This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C4604CEBBD11F099A92F9EDAE4EC9C.roa
File:                     93C4604CEBBD11F099A92F9EDAE4EC9C.roa (raw, json)
Hash identifier:          nlob6On+l5IajtjK6KLLpFXdejJowpgD9XPL1Rwo3lQ=
Subject key identifier:   83:97:75:A0:F2:04:6D:D4:44:95:23:87:39:09:6C:83:43:46:51:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B390
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C4604CEBBD11F099A92F9EDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 11:39:51 +0000
ROA not before:           Wed 07 Jan 2026 11:39:46 +0000
ROA not after:            Wed 13 May 2026 11:39:46 +0000
asID:                     273147
IP address blocks:        154.197.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111504 (0x1b390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 11:39:46 2026 GMT
            Not After : May 13 11:39:46 2026 GMT
        Subject: CN=695e4607-243b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:c5:ab:f4:90:b5:5d:61:03:87:dc:04:ab:
                    a2:85:c5:18:93:de:3c:79:0e:d0:e6:15:56:76:e9:
                    1d:44:aa:98:70:1a:bc:24:65:ac:59:53:6b:46:52:
                    37:fe:bf:08:51:3a:e4:e7:0a:a1:65:8a:d4:98:7d:
                    d9:0e:71:77:0e:6d:c7:6f:11:42:cd:85:a8:f1:cd:
                    18:49:12:6c:09:36:b7:4a:6d:57:8f:a8:1c:8d:90:
                    b1:55:57:f8:28:84:ef:04:94:82:9e:47:a0:94:73:
                    37:38:a0:bd:cd:ae:39:9c:3b:75:cd:8f:fe:58:6e:
                    18:84:a0:56:2d:af:f3:01:48:2f:3e:20:b9:8a:a5:
                    bb:49:f7:96:42:6a:d2:53:76:d6:d6:ed:cb:3d:0f:
                    81:16:7c:49:33:68:e0:c9:ab:fa:dc:5e:f9:4e:1f:
                    e4:51:83:b9:bb:1f:99:9f:3a:02:2a:5f:80:ec:98:
                    a7:fe:04:79:9e:f2:74:66:6e:34:4f:cc:36:9f:bf:
                    52:ef:32:c4:03:9f:fd:c0:5b:ab:b8:1b:f3:06:eb:
                    c3:5d:1e:c5:ed:a4:01:6d:1d:57:ff:a3:5c:6f:e7:
                    03:ef:cd:fe:8f:96:fc:ad:6f:22:b4:1c:0e:9f:d2:
                    d4:7c:95:76:bc:0e:66:99:83:f2:77:c9:c0:29:e6:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:75:A0:F2:04:6D:D4:44:95:23:87:39:09:6C:83:43:46:51:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93C4604CEBBD11F099A92F9EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:62:49:b7:e3:85:69:47:88:2f:13:ba:8e:5e:7f:e6:fb:
         b6:f5:30:92:1e:c6:5e:f1:93:c0:49:69:38:58:b6:97:b4:17:
         73:41:61:07:cf:db:45:44:f0:a2:63:ca:6c:13:2d:79:68:2b:
         9a:6c:4d:4f:b6:c7:44:62:78:4e:6a:ad:61:c3:cf:f8:cf:bb:
         e3:8e:55:15:2a:01:3a:0e:61:65:49:57:02:56:1d:0c:b7:10:
         2a:a2:2d:36:4d:af:cf:73:44:86:87:ff:70:c0:42:45:a8:d3:
         74:c6:58:15:b1:d0:d0:a5:e7:78:99:34:24:ec:53:11:92:29:
         01:ef:cd:bd:c7:87:75:fc:c1:e7:01:a1:6d:d1:aa:59:89:42:
         2b:33:85:94:62:f8:36:83:2e:1d:e2:57:17:29:30:38:be:09:
         5a:70:b9:9e:8e:c7:0d:f4:1f:9e:25:8a:6b:75:c7:56:f4:01:
         db:59:62:e1:e5:a7:65:ef:bc:c4:83:75:36:aa:c4:6f:43:db:
         5b:d8:86:68:b0:ac:3f:a4:05:c1:f1:47:2d:e9:0b:50:8f:e0:
         d0:d7:8e:b7:71:73:7c:33:d6:6d:c4:6e:35:42:71:32:05:b7:
         33:f9:22:e7:a2:2b:10:2a:00:48:37:67:03:d2:9d:1d:86:ab:
         19:5e:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:00 2026 by rpki-client