This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B7E8D72F96311F0ACF283E3DAE4EC9C.roa
File:                     9B7E8D72F96311F0ACF283E3DAE4EC9C.roa (raw, json)
Hash identifier:          8syFe6j6x2ALEMbbyJM6IjazcKYgk5ubsyjSFc9ZE9Q=
Subject key identifier:   9F:52:F2:2E:89:57:68:02:DD:9A:E6:21:83:63:8B:F1:12:29:10:E5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B69C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B7E8D72F96311F0ACF283E3DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 20:31:06 +0000
ROA not before:           Sat 24 Jan 2026 20:31:01 +0000
ROA not after:            Tue 03 Mar 2026 20:31:01 +0000
asID:                     62240
IP address blocks:        154.196.31.0/24 maxlen: 24
                          154.196.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112284 (0x1b69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 20:31:01 2026 GMT
            Not After : Mar  3 20:31:01 2026 GMT
        Subject: CN=69752c0a-a2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:ee:48:62:df:3c:67:99:ff:00:1f:88:df:
                    ab:84:08:d9:8a:3d:55:f6:10:31:00:77:8c:79:22:
                    57:b6:95:f7:53:37:86:e7:dd:00:a2:65:dd:21:2d:
                    16:99:79:3f:95:13:b8:61:0d:f1:74:6f:ed:98:2a:
                    b6:82:6c:f5:8a:fc:11:d6:78:63:c4:54:f7:fd:09:
                    23:2b:f2:33:b6:65:82:92:e3:fd:3a:d2:0e:01:05:
                    48:72:ce:1a:7f:ce:3b:4a:ce:ab:54:24:11:ba:cd:
                    e4:4f:ab:09:51:4b:6b:d6:79:d3:98:c6:5c:da:d1:
                    7c:f1:c0:97:aa:62:cc:1a:15:fb:fd:e8:50:e7:dc:
                    ca:a5:64:22:21:73:d6:72:2a:b4:9b:c0:14:0f:a6:
                    a8:17:15:40:aa:6d:c5:e6:d2:60:2f:79:9c:3d:8d:
                    d7:dc:7a:77:41:68:7a:7b:bb:6e:b0:86:5b:c6:77:
                    56:20:c3:0c:3c:ff:a0:26:43:8a:15:9d:6e:20:39:
                    87:26:0b:0b:fd:a9:7e:34:db:48:f4:7e:74:34:9c:
                    5a:ba:b1:8f:c0:c0:cb:c0:68:2e:51:a4:f1:69:b1:
                    50:84:48:12:c7:d4:2f:1d:99:dd:c5:96:4e:33:8c:
                    4e:9e:a7:ef:8e:13:ac:be:ca:64:0e:ea:53:4e:3b:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:52:F2:2E:89:57:68:02:DD:9A:E6:21:83:63:8B:F1:12:29:10:E5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B7E8D72F96311F0ACF283E3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.31.0/24
                  154.196.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:da:89:3e:07:0d:0e:fe:2c:c3:90:a8:eb:ef:ac:8f:8b:
         9c:54:c6:2e:cb:98:0e:b8:bf:ba:a8:61:cc:ad:73:ad:fc:15:
         89:5d:50:b9:ef:c5:ea:f5:d7:27:a1:d1:39:b8:09:7c:7e:82:
         5c:5f:07:c8:b1:c8:07:c0:d8:d4:9e:68:d2:97:ce:b7:16:81:
         f6:3b:73:98:36:6a:79:a0:95:71:6f:a6:4d:bd:b4:34:85:ec:
         42:e1:7b:45:a9:a8:45:80:65:3f:ff:6e:db:11:7c:bc:16:df:
         d1:39:57:27:45:c3:8e:c9:6f:10:73:50:4c:41:80:e7:99:a0:
         60:ad:72:51:7e:85:1b:7a:ed:8d:c3:e9:cc:2e:bd:72:0a:cc:
         6a:8b:4d:5d:fb:71:91:ee:e2:2c:22:a7:60:ea:46:39:12:f5:
         5e:f2:8f:4a:14:d8:86:70:76:93:68:15:c7:4b:e8:2b:19:a8:
         ce:93:10:0d:e7:21:11:9a:8a:0c:f7:c5:a8:e2:ec:fb:12:65:
         b4:d2:4c:0c:84:8c:4e:3b:49:79:73:d9:92:38:84:d8:7b:f1:
         6b:9f:10:f3:89:92:7b:64:ea:fe:45:ee:59:d4:07:9c:83:61:
         30:56:d4:55:a5:70:b6:a5:64:b1:5a:6c:2d:5b:b6:17:35:f4:
         b9:da:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:39 2026 by rpki-client