This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D3AACAE70511F087BE7496DAE4EC9C.roa
File:                     A0D3AACAE70511F087BE7496DAE4EC9C.roa (raw, json)
Hash identifier:          8CCu/iuxgspEtNKXscXZeEtku67lN6Z8VEekCtl+Bwg=
Subject key identifier:   E5:ED:94:A7:16:4B:E0:BA:64:F5:79:C3:77:FE:70:B6:9E:8E:EC:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B296
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D3AACAE70511F087BE7496DAE4EC9C.roa
Signing time:             Thu 01 Jan 2026 11:33:01 +0000
ROA not before:           Thu 01 Jan 2026 11:32:56 +0000
ROA not after:            Tue 10 Mar 2026 11:32:56 +0000
asID:                     23674
IP address blocks:        154.192.0.0/16 maxlen: 24
                          154.192.0.0/18 maxlen: 24
                          154.192.32.0/24 maxlen: 24
                          154.192.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111254 (0x1b296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  1 11:32:56 2026 GMT
            Not After : Mar 10 11:32:56 2026 GMT
        Subject: CN=69565b6d-51ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:ab:aa:c4:86:a5:1c:16:d3:a4:90:3a:81:
                    7c:7a:09:ae:21:b6:b3:ff:09:cd:05:b1:e1:ff:7d:
                    1c:d2:b9:6e:76:ed:43:3c:be:87:c2:0e:f2:9a:f2:
                    6f:c9:6d:be:7a:e9:11:c6:9e:1e:f3:db:d7:4c:89:
                    9f:a9:e5:f5:09:e0:10:0d:f5:a2:20:71:d8:1a:02:
                    59:7f:b5:5d:33:cb:3a:7a:86:c5:79:37:65:64:85:
                    c7:fd:dc:7b:51:a6:74:78:32:ce:f9:cc:4f:0a:e6:
                    19:ef:e6:44:f4:73:8c:01:16:c1:20:4f:fd:0c:10:
                    a0:44:d7:ff:20:2c:3d:76:bf:6e:18:65:a0:83:29:
                    a0:2c:bd:e8:de:bb:2b:0b:57:5b:db:d5:b9:07:fa:
                    84:c7:27:05:83:a0:62:ec:b9:8d:75:5e:cf:b7:aa:
                    70:51:4c:6e:71:41:fa:1c:80:41:0e:cd:0c:39:e7:
                    1b:75:de:72:b5:3b:09:48:1f:26:c9:4e:2d:62:1a:
                    b9:89:90:af:74:4a:55:d3:61:d1:4b:51:91:d1:00:
                    c7:e7:9d:aa:51:dc:0a:c4:03:d2:74:af:fc:11:c0:
                    03:61:08:42:c3:1e:ca:9f:8f:44:cc:ee:57:4f:00:
                    fc:86:43:53:9f:cc:ec:5a:ae:17:de:60:3a:07:c7:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:94:A7:16:4B:E0:BA:64:F5:79:C3:77:FE:70:B6:9E:8E:EC:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D3AACAE70511F087BE7496DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:ef:35:4c:61:81:b9:14:7d:68:53:b0:e2:52:c2:4b:03:58:
         bb:4c:0a:98:04:9c:1a:03:51:b5:a9:97:6e:10:18:4c:58:74:
         0b:e2:61:32:d4:42:d2:ce:18:ae:ac:16:02:1c:bf:50:e8:98:
         ae:b9:e2:6f:59:bf:56:45:49:83:07:75:a2:1b:7f:39:36:d6:
         07:c9:06:c0:92:f6:f0:cb:22:de:ce:6d:35:47:52:c8:5e:50:
         12:03:7d:bb:87:aa:c8:e9:09:5e:e4:ef:af:38:5b:fd:4b:d1:
         bf:4e:8c:68:f4:86:6a:02:b0:d0:4d:80:eb:55:34:05:7a:1e:
         ee:13:94:39:cb:72:d2:a4:6e:a8:b8:a3:b3:b5:04:c9:0e:37:
         86:52:b1:d1:4b:98:2b:c2:e7:3e:57:7b:78:63:87:16:fc:70:
         1c:b5:76:ce:5b:ab:6d:93:56:42:55:af:1c:0b:cd:2a:06:69:
         a6:c2:4e:f3:ee:b1:71:98:64:f7:ca:35:db:37:05:1b:75:3b:
         98:b8:f4:31:5c:c3:1b:7c:d5:75:55:66:12:0f:18:24:5d:6d:
         38:e0:d6:eb:bb:d7:3a:b9:d3:b5:06:bb:d0:1f:fa:44:f9:e8:
         b0:fc:f7:c8:01:79:3d:e3:a6:bd:86:ff:72:ca:e9:23:02:f5:
         44:c4:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:57 2026 by rpki-client