This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A745AABAE49A11F0AF6921B6DAE4EC9C.roa
File:                     A745AABAE49A11F0AF6921B6DAE4EC9C.roa (raw, json)
Hash identifier:          KPr7YKdkJzWXGktiUK3Wzea1mA0bWWNTyLAAtvOGFO0=
Subject key identifier:   62:BF:8F:1E:BE:88:CE:F8:E7:E3:37:70:EC:98:58:95:AF:0E:97:56
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B195
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A745AABAE49A11F0AF6921B6DAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 09:42:13 +0000
ROA not before:           Mon 29 Dec 2025 09:42:09 +0000
ROA not after:            Thu 05 Feb 2026 09:42:09 +0000
asID:                     264605
IP address blocks:        154.88.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110997 (0x1b195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 29 09:42:09 2025 GMT
            Not After : Feb  5 09:42:09 2026 GMT
        Subject: CN=69524cf5-d0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:dc:11:49:1d:39:d5:34:34:eb:f9:39:84:
                    5a:3c:6d:f5:00:b9:b9:06:0f:d4:a6:34:22:78:84:
                    7e:9e:1f:00:55:47:da:31:2b:05:b8:c4:d1:49:96:
                    fe:5e:13:7f:a6:39:f8:67:27:37:dd:39:4c:c2:51:
                    36:02:5c:5c:a5:29:6c:75:b0:2d:b2:bb:44:be:47:
                    eb:23:e5:df:ee:f3:00:64:03:81:a7:28:fe:fa:fc:
                    3d:56:ac:bd:16:fe:2f:6f:9d:38:6c:6b:92:04:83:
                    44:50:b8:96:dd:4a:32:15:d8:eb:a6:6f:cc:f0:03:
                    be:38:14:40:ce:9a:c4:17:44:42:06:51:df:4f:da:
                    c2:3a:fa:25:ad:71:47:92:86:bc:66:65:0d:16:4b:
                    95:50:83:c1:70:9e:aa:13:0e:fe:5f:76:46:66:9d:
                    02:34:39:34:10:26:61:df:8d:3a:d6:5e:8f:c4:c6:
                    d2:50:72:d6:17:d4:32:2f:24:10:2d:34:01:da:d2:
                    4e:29:ef:8e:d7:84:90:11:4a:42:7e:84:a5:cc:bd:
                    d5:98:eb:db:69:22:2b:52:c5:a8:41:1e:23:66:8d:
                    d0:cc:e6:db:8e:4c:8c:c0:85:be:82:35:31:d6:60:
                    81:0c:f3:46:d5:ba:b5:ed:7e:a4:79:77:7c:79:ba:
                    bd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:8F:1E:BE:88:CE:F8:E7:E3:37:70:EC:98:58:95:AF:0E:97:56
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A745AABAE49A11F0AF6921B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:ec:c5:a2:26:7c:6f:50:cd:e6:65:6f:42:50:25:5e:8a:
         e4:f8:14:d9:d2:55:39:38:bd:46:a1:54:56:95:05:3d:e2:67:
         e1:9c:a4:7e:af:10:08:33:50:26:80:a0:2d:5e:5d:a4:28:9d:
         4b:99:2f:22:6d:ea:3b:e2:d0:e7:46:5e:8c:b6:61:ce:c5:e9:
         46:dd:3d:d8:59:db:9f:1d:10:de:53:03:4f:53:15:91:77:cb:
         01:ad:df:a8:fc:e3:a1:60:29:2d:75:65:9e:43:f6:54:1f:f3:
         58:34:32:a3:2c:d5:78:1d:4d:74:4b:fc:e3:06:ad:14:bf:ec:
         76:4e:6b:92:4e:69:f7:c4:35:2a:e6:d9:ab:58:84:ce:62:9d:
         7d:16:72:be:a0:24:9e:d1:61:15:2c:45:70:23:1b:b8:db:52:
         bf:00:2a:bc:d3:ec:4b:85:42:28:d8:b7:a8:1d:dd:8d:05:c6:
         3c:3b:aa:91:ac:bf:fc:8a:15:13:ec:27:1d:81:d9:0a:57:2b:
         b4:b2:88:dc:38:d2:fb:94:5f:1b:a2:77:97:7f:50:4a:3f:1f:
         eb:8d:51:6c:6d:45:22:d5:fe:b3:f4:c9:c0:d8:a5:d9:41:4c:
         6a:19:b7:0e:fb:9d:41:b5:86:75:9e:01:84:93:2f:c9:d9:51:
         06:d3:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:36 2026 by rpki-client