This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD3048EEF8011F0BB7769CCDAE4EC9C.roa
File:                     AAD3048EEF8011F0BB7769CCDAE4EC9C.roa (raw, json)
Hash identifier:          t+a9ILvE7o1tpeq8HobhkQgo6Va1Tc14fuc63asfQxk=
Subject key identifier:   76:75:5F:7B:A4:AE:EE:75:64:4F:38:C6:E9:4D:C6:F8:2C:D3:F6:66
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B448
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD3048EEF8011F0BB7769CCDAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 06:33:55 +0000
ROA not before:           Mon 12 Jan 2026 06:33:51 +0000
ROA not after:            Tue 17 Feb 2026 06:33:51 +0000
asID:                     214120
IP address blocks:        154.199.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111688 (0x1b448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 12 06:33:51 2026 GMT
            Not After : Feb 17 06:33:51 2026 GMT
        Subject: CN=696495d3-65c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:c0:fa:4e:fa:cc:b3:22:f9:cc:19:58:e7:
                    be:19:21:c9:79:ba:2c:62:28:3d:06:ae:19:85:02:
                    10:63:57:4e:88:ea:75:5c:82:60:e2:ba:be:e5:e4:
                    81:f4:18:21:75:1b:76:92:1f:16:b7:ad:2e:8e:55:
                    d3:b1:30:cf:4b:25:00:64:8f:29:2f:7a:39:92:1c:
                    70:28:fe:71:67:f6:90:e9:91:53:5f:28:5c:bd:65:
                    a4:9b:a6:8e:84:04:e1:b1:d0:92:8a:d8:f8:7d:69:
                    ac:20:b3:2e:f3:94:29:5c:3c:98:7d:35:11:21:10:
                    18:e8:65:4e:20:5a:72:34:c4:46:fc:16:12:49:a1:
                    51:92:86:d6:78:d2:26:74:aa:a7:aa:3d:be:10:28:
                    68:f5:69:f7:5e:bc:97:04:6e:c4:7f:c6:64:8e:65:
                    a6:1b:45:42:1f:f8:29:36:0a:71:8a:2e:63:f7:7e:
                    6d:e8:6d:e5:8a:10:4a:ec:36:70:10:fb:6e:ac:5f:
                    8c:91:72:db:73:84:4c:07:32:ec:27:13:f6:8b:72:
                    5d:84:5d:9a:49:f9:61:14:31:9d:52:14:79:ba:fb:
                    2d:2f:32:94:dd:18:0a:06:25:f4:65:d8:2d:6c:b9:
                    74:4f:19:ee:62:1a:b8:4e:37:9f:b4:45:3e:d2:87:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:5F:7B:A4:AE:EE:75:64:4F:38:C6:E9:4D:C6:F8:2C:D3:F6:66
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAD3048EEF8011F0BB7769CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:55:ae:46:0e:56:f6:47:d2:ce:fc:88:fc:15:52:a5:4d:e4:
         23:37:33:d1:c7:86:0c:0a:16:82:19:b2:f9:15:e1:e5:c9:18:
         96:d9:0d:2d:65:91:10:c9:94:77:ca:3f:7a:ad:fc:15:9c:2d:
         fb:fc:19:5a:1a:46:15:09:45:7a:08:2c:f6:c7:c6:25:fd:53:
         e8:03:e2:7e:d8:d9:67:92:d4:94:36:20:fc:dc:de:b3:b0:98:
         82:66:63:0e:3b:24:95:bd:e2:82:92:c8:41:40:79:da:c5:d9:
         69:b1:43:4f:2d:08:cc:f1:f4:2f:57:33:e8:18:93:7e:cd:aa:
         35:8f:a7:e0:de:68:40:47:2d:0f:5e:53:6c:e8:b4:8e:06:43:
         2c:af:6e:55:98:7b:14:3e:f6:51:7d:0b:e7:04:6d:fc:ec:3d:
         7d:65:f2:ef:21:81:36:4d:53:5d:08:84:d6:ed:c0:f9:fa:e6:
         d7:b2:2d:9a:4c:82:64:2f:aa:08:fc:e9:14:a1:35:94:c2:12:
         e6:56:16:fa:cf:af:6e:a7:25:3a:6e:c6:86:e4:18:f2:cf:c1:
         38:58:f8:91:65:db:5e:67:86:d5:99:9e:c3:0b:64:a6:cd:89:
         12:29:e8:ad:93:88:55:aa:92:a3:6b:94:34:64:1d:df:4a:e2:
         c0:ef:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:41 2026 by rpki-client