This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F28CEA6EC2111F0BCFECCF6DAE4EC9C.roa
File:                     8F28CEA6EC2111F0BCFECCF6DAE4EC9C.roa (raw, json)
Hash identifier:          laj0g/ekwosvSeJlr3qFIqgV2MK/SMdGVRmFir2hgZY=
Subject key identifier:   9F:CE:15:D3:59:D6:0F:41:9A:44:C5:25:3B:32:55:FF:A5:96:91:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B3C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F28CEA6EC2111F0BCFECCF6DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 23:35:33 +0000
ROA not before:           Thu 08 Jan 2026 23:35:27 +0000
ROA not after:            Mon 18 Dec 2028 23:35:27 +0000
asID:                     17561
IP address blocks:        154.210.0.0/24 maxlen: 24
                          154.216.0.0/24 maxlen: 24
                          154.223.6.0/24 maxlen: 24
                          154.223.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111560 (0x1b3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  8 23:35:27 2026 GMT
            Not After : Dec 18 23:35:27 2028 GMT
        Subject: CN=695eedc5-f574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:25:7d:52:53:c4:59:ee:cb:59:3d:79:86:
                    a0:07:2f:af:7b:0f:9b:1c:f8:92:e3:9e:30:5c:11:
                    78:7e:59:77:73:ba:43:d8:33:73:60:51:5f:12:58:
                    14:57:c4:fd:55:f3:d8:dd:84:b0:4c:65:5d:3b:16:
                    74:43:36:77:d7:96:7c:46:a7:da:71:80:c2:7e:a8:
                    69:07:53:ea:45:48:89:98:f5:3b:d5:d6:43:e2:d2:
                    2c:14:6c:87:b0:90:e2:25:c8:89:9a:9d:d1:18:39:
                    89:15:ca:1d:85:11:41:1b:da:d7:ac:c6:46:0d:05:
                    d8:df:72:c3:01:eb:db:43:69:e9:6d:e1:59:bf:52:
                    32:33:01:59:51:e7:c7:3a:41:64:47:0c:f1:47:3b:
                    d1:0e:db:c4:11:e2:31:ee:34:e2:7f:98:25:5a:96:
                    81:4a:c0:7a:9a:b6:18:60:63:88:76:02:fd:29:ca:
                    0f:29:4b:64:bf:18:c5:17:f2:54:49:53:a9:60:1a:
                    79:0c:29:87:48:08:f4:15:bf:85:15:6c:7a:58:8a:
                    92:75:34:86:7d:52:08:fc:bb:9c:d5:97:1f:d0:3e:
                    af:61:1a:0c:0c:a4:a2:44:08:20:73:e4:e2:5a:74:
                    d9:f5:39:c9:a7:98:4f:d2:00:95:34:2c:67:e0:fc:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:15:D3:59:D6:0F:41:9A:44:C5:25:3B:32:55:FF:A5:96:91:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F28CEA6EC2111F0BCFECCF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.0.0/24
                  154.216.0.0/24
                  154.223.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:25:bd:80:e6:1f:69:ac:44:b2:af:83:af:5f:8d:24:4d:
         35:55:9f:01:bb:a3:f9:0d:fb:6a:c5:08:f3:17:7b:07:a3:42:
         3c:90:73:ee:6d:a8:d6:1e:1f:5d:0d:93:78:38:cc:04:b1:56:
         b5:64:b0:0d:73:ba:65:0c:8b:28:f5:a4:07:25:f1:76:67:fb:
         30:12:c4:b5:f2:db:d9:83:ce:a6:81:74:e7:40:3b:d3:b9:2b:
         29:dc:fd:40:dd:1b:e8:75:2f:84:9f:d2:c4:f8:1f:01:52:ff:
         71:1f:91:dc:25:a7:dd:e6:98:83:62:95:95:2f:7b:c6:32:fa:
         56:d1:0e:e0:3b:f7:36:bf:70:03:55:ea:c0:8c:a8:f5:2f:52:
         ae:11:31:33:0f:34:4a:f6:d8:ab:93:b0:bc:2a:3e:26:a2:d7:
         ab:4f:40:38:70:92:0f:71:53:97:3e:45:e4:be:fb:8c:b3:23:
         31:26:a0:f4:6c:41:3c:6c:ec:d2:f9:57:83:25:9d:e5:0e:68:
         b0:32:ea:a9:6e:22:2e:8e:eb:0d:fa:44:ec:41:eb:74:bc:82:
         10:17:c8:72:73:11:f1:10:9b:a9:49:1e:91:af:fb:00:12:6a:
         b0:91:c0:18:4a:b4:e4:d9:b4:94:8c:75:d9:8e:44:7b:35:27:
         db:15:dc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:50:16 2026 by rpki-client