This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF734030F2C711F08902F2CCDAE4EC9C.roa
File:                     BF734030F2C711F08902F2CCDAE4EC9C.roa (raw, json)
Hash identifier:          TW72mrQNtziRwh5Td7xn5QIO4f2EH69+DXlghIWVJ0A=
Subject key identifier:   B0:F5:71:91:D0:8E:CA:70:44:E1:68:53:CB:0D:9C:E5:E7:E3:54:26
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF734030F2C711F08902F2CCDAE4EC9C.roa
Signing time:             Fri 16 Jan 2026 10:40:18 +0000
ROA not before:           Fri 16 Jan 2026 10:40:13 +0000
ROA not after:            Thu 23 Apr 2026 10:40:13 +0000
asID:                     20473
IP address blocks:        154.81.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111864 (0x1b4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 16 10:40:13 2026 GMT
            Not After : Apr 23 10:40:13 2026 GMT
        Subject: CN=696a1591-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:73:b6:d6:1d:ae:f5:e6:8c:6d:17:df:04:
                    40:a8:2b:c1:73:7c:30:90:c0:9d:e4:c4:cb:75:30:
                    3b:1c:d5:87:80:7f:11:66:a4:8a:f7:12:f7:29:f9:
                    bc:43:92:de:9b:76:d1:1e:ef:99:cb:f2:ee:13:f2:
                    45:99:d6:95:ab:e6:d9:99:77:76:0b:02:ed:ee:b0:
                    65:e0:c9:fc:6c:01:09:be:a2:d6:d1:dd:dd:48:64:
                    25:84:e3:48:9f:be:2e:5b:f2:d0:79:a7:a3:0c:dc:
                    37:4d:2f:fb:56:81:47:28:8d:d0:06:9e:9a:d5:d6:
                    0b:c7:b9:fe:37:25:65:e8:ce:25:50:aa:aa:4c:8c:
                    fe:45:aa:b5:7b:27:7a:52:f2:3c:08:5a:ad:21:9d:
                    8d:02:c9:0b:44:e4:ff:80:c0:02:c9:c6:07:3e:58:
                    c2:42:cf:3f:f6:42:b1:6c:38:3f:3e:c9:8e:68:25:
                    b5:d2:50:b6:33:d8:ba:27:ee:b3:4e:e6:f2:85:80:
                    a5:5b:0b:8a:ab:30:4f:04:ec:05:b7:b1:0e:77:53:
                    ba:b7:e2:47:0a:65:e2:29:6d:9c:d2:1d:d0:fb:2d:
                    a8:e1:85:4f:af:b5:39:c5:46:20:20:36:5c:e8:fa:
                    10:f1:29:0c:fe:dd:22:9c:e3:b8:fa:80:23:d1:11:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:71:91:D0:8E:CA:70:44:E1:68:53:CB:0D:9C:E5:E7:E3:54:26
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF734030F2C711F08902F2CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:ed:c3:a5:68:f5:17:5a:3f:f8:4f:af:91:63:97:6d:72:
         86:cb:a8:cc:66:e3:25:fb:55:a3:7b:25:49:4d:f1:fe:1f:19:
         e4:0e:90:25:8d:ca:1b:bb:73:38:5a:76:ad:20:19:4e:1f:b7:
         72:31:22:62:12:d7:52:78:da:6b:05:a9:ca:a0:91:0b:29:30:
         7e:59:90:2c:c3:33:f7:ea:fc:2a:17:ea:14:7b:50:2a:ad:7b:
         a8:30:e0:24:b8:37:ad:54:14:e6:0e:b0:be:35:29:44:f8:a8:
         a2:f0:06:bc:7c:29:0c:e9:eb:27:90:31:76:0b:2e:88:6e:e7:
         b0:a5:31:07:32:f3:22:ea:d0:91:a6:f5:eb:00:88:9f:54:91:
         76:1f:f1:4e:e2:d2:82:ff:b4:db:30:f0:75:03:ee:63:bd:29:
         69:19:ae:c1:59:53:1f:0e:71:93:21:b2:b4:64:fc:5c:dd:1d:
         52:1a:1f:c9:23:59:51:59:1d:d9:e6:3e:b6:9f:e0:e3:ac:af:
         41:16:aa:32:1a:df:f5:9c:cc:5a:8f:77:20:72:26:ce:28:0f:
         49:78:4a:2a:c6:71:b7:c2:5f:b6:2c:db:87:17:bb:1f:1b:b8:
         f0:8d:01:39:50:58:6e:45:98:55:2b:9f:9c:b8:21:48:95:30:
         18:5d:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:49:49 2026 by rpki-client