This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B32C4E84E39011F085AFA0B2DAE4EC9C.roa
File:                     B32C4E84E39011F085AFA0B2DAE4EC9C.roa (raw, json)
Hash identifier:          kMGT9gZI3iwKWxdBP50RkwqXcXQQwwmjlhL97+xtPNE=
Subject key identifier:   85:54:1B:9B:88:51:62:FB:04:8E:A3:06:A8:4D:7E:64:50:BC:3D:97
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B181
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B32C4E84E39011F085AFA0B2DAE4EC9C.roa
Signing time:             Sun 28 Dec 2025 01:58:27 +0000
ROA not before:           Sun 28 Dec 2025 01:58:23 +0000
ROA not after:            Tue 10 Feb 2026 01:58:23 +0000
asID:                     215691
IP address blocks:        154.202.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110977 (0x1b181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 28 01:58:23 2025 GMT
            Not After : Feb 10 01:58:23 2026 GMT
        Subject: CN=69508ec3-2a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:e5:60:76:e0:20:ae:52:5c:2e:f7:60:7a:
                    cd:58:0c:46:a5:d2:e2:a0:50:fc:f6:8d:17:8b:c0:
                    fd:d9:4f:a2:d0:ae:e7:9f:b4:84:59:61:d1:a9:62:
                    27:7e:50:b1:96:0f:79:0a:60:3a:90:cb:38:7c:d2:
                    f5:35:2c:05:5b:63:33:24:a3:c8:91:c2:a9:71:16:
                    7d:c9:09:82:35:f8:7d:39:63:69:06:8d:00:f6:bf:
                    43:37:fa:c2:fb:92:b9:ac:86:48:9f:5e:45:05:bf:
                    20:11:59:95:47:e0:e4:f6:59:dd:99:a0:df:d2:bd:
                    b8:53:9a:d8:31:eb:26:6b:a5:37:00:18:13:57:a3:
                    a3:b1:dc:09:cb:70:79:5c:92:13:fe:ab:02:4e:c9:
                    9d:c4:29:8e:b7:10:e9:5f:15:e7:de:7d:81:9f:1a:
                    3b:73:8c:cc:6c:3e:a8:2b:d7:9a:82:0f:74:49:72:
                    07:89:c1:d1:ee:d7:18:f9:28:46:d7:38:80:29:8a:
                    db:45:71:d8:4d:7b:3e:a9:36:41:fe:3f:31:85:0b:
                    1a:7b:f2:57:0e:54:b0:15:65:3b:3a:0d:fb:eb:ff:
                    12:a1:c2:ce:de:5d:d8:f5:69:5c:cd:7c:a1:09:a1:
                    12:4f:a7:75:4b:ce:b9:bc:98:fd:6c:8c:5d:94:85:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:54:1B:9B:88:51:62:FB:04:8E:A3:06:A8:4D:7E:64:50:BC:3D:97
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B32C4E84E39011F085AFA0B2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:22:22:eb:45:d2:53:f2:7c:96:0a:2f:75:39:bf:1a:a5:b9:
         fb:6e:17:c8:82:40:bc:ce:fb:3c:11:e0:8c:25:20:c6:13:65:
         15:7a:0e:17:bc:55:bb:a2:7f:c9:8f:1f:73:72:6f:c9:6e:96:
         a5:26:7c:a1:80:28:ce:39:84:ea:4b:18:77:e9:99:25:ae:6b:
         b7:08:91:e2:ee:51:83:64:e8:b9:36:4c:bc:5b:28:3e:15:89:
         69:8c:45:ef:be:1b:11:5f:1f:c5:bd:7e:36:ba:13:a7:80:00:
         86:56:8c:a7:0a:f4:41:0c:60:4c:ee:a0:61:79:eb:c3:b7:7b:
         ad:7b:90:9d:62:d6:4d:64:04:51:97:11:14:d0:93:0f:23:15:
         9b:d6:6b:d3:a2:62:c7:5a:50:94:15:74:e1:0c:65:2d:06:54:
         b0:21:a0:f0:30:06:ca:da:78:f6:79:3f:4d:d1:19:6b:38:57:
         3c:3c:f9:84:52:41:93:ed:b1:be:24:34:d6:61:b2:1e:1f:52:
         82:8f:fd:e5:fc:80:7d:b1:1f:9d:b1:32:0d:5e:61:67:39:e2:
         f6:e3:a7:ac:21:aa:15:55:bc:2c:84:54:5d:9e:36:7e:92:26:
         fa:9b:29:bf:7e:bb:3a:53:84:2d:b0:fb:30:7b:5d:9e:c7:b5:
         6a:37:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:39 2026 by rpki-client