This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95185868F2D411F08DE2619ADAE4EC9C.roa
File:                     95185868F2D411F08DE2619ADAE4EC9C.roa (raw, json)
Hash identifier:          hUqcPNTf+CmE4HYIGiZLeOY0wcJxKUyWupHx+8KBwOU=
Subject key identifier:   40:39:0E:B5:BE:E8:73:B3:CD:F9:A9:08:08:D7:64:96:EA:58:7A:13
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B509
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95185868F2D411F08DE2619ADAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 12:12:10 +0000
ROA not before:           Fri 16 Jan 2026 12:12:05 +0000
ROA not after:            Tue 21 Apr 2026 12:12:05 +0000
asID:                     209242
IP address blocks:        154.198.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111881 (0x1b509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 12:12:05 2026 GMT
            Not After : Apr 21 12:12:05 2026 GMT
        Subject: CN=696a2b1a-9ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:23:5a:42:bf:4d:fb:62:44:ee:cf:1e:8a:
                    d5:28:5b:1a:bb:da:a4:b4:e3:4d:09:d2:68:7d:2d:
                    b0:d5:26:2c:57:f0:f4:0c:52:81:5b:d1:8c:53:33:
                    07:63:61:fd:b7:4e:68:33:0e:b4:32:01:ee:b1:35:
                    25:1c:8e:9a:48:df:bc:52:a4:e5:7f:86:49:56:42:
                    72:ec:12:71:be:17:0d:6a:bb:b5:f8:b4:1f:a9:09:
                    f7:e8:d6:86:bc:5e:5a:aa:f3:f3:4c:86:49:a4:6f:
                    dc:9b:e3:bc:4c:37:37:0f:0c:36:e8:62:50:61:31:
                    86:74:28:de:3c:a8:d3:0d:4c:8a:aa:36:e4:cb:58:
                    c5:27:43:51:a3:f4:82:2a:40:8f:39:0d:60:ad:c3:
                    e9:94:d7:3b:9e:01:68:64:38:51:60:fe:a6:2b:18:
                    f4:e4:60:de:94:89:53:a5:71:ee:d4:d7:e8:73:52:
                    b0:63:2e:9d:68:e5:8f:14:9d:a4:f3:4b:a9:e1:79:
                    d1:c8:d5:84:3b:a6:77:a2:f1:12:59:93:d2:a8:a4:
                    b0:60:ca:8b:d7:a0:47:dc:4a:f6:e8:00:a1:93:0b:
                    f5:96:8c:52:93:11:c8:bf:65:9b:db:3a:37:b3:80:
                    5d:88:cc:a8:09:e3:34:77:ae:ff:0e:cc:09:bc:04:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:39:0E:B5:BE:E8:73:B3:CD:F9:A9:08:08:D7:64:96:EA:58:7A:13
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95185868F2D411F08DE2619ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:29:6a:27:89:61:f6:21:6f:87:1c:5b:23:60:97:ac:8f:f1:
         86:f1:0b:1c:4e:66:c9:db:70:bd:08:50:21:3e:68:d8:ff:f3:
         50:5f:4d:c6:56:96:3a:1c:4f:76:bb:47:a2:fe:8c:98:5f:21:
         f9:88:49:a7:13:8c:bd:4f:9b:0b:d5:97:e5:b2:e5:26:3b:0e:
         6f:a6:fb:a8:1b:e1:8b:02:c8:a1:68:f9:19:14:5f:63:96:8e:
         8c:29:2c:2c:3a:29:b8:81:5b:8b:19:e2:04:27:7e:84:10:29:
         04:9f:42:28:cd:90:44:29:b2:16:3f:14:2d:02:72:23:f2:7f:
         91:24:ac:5f:92:75:93:3c:50:05:ed:f1:3b:ba:61:13:50:92:
         cc:dd:b9:2c:a8:d5:d3:41:16:00:31:4d:73:59:b3:1b:2e:e8:
         84:33:dc:4d:4b:39:0c:58:14:33:0e:b5:47:1c:43:58:7a:f1:
         a5:ab:96:93:aa:0e:d2:10:d6:88:fa:ba:18:44:88:36:e8:a4:
         27:1a:b9:92:56:53:f4:28:1c:82:9e:e2:22:56:01:98:ca:03:
         37:26:93:6a:d4:af:e2:a6:b2:15:b7:1f:c2:e1:54:56:79:ed:
         ab:74:64:61:7e:f4:55:10:d0:b9:33:0a:3f:6a:5e:8a:a4:a5:
         0d:50:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:46 2026 by rpki-client