This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4218B00E96C11F0A9EE3EDDDAE4EC9C.roa
File:                     C4218B00E96C11F0A9EE3EDDDAE4EC9C.roa (raw, json)
Hash identifier:          nngJlHqQiB8nSpI14VDETzOtcJrkJIk5ZoVxap4Cb18=
Subject key identifier:   74:AF:74:30:FA:57:AE:95:77:B7:31:D6:7C:5F:AF:7D:11:7B:4F:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B30A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4218B00E96C11F0A9EE3EDDDAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 12:56:21 +0000
ROA not before:           Sun 04 Jan 2026 12:56:16 +0000
ROA not after:            Tue 10 Feb 2026 12:56:16 +0000
asID:                     395886
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111370 (0x1b30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  4 12:56:16 2026 GMT
            Not After : Feb 10 12:56:16 2026 GMT
        Subject: CN=695a6375-df02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:fa:06:30:4d:4a:c0:ff:77:9d:b0:c6:e5:
                    6f:2f:25:bd:76:60:55:8f:45:5b:18:45:ad:48:a2:
                    33:29:bd:ef:c5:ba:3c:3f:0f:62:32:9c:97:e0:b1:
                    25:94:18:60:04:c3:b4:72:94:3b:73:b2:75:ac:bd:
                    8f:24:22:0e:be:4a:83:53:21:34:22:c1:5a:f0:38:
                    fe:f4:c8:c2:7c:fb:ed:e0:18:e8:52:8d:b5:1c:e2:
                    5d:d5:ff:44:7b:14:8c:0f:02:b1:a6:fb:15:bb:10:
                    9e:34:54:6c:ba:e8:fb:82:ce:fe:a6:ad:4f:1c:6e:
                    00:ce:3d:18:a1:d4:c7:6e:df:24:5d:48:1b:13:a8:
                    42:2c:74:89:8f:14:56:a1:bc:2b:7f:39:5f:f5:8e:
                    fd:3a:48:3e:64:8c:37:d7:36:9d:d2:7c:9e:f9:7f:
                    45:6c:c8:1b:f4:af:05:94:ad:d5:f3:c8:70:fa:33:
                    f8:85:83:39:ad:bb:f1:59:db:ba:44:68:4c:29:a4:
                    c1:02:25:4b:1b:9e:2a:57:c0:5b:56:44:a2:dd:23:
                    12:f8:b6:34:c5:e5:b4:0f:1c:c9:af:c4:74:44:1c:
                    d2:c0:dc:0b:26:37:d5:9e:c8:bd:2b:c2:cb:c1:c8:
                    58:01:49:4f:b7:2b:fd:f0:2c:32:3d:f2:7e:ad:35:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AF:74:30:FA:57:AE:95:77:B7:31:D6:7C:5F:AF:7D:11:7B:4F:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4218B00E96C11F0A9EE3EDDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:e7:76:3b:9e:0f:94:78:18:61:3a:e3:60:33:e1:d4:cb:
         6d:bf:78:e9:1c:cf:e6:f8:ff:e3:dc:3a:08:36:d7:75:5c:c1:
         8d:0d:ba:49:2d:bb:5c:72:dd:f7:70:32:fd:b1:0a:32:6c:32:
         24:4d:a0:7c:ed:d7:f2:f3:93:a2:6e:f3:bd:e9:eb:10:96:72:
         81:2e:b2:00:5e:cd:7e:8a:e7:2a:e7:de:a8:48:f3:04:ab:40:
         62:30:27:a1:a8:61:58:2b:27:13:d3:65:e0:04:50:aa:6f:33:
         3e:59:37:7a:40:79:75:2b:62:0f:da:93:67:d7:17:30:30:fe:
         93:84:80:5c:88:87:c3:5e:93:b7:2b:f2:72:db:2a:1f:57:42:
         36:a0:97:7d:92:e6:f4:bd:ca:80:55:f5:59:dc:0c:25:a9:11:
         b5:18:f5:e1:26:1c:91:de:fc:0e:16:0d:67:31:2e:2d:40:a2:
         77:19:b2:2c:2f:be:a2:40:7b:e7:3b:96:d6:30:db:0f:ac:ad:
         63:00:3f:11:32:a5:fc:1e:ea:66:ff:48:22:4d:1b:c0:6d:a3:
         7a:c2:9d:e0:4c:0a:ee:7d:80:6c:c7:2e:e4:ba:3c:4e:46:a4:
         74:aa:11:dd:72:e3:03:e5:84:d9:5f:5e:85:a8:0c:80:a9:6c:
         f9:09:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:40 2026 by rpki-client