This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73B99EF3E311F08D37A890DAE4EC9C.roa
File:                     BA73B99EF3E311F08D37A890DAE4EC9C.roa (raw, json)
Hash identifier:          8AmV7pkzTYPvLkgnlIWKIBzU47Arn2NjqA6PY9+nsQk=
Subject key identifier:   85:1D:B4:B8:9A:0A:3B:20:65:7D:BF:71:C3:06:2C:7E:A5:D4:6A:7C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B533
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73B99EF3E311F08D37A890DAE4EC9C.roa
Signing time:             Sat 17 Jan 2026 20:33:06 +0000
ROA not before:           Sat 17 Jan 2026 20:33:01 +0000
ROA not after:            Tue 24 Feb 2026 20:33:01 +0000
asID:                     18013
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.95.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111923 (0x1b533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 17 20:33:01 2026 GMT
            Not After : Feb 24 20:33:01 2026 GMT
        Subject: CN=696bf202-185b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:94:35:13:10:b8:7f:d3:5c:fe:56:ed:9a:
                    cd:16:52:49:56:88:91:b0:05:c7:96:26:ae:5e:e1:
                    69:5c:de:53:94:33:d9:58:2d:39:f4:42:56:f8:ff:
                    81:5f:3a:26:03:4b:25:29:4c:07:af:31:c0:52:d9:
                    0d:bd:4f:1c:bc:36:7a:27:65:03:94:2a:37:aa:15:
                    9f:1a:b0:17:2e:e6:d4:2b:5d:7c:18:1e:91:cd:54:
                    b0:72:91:2f:c5:2c:e4:2a:56:3f:08:fe:20:1c:59:
                    11:43:fe:56:b5:0d:db:fd:76:a9:99:91:16:86:f6:
                    1b:0d:93:8c:4e:86:ad:16:6d:9a:aa:c1:b1:b9:1a:
                    86:b2:fa:b4:d8:2a:2a:67:6b:d3:bd:5b:57:e7:d1:
                    e2:c7:ad:5e:02:4b:55:6a:2f:3e:f4:0f:02:89:9e:
                    f2:e9:10:10:76:e7:d2:cc:4b:c4:15:6b:2b:3e:1e:
                    57:9a:f7:05:12:3c:fa:99:26:6e:1e:71:65:97:36:
                    ec:52:ea:47:0d:b2:a9:81:e3:18:2b:d1:cc:c1:89:
                    6a:3a:21:5a:f1:12:81:61:e9:81:47:61:93:db:b4:
                    ba:e8:fc:a2:31:1b:89:ae:a3:a0:9b:96:cb:e6:d6:
                    88:50:0e:48:30:32:88:d1:86:ea:0b:eb:68:9f:9e:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1D:B4:B8:9A:0A:3B:20:65:7D:BF:71:C3:06:2C:7E:A5:D4:6A:7C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA73B99EF3E311F08D37A890DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.191.255
                  154.95.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:da:cd:6e:86:6e:af:90:2d:25:f8:15:50:9e:30:eb:ef:
         e9:0b:48:17:e2:23:cd:cf:0d:58:63:84:84:9c:a9:bc:9e:e3:
         fc:f7:d6:d6:00:73:cd:01:2f:6e:bb:17:ec:1a:bf:c1:be:ae:
         3d:06:46:44:b7:aa:83:3c:f2:85:7f:ce:d0:04:2e:75:42:3d:
         9b:35:96:7a:ea:e1:9f:2f:e0:e1:9f:00:d9:24:28:7d:67:d7:
         69:84:7d:ae:64:d0:d0:e6:b4:5b:81:ac:a5:eb:33:e8:ac:9f:
         8f:92:27:4f:46:b2:e7:41:e4:9d:f5:37:c3:63:03:96:46:29:
         c0:e8:77:fb:20:09:1d:b3:01:27:96:f9:b9:dd:6e:5c:8e:a8:
         76:45:f5:00:4f:0f:13:48:a9:1a:d1:70:a4:44:40:3d:76:bb:
         cf:f2:1b:24:00:39:30:a4:37:55:4f:9e:1d:64:c6:1a:af:fd:
         b7:60:20:c6:2d:35:d2:86:f1:92:bc:92:f9:d8:c7:95:1e:92:
         cd:90:98:d5:d4:75:59:03:7d:49:98:a7:c6:d3:c4:2d:f5:52:
         47:7b:a4:61:70:7d:c7:ef:9c:52:18:4c:96:06:f8:59:7a:49:
         52:f8:0c:c2:de:c1:24:cd:44:5c:36:0c:b4:33:4d:e2:19:6a:
         8e:1e:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:10 2026 by rpki-client