This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27807ACE49911F0AC4410B0DAE4EC9C.roa
File:                     C27807ACE49911F0AC4410B0DAE4EC9C.roa (raw, json)
Hash identifier:          GEdURVXjqsWMr/aLJO4dgrca6O3GojqboKSnHOdH4iQ=
Subject key identifier:   32:C7:EC:1C:52:8F:16:7C:1F:7F:C1:46:F4:F5:3B:52:53:F0:1C:DC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27807ACE49911F0AC4410B0DAE4EC9C.roa
Signing time:             Mon 29 Dec 2025 09:35:51 +0000
ROA not before:           Mon 29 Dec 2025 09:35:44 +0000
ROA not after:            Thu 05 Feb 2026 09:35:44 +0000
asID:                     271988
IP address blocks:        154.88.160.0/20 maxlen: 24
                          154.88.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110992 (0x1b190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 29 09:35:44 2025 GMT
            Not After : Feb  5 09:35:44 2026 GMT
        Subject: CN=69524b77-8743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:c9:23:a9:67:37:79:0a:98:d6:f5:a9:01:
                    8f:39:a2:5b:2b:58:4e:e7:ce:33:fa:1a:86:7b:46:
                    16:b1:46:1a:d7:a9:2d:b3:ec:75:11:f7:41:b6:00:
                    f1:a4:c1:84:1f:ce:8a:d3:6a:47:6a:0a:68:d2:ac:
                    e8:81:60:eb:a7:cc:ac:17:39:00:a0:f1:f0:92:22:
                    67:d9:82:ba:ef:7f:36:73:bf:c1:dd:06:bd:fa:42:
                    02:57:10:1f:c9:85:bc:01:29:45:30:d6:b0:09:e4:
                    ee:ae:8a:9e:6f:55:4b:0d:bc:b9:78:4b:c0:23:ee:
                    af:5c:00:bf:9a:2e:d6:ad:95:4d:63:85:8f:1d:ca:
                    28:52:59:c7:8f:70:c2:d5:ed:3a:0f:44:09:2d:b6:
                    e3:a5:db:e2:96:33:ea:c2:2e:65:bb:85:20:a9:9f:
                    1a:5b:ce:e1:ff:ef:9e:3e:51:e7:32:b6:7f:4b:7c:
                    3c:45:74:ea:6c:bd:01:ef:96:9f:b1:9f:c3:9f:96:
                    8f:db:52:02:a9:c6:c2:5f:93:47:18:55:a2:37:d0:
                    4f:f6:0b:b1:3c:5e:9d:e6:ab:43:9f:40:28:b4:20:
                    ce:59:8d:c2:9a:9e:3b:db:6f:56:a2:10:18:7c:97:
                    0e:fb:59:b0:8e:ca:6f:2c:18:6c:1c:e1:8b:69:c3:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:EC:1C:52:8F:16:7C:1F:7F:C1:46:F4:F5:3B:52:53:F0:1C:DC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C27807ACE49911F0AC4410B0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.160.0-154.88.179.255

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:3c:92:07:6d:cb:2b:cd:e3:f1:70:26:71:16:ad:2a:bc:
         ed:d6:33:57:50:8e:ba:7c:a0:ac:ff:a6:9e:1c:a8:cd:8c:6c:
         42:0a:ae:6b:0f:01:f3:89:83:32:98:58:c9:78:98:8f:e0:c9:
         1d:75:5d:f5:52:3a:0a:1c:84:96:2c:a6:d1:86:59:87:8e:5b:
         67:15:ed:37:40:88:80:e8:ef:87:95:4e:ff:c9:29:fd:b4:7c:
         35:19:51:47:ba:52:6c:a0:68:91:de:0e:cd:47:9a:1a:02:87:
         b4:80:fe:0b:f3:e6:8c:0a:11:40:df:cb:f7:4d:4e:06:09:63:
         2a:16:a6:58:bb:48:78:57:58:8a:fb:d4:5e:c7:23:c7:59:4c:
         6b:ab:e5:64:02:1e:80:90:56:4a:28:48:2f:6f:25:66:f5:a5:
         44:ea:3a:41:4a:c5:db:78:7b:2e:2a:58:35:ea:50:c0:4b:f7:
         ce:9f:61:d6:dc:10:62:17:ab:d0:8e:57:d6:b1:da:25:83:69:
         fc:e7:55:c7:e2:b7:c9:a6:91:47:b2:02:cb:cd:84:46:52:6b:
         30:d9:bb:eb:8d:22:22:97:40:d1:89:ed:c0:77:b5:10:39:81:
         65:1e:14:2f:89:93:3e:5a:f3:16:dc:44:9f:36:15:f3:6a:e0:
         58:03:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:40 2026 by rpki-client