e:3e:e8:fe:00:7a:e0:e8:47:23:
         b5:20:b4:f4:07:1c:4e:ea:d7:d0:8d:c9:fa:3c:f2:9d:e8:d6:
         c3:90:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:56 2026 by rpki-client