This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A969D10EE22911F084F071F3DAE4EC9C.roa
File:                     A969D10EE22911F084F071F3DAE4EC9C.roa (raw, json)
Hash identifier:          P7sVqM73VksDwzXfea9Cp34g7ag+RQ85HcIzcHdLgZQ=
Subject key identifier:   E4:B3:0D:CC:31:6D:84:3C:6E:2A:37:C3:24:33:3D:3F:6D:7A:93:88
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B157
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A969D10EE22911F084F071F3DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 07:08:21 +0000
ROA not before:           Fri 26 Dec 2025 07:08:17 +0000
ROA not after:            Mon 02 Feb 2026 07:08:17 +0000
asID:                     209242
IP address blocks:        154.206.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110935 (0x1b157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 26 07:08:17 2025 GMT
            Not After : Feb  2 07:08:17 2026 GMT
        Subject: CN=694e3465-58b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:af:5a:eb:c3:c0:ec:88:fb:cc:f2:8b:e9:
                    e8:73:0b:fe:c2:36:03:39:31:6a:3d:74:e2:34:f8:
                    e5:06:3a:0b:c3:64:21:ba:73:cd:a7:83:f0:7a:12:
                    c6:f5:40:15:df:01:ea:55:a4:b2:3c:b2:0e:de:f1:
                    85:95:5b:42:31:e9:5f:80:f4:a3:bb:9b:e0:bd:2b:
                    59:63:10:94:1c:c0:48:8a:00:6f:cf:5d:43:cb:f7:
                    85:89:b1:97:42:40:60:1d:e7:1c:2f:6d:1e:ab:0a:
                    f6:40:07:7c:13:09:8c:b8:79:23:c7:7a:2c:9f:a4:
                    14:4e:f2:54:be:41:41:4d:fe:e9:fa:70:e8:4d:68:
                    70:d4:d1:10:2c:56:7f:66:38:21:41:f0:8f:83:05:
                    76:a5:77:45:3c:85:ab:22:a0:9c:60:40:fa:02:f8:
                    57:cc:c9:ee:8a:43:bf:da:8e:41:00:32:3d:ca:16:
                    14:38:4c:26:14:46:f4:b4:c8:fb:e3:b3:b7:68:50:
                    3e:a0:cc:c6:5d:9a:04:66:17:45:b1:a7:33:e8:dd:
                    79:f4:d5:b8:70:69:73:e2:68:a7:71:83:2a:aa:d4:
                    7f:09:cd:3c:fb:e6:78:c3:14:a9:1a:77:6c:99:eb:
                    3e:0f:61:fa:12:52:41:32:4d:be:82:0a:4c:fb:2d:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B3:0D:CC:31:6D:84:3C:6E:2A:37:C3:24:33:3D:3F:6D:7A:93:88
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A969D10EE22911F084F071F3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:91:ee:e4:c5:6d:c2:61:04:aa:9d:2e:21:0f:ae:71:2d:c1:
         b6:3a:5a:67:fc:fa:0b:6f:97:64:34:45:30:8c:b6:2a:d0:bd:
         9b:dc:b8:19:70:a0:45:43:77:40:7f:2c:21:10:d1:9f:20:08:
         b2:e2:d9:d6:6d:fe:1c:0d:37:73:73:c8:ec:23:b6:b5:83:1a:
         95:af:4f:0c:4a:f9:e2:db:99:d2:d5:e9:71:09:0e:a3:88:26:
         5c:54:69:02:8b:c9:62:e1:ba:3d:b6:1f:f2:dc:1b:46:c0:03:
         5e:3a:b1:89:22:0b:ae:e5:d2:e4:44:0e:bd:44:77:5d:19:85:
         7b:c0:cb:bd:2b:f9:da:fb:57:6e:06:b2:c1:85:16:37:f3:46:
         46:d1:69:5f:a5:55:54:e0:a5:33:50:06:b3:50:d7:7a:45:75:
         84:98:80:21:5f:f5:64:69:e6:35:c1:06:37:4c:6a:a6:9c:c5:
         37:ac:d4:f6:56:ae:a6:65:f0:af:61:e2:63:61:60:3a:95:37:
         b3:7e:8d:1f:26:f1:b9:e2:48:e8:ce:4f:56:9e:7b:90:3c:bd:
         3c:54:ef:8c:ca:ca:1e:04:d0:a0:c3:ac:62:32:48:f1:23:05:
         3b:1e:4d:37:22:24:4f:fb:58:de:f4:44:1e:75:47:84:89:a6:
         3f:e9:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:49 2026 by rpki-client