This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91EACD5CF83211F0A639249EDAE4EC9C.roa
File:                     91EACD5CF83211F0A639249EDAE4EC9C.roa (raw, json)
Hash identifier:          w90AsC8YludVIOcDCzxirX5vIOqar4MaOPsPdSeRutM=
Subject key identifier:   EF:6A:73:D9:25:B5:C8:48:B0:AB:3B:36:46:BA:C6:CA:15:6F:D3:1F
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B611
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91EACD5CF83211F0A639249EDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:07:33 +0000
ROA not before:           Fri 23 Jan 2026 08:07:27 +0000
ROA not after:            Fri 18 Dec 2026 08:07:27 +0000
asID:                     140227
IP address blocks:        154.205.216.0/23 maxlen: 24
                          154.205.218.0/23 maxlen: 24
                          154.205.220.0/23 maxlen: 24
                          154.205.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112145 (0x1b611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 08:07:27 2026 GMT
            Not After : Dec 18 08:07:27 2026 GMT
        Subject: CN=69732c45-f71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:8a:9b:27:fd:d0:37:85:ee:f8:17:21:a4:
                    1c:ab:7b:8f:2a:8a:0a:f1:47:fa:13:c5:9c:c2:1c:
                    d4:e9:ca:6f:9b:08:28:ec:8e:86:56:9c:fc:02:72:
                    6f:ad:ad:14:36:5c:ff:ee:9b:31:f3:60:1f:5b:e5:
                    18:7b:e1:68:45:3c:a4:c6:71:9f:1d:3f:d8:0c:f3:
                    e8:61:68:24:e9:78:22:e8:82:6e:d8:e0:99:de:14:
                    36:9d:aa:74:93:17:d0:54:ac:15:a5:34:8c:da:3e:
                    60:c1:9f:31:0e:9e:a6:da:fe:8e:3c:f8:6b:3e:51:
                    92:32:68:9f:c6:cb:ab:63:cb:42:9a:55:28:03:e0:
                    42:2f:54:34:c9:4e:2d:02:ac:0a:c8:ed:3e:a2:6a:
                    cb:56:03:81:03:db:79:a0:1e:fa:23:8b:c1:c7:e3:
                    aa:e2:82:a5:6f:32:20:7e:7f:32:ac:31:83:75:c6:
                    f9:e1:f8:c3:5a:b5:1c:00:8e:2c:3f:5a:ff:04:b5:
                    18:65:cc:a7:20:0f:81:47:4d:21:3c:d7:7b:39:07:
                    c0:a4:29:ec:fa:7c:92:2e:5f:29:cd:3d:a4:35:f1:
                    09:e4:03:be:7e:86:b8:59:b3:ff:6d:71:8a:12:e3:
                    0f:ff:55:66:e2:af:7e:a5:a0:dc:5e:8d:d3:d8:2d:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6A:73:D9:25:B5:C8:48:B0:AB:3B:36:46:BA:C6:CA:15:6F:D3:1F
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91EACD5CF83211F0A639249EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:81:e6:ab:ae:b8:12:b1:8b:d8:62:bd:e8:de:69:ee:27:f0:
         e8:c8:68:5d:e8:d7:56:09:5b:58:25:8d:4a:21:aa:ea:97:ec:
         2f:d6:82:5e:e4:7d:d6:25:f2:94:b1:4a:da:d5:56:29:b8:01:
         24:04:f9:f7:f7:22:6e:38:76:31:0c:da:9e:43:a0:40:ed:2c:
         e4:df:22:2a:92:1c:03:51:ce:6d:07:e6:a2:d1:08:06:c6:b6:
         5b:b1:e2:99:2b:f5:12:93:f7:9d:72:89:42:6c:9a:d6:d9:c5:
         ea:df:b4:69:38:20:84:d1:29:5f:ba:ba:0b:a6:5f:77:e6:6f:
         93:66:2e:1a:70:ff:63:cc:15:c5:26:8e:9f:b3:ca:8a:a5:5a:
         65:21:64:0e:e7:f0:95:ba:c5:11:95:51:0f:da:ef:fe:0c:13:
         65:0e:0c:6c:45:d5:55:0f:1a:4f:a0:aa:91:51:90:1c:15:c5:
         c1:03:d4:ca:6c:47:b9:30:f9:12:89:ef:e4:82:7a:83:86:7e:
         c3:65:b9:84:9e:7b:e8:c4:eb:d5:38:9f:39:e2:69:2a:ed:c9:
         3c:e0:d8:16:64:44:1e:4d:ff:70:c7:02:cc:19:38:44:c4:15:
         99:bb:52:4e:18:24:74:89:06:2f:74:83:e0:84:af:07:db:f5:
         39:ce:0d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:08:40 2026 by rpki-client