This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5C6830F7E411F0BC40B9ACDAE4EC9C.roa
File:                     9B5C6830F7E411F0BC40B9ACDAE4EC9C.roa (raw, json)
Hash identifier:          ACFA0oYc9HbVtUOJckXV6aEcoxN05ZszgEN4vSQIsyM=
Subject key identifier:   91:EF:34:A9:EE:96:D7:E1:00:99:FD:0D:62:95:07:88:B8:25:42:7D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B608
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5C6830F7E411F0BC40B9ACDAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 22:49:28 +0000
ROA not before:           Fri 23 Jan 2026 22:49:21 +0000
ROA not after:            Sat 28 Feb 2026 22:49:21 +0000
asID:                     48031
IP address blocks:        154.92.12.0/24 maxlen: 24
                          154.92.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112136 (0x1b608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 22:49:21 2026 GMT
            Not After : Feb 28 22:49:21 2026 GMT
        Subject: CN=6972a978-6f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:23:6d:3c:06:c6:61:3f:c3:fe:b8:a5:79:41:
                    b3:f3:bc:0f:56:4f:37:a0:35:bf:89:e8:10:31:08:
                    1b:6d:be:53:b4:ad:93:50:14:cf:fe:64:5c:cc:e9:
                    89:0c:1c:a7:5c:e5:44:10:e3:4b:99:38:f0:e0:1d:
                    15:37:6c:0e:8e:09:88:db:ef:03:bb:2b:ec:d4:4d:
                    4c:b8:bc:ed:29:7a:bc:5e:5f:a8:ed:8a:98:5c:e6:
                    c5:43:25:0b:96:f8:8e:8b:6d:a0:8c:95:b0:48:b8:
                    dc:22:38:77:54:a3:50:c9:5d:1e:42:18:1d:dd:ab:
                    62:c7:b7:04:31:34:a3:65:ee:af:e8:bd:e9:89:1c:
                    7d:b7:0f:e7:68:25:5a:24:90:91:15:12:e1:d0:f5:
                    8e:75:1c:0f:26:fc:9b:b0:f7:4c:b3:11:d6:b6:46:
                    c0:7d:0c:6d:1b:6c:75:2e:0a:91:55:1f:b6:ee:1f:
                    37:0f:e7:6a:6e:ed:82:2f:a4:96:65:d3:5d:19:08:
                    86:ea:73:4e:cd:65:fe:3d:b3:57:2d:12:77:4a:8c:
                    37:b9:ab:18:88:84:1f:67:a9:d4:1e:83:2f:56:6b:
                    21:24:c1:8a:c1:b9:3c:d3:71:8a:a4:cb:8a:b8:e6:
                    91:bb:98:a9:ad:c8:67:07:b4:78:32:d3:ba:1c:5e:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:34:A9:EE:96:D7:E1:00:99:FD:0D:62:95:07:88:B8:25:42:7D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B5C6830F7E411F0BC40B9ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:57:a4:da:68:8c:dd:f5:03:5a:df:22:1b:fb:18:72:be:33:
         32:fb:da:fa:42:0d:88:16:e8:33:27:3d:c1:82:eb:1c:f5:b1:
         d7:47:96:3c:26:9b:63:88:52:fa:24:21:92:fa:58:5e:98:e5:
         de:6b:6b:34:ea:2d:ae:08:b7:18:d1:a4:5c:f5:f8:ab:7b:a7:
         0a:d8:48:ea:39:00:ba:18:2a:a5:14:0c:e4:60:a1:f1:89:2f:
         3b:cd:d3:52:81:a8:78:20:7c:20:19:4d:bd:30:8a:39:ef:d2:
         8a:5d:57:ae:03:7e:5d:44:3c:da:f0:5d:65:0f:27:d2:0c:7f:
         a8:80:e0:1a:a8:56:ca:ea:be:8e:20:9e:90:3b:ea:48:0e:e7:
         68:77:14:05:60:b5:c2:4c:4a:01:45:49:8b:3b:3b:d5:c1:b3:
         16:ac:a9:ff:3f:61:2e:19:2a:53:0f:23:18:50:4f:89:62:a5:
         1b:f6:3e:0a:31:c6:d7:53:9a:ed:97:76:57:e8:bc:fa:6f:15:
         6d:ed:f2:2e:10:ae:b8:86:fd:4c:ee:7d:e5:33:d8:28:3d:2f:
         8c:8f:ed:dc:96:2f:54:4e:50:9c:43:30:dd:fd:02:4b:de:42:
         99:fd:38:3e:05:95:5f:66:a5:11:65:5d:2b:69:2a:83:a8:41:
         06:52:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:50:01 2026 by rpki-client