This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB44BAEF5E011F0A76312D5DAE4EC9C.roa
File:                     BAB44BAEF5E011F0A76312D5DAE4EC9C.roa (raw, json)
Hash identifier:          QsVCu8P64aYMlR7S0q8Kpl3gJgHPVcriOviZbkXUOso=
Subject key identifier:   EF:BC:3E:97:88:22:B3:E8:99:0F:A8:65:AB:44:49:20:2E:39:96:DA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB44BAEF5E011F0A76312D5DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 09:16:40 +0000
ROA not before:           Tue 20 Jan 2026 09:16:36 +0000
ROA not after:            Tue 24 Feb 2026 09:16:36 +0000
asID:                     63139
IP address blocks:        154.203.169.0/24 maxlen: 24
                          154.203.170.0/24 maxlen: 24
                          154.203.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112046 (0x1b5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 09:16:36 2026 GMT
            Not After : Feb 24 09:16:36 2026 GMT
        Subject: CN=696f47f8-681f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:7c:3c:88:9a:b4:b8:f0:8b:db:81:8d:cb:
                    92:17:62:8c:1f:17:b3:8c:cb:99:c0:dc:15:cc:f4:
                    62:41:20:f3:7e:cc:06:28:41:cb:e4:2f:02:78:27:
                    b4:7a:a8:0c:51:9d:a6:9c:b1:49:c3:ca:bb:01:27:
                    75:a0:be:8f:f8:e9:b6:5e:10:3d:7c:ad:bd:d0:08:
                    e0:95:4c:bc:ab:b4:a2:15:77:86:fd:ac:8f:8c:c7:
                    c1:c4:7d:29:a6:05:9d:11:71:15:fe:bb:9b:46:b3:
                    39:8c:68:a9:4f:e9:45:92:fd:60:a9:0e:01:0a:62:
                    12:0a:0c:67:1f:91:80:89:a3:13:59:aa:47:81:ab:
                    ea:14:39:0c:c4:b6:8f:6b:74:29:29:2c:2a:84:a8:
                    af:ec:d5:c4:b0:09:40:d2:a5:1d:1d:63:53:7e:cc:
                    01:72:19:df:09:f8:b7:71:3f:e8:d2:6d:62:bc:37:
                    55:a6:c0:df:b1:0f:d0:15:21:00:67:88:51:8d:91:
                    04:1f:95:d9:20:a7:e0:8a:ec:4e:b4:2c:f8:8d:50:
                    99:6e:89:34:d1:d0:13:6f:a3:07:2e:6f:72:bb:66:
                    61:7b:21:63:ba:47:d0:c7:ef:f0:e1:95:fc:4c:c0:
                    dd:8f:cf:53:33:39:88:82:fb:26:0e:6c:34:ad:cc:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:3E:97:88:22:B3:E8:99:0F:A8:65:AB:44:49:20:2E:39:96:DA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BAB44BAEF5E011F0A76312D5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.203.169.0-154.203.171.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:4f:be:45:0a:0e:44:31:b0:76:18:bc:ab:ae:07:7b:4b:
         0f:cc:7a:18:b7:56:33:27:09:68:cb:c5:9a:d2:f4:76:e8:25:
         93:66:1e:af:14:cb:32:ce:26:71:69:b1:ab:a0:00:7f:48:fc:
         65:46:d3:64:de:78:77:d1:e4:ee:1e:f8:05:56:4a:3a:79:15:
         93:3f:8f:a8:3b:08:7e:65:3d:36:f4:b0:0a:d8:e9:cf:74:4c:
         0b:8b:ad:ab:24:86:32:cf:f2:4b:1e:0f:4a:07:e1:ba:d2:e4:
         c5:c0:da:05:f5:e0:b9:1a:e5:e2:c8:4a:fd:b6:e9:bc:6d:01:
         b1:52:7f:d4:33:4a:3b:26:50:37:40:e4:f9:e6:bd:ae:c2:0f:
         ab:f1:90:7e:c4:cb:9d:51:8f:ea:b7:9c:41:e9:9c:bb:4f:72:
         0d:76:13:97:15:98:46:c5:50:14:52:10:66:4f:df:cd:79:d1:
         57:41:76:c0:21:3d:37:6c:00:21:2d:9c:2d:17:f6:73:61:49:
         08:4c:48:c4:e2:e0:1c:41:46:05:5c:21:56:3b:c8:9f:99:51:
         93:90:65:f1:06:63:19:c8:89:fe:28:b2:f9:60:77:98:d4:2f:
         d6:f7:c9:82:2a:3e:77:cb:7b:0d:62:f0:c6:4c:6b:6b:ec:ca:
         36:8a:85:cc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbWuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTIwMDkxNjM2WhcNMjYwMjI0MDkxNjM2WjAYMRYw
FAYDVQQDEw02OTZmNDdmOC02ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1MB8PIiatLjwi9uBjcuSF2KMHxezjMuZwNwVzPRiQSDzfswGKEHL5C8C
eCe0eqgMUZ2mnLFJw8q7ASd1oL6P+Om2XhA9fK290AjglUy8q7SiFXeG/ayPjMfB
xH0ppgWdEXEV/rubRrM5jGipT+lFkv1gqQ4BCmISCgxnH5GAiaMTWapHgavqFDkM
xLaPa3QpKSwqhKiv7NXEsAlA0qUdHWNTfswBchnfCfi3cT/o0m1ivDdVpsDfsQ/Q
FSEAZ4hRjZEEH5XZIKfgiuxOtCz4jVCZbok00dATb6MHLm9yu2ZheyFjukfQx+/w
4ZX8TMDdj89TMzmIgvsmDmw0rcy0KQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFO+8
PpeIIrPomQ+oZatESSAuOZbaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQUI0NEJBRUY1RTAxMUYwQTc2MzEyRDVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACay6kDBAKay6gwDQYJ
KoZIhvcNAQELBQADggEBAKc5T75FCg5EMbB2GLyrrgd7Sw/Mehi3VjMnCWjLxZrS
9HboJZNmHq8UyzLOJnFpsaugAH9I/GVG02TeeHfR5O4e+AVWSjp5FZM/j6g7CH5l
PTb0sArY6c90TAuLraskhjLP8kseD0oH4brS5MXA2gX14Lka5eLISv226bxtAbFS
f9QzSjsmUDdA5Pnmva7CD6vxkH7Ey51Rj+q3nEHpnLtPcg12E5cVmEbFUBRSEGZP
38150VdBdsAhPTdsACEtnC0X9nNhSQhMSMTi4BxBRgVcIVY7yJ+ZUZOQZfEGYxnI
if4osvlgd5jUL9b3yYIqPnfLew1i8MZMa2vsyjaKhcw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:26 2026 by rpki-client