This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6646B66E55F11F0900B02F0DAE4EC9C.roa
File:                     A6646B66E55F11F0900B02F0DAE4EC9C.roa (raw, json)
Hash identifier:          ZIHwSIubX6QL0vYMboFazAc3pUNRmi0ZASu+75M/vsc=
Subject key identifier:   4D:0E:1C:CE:FA:98:DE:5B:87:33:F6:38:15:6D:83:F9:31:DB:17:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6646B66E55F11F0900B02F0DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 09:12:23 +0000
ROA not before:           Tue 30 Dec 2025 09:12:18 +0000
ROA not after:            Fri 30 Jan 2026 09:12:18 +0000
asID:                     18013
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111050 (0x1b1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 09:12:18 2025 GMT
            Not After : Jan 30 09:12:18 2026 GMT
        Subject: CN=69539777-0ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:c1:29:a8:2b:24:9f:17:af:f5:b2:d0:cc:
                    d0:79:4a:bd:18:4f:8b:fa:96:00:4a:c6:6c:b7:96:
                    b3:12:1a:d9:44:55:9b:10:7c:c9:4e:36:2b:c6:3d:
                    e6:4a:5d:72:53:ea:2c:f6:3e:37:f3:85:a2:0c:fb:
                    69:05:fd:30:ac:bd:09:ff:94:40:e2:17:c1:8f:c4:
                    ce:db:62:f3:23:c0:4c:e3:c7:27:55:58:fa:50:cf:
                    de:02:1f:b6:b7:a5:1a:a2:83:74:b8:08:e3:d7:b4:
                    3d:2f:1a:01:50:58:87:7b:d8:de:4d:67:2e:2d:5e:
                    fa:4b:fb:af:8f:ed:bc:bb:b7:af:a6:eb:4f:6a:aa:
                    81:32:11:65:77:cc:73:3c:c6:2f:b9:d8:3d:c7:ed:
                    c4:64:36:c7:5f:3b:82:3d:c4:64:9b:3b:51:cd:f7:
                    ac:b4:23:a4:18:4e:e5:4f:9c:af:1d:6d:e6:72:a0:
                    37:c1:e2:97:1e:54:65:86:9a:d7:96:81:2c:d1:73:
                    0d:fb:95:5b:27:20:d6:7f:0b:8e:5e:cf:9f:fc:d3:
                    9c:94:c1:22:10:52:ca:ef:94:84:f1:37:fb:09:48:
                    42:21:30:38:cb:b0:d7:ca:3f:21:16:c5:53:fc:a6:
                    90:ff:39:e2:0e:95:c3:3f:e8:33:de:ad:39:e3:67:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0E:1C:CE:FA:98:DE:5B:87:33:F6:38:15:6D:83:F9:31:DB:17:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6646B66E55F11F0900B02F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:30:b3:db:62:7c:13:77:3c:a9:c2:1d:10:2c:e5:d7:8b:
         45:ee:7e:f7:43:26:ca:8b:f4:aa:f2:b3:52:6d:2e:74:fc:42:
         66:45:f2:34:34:1f:8b:00:d7:58:1c:d4:24:ac:2a:cf:e2:37:
         99:f3:e6:cc:74:e5:9a:7b:d6:47:19:c5:62:fe:0f:c8:88:e8:
         29:5e:4e:5e:ef:d9:12:6e:b3:f6:61:b5:52:b3:97:39:8b:10:
         9d:9c:c5:26:99:39:73:25:55:fb:a5:67:07:df:53:73:3d:2a:
         f5:15:32:9c:14:f4:27:80:70:8c:8a:ca:19:26:00:81:d3:30:
         de:d9:c3:6f:45:5c:f0:24:c9:a4:af:93:e0:42:39:6a:fe:fb:
         f8:eb:7c:a7:47:9a:66:64:9d:51:a3:65:a7:8b:5e:b0:17:f8:
         7f:f6:22:31:d9:09:60:15:f7:62:40:32:e4:16:1c:c6:c4:ac:
         23:52:67:29:31:2f:5a:e2:7c:34:ba:6f:72:72:d8:cb:44:3c:
         31:b2:25:c7:76:f6:72:f4:1c:cf:66:0c:8d:ae:6a:df:c6:a2:
         51:68:1e:a2:1d:45:b5:bc:43:1b:32:d6:00:3c:21:4c:c1:f1:
         3c:5b:86:42:0c:6d:56:fd:58:7e:c1:aa:d4:ad:a5:ce:a3:38:
         c4:cf:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:16 2026 by rpki-client