This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
File:                     C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa (raw, json)
Hash identifier:          EZh2UAfa4I3g9HWV3E0NC2yM1DMNsesoO8Wz2b5qmfY=
Subject key identifier:   FA:F8:7C:12:4B:94:B5:B1:60:78:43:E3:B1:A2:25:FB:B0:D9:6A:E0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 16:43:11 +0000
ROA not before:           Sat 24 Jan 2026 16:43:07 +0000
ROA not after:            Mon 02 Mar 2026 16:43:07 +0000
asID:                     328608
IP address blocks:        154.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112200 (0x1b648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 16:43:07 2026 GMT
            Not After : Mar  2 16:43:07 2026 GMT
        Subject: CN=6974f69f-a673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:12:62:ca:32:37:a8:c5:1d:00:e9:4d:21:
                    03:cb:4e:ba:b9:f4:3c:27:63:a1:70:d2:3d:5a:37:
                    ee:a4:81:53:4a:22:ee:14:7e:4b:32:6b:3b:90:0b:
                    36:cb:12:c8:a7:bd:b3:93:6f:60:06:ae:79:33:9c:
                    f1:66:dd:42:a7:b3:39:4b:b0:0c:4e:6e:ed:9d:41:
                    28:dd:94:b4:4e:81:c5:e3:bd:2b:6c:66:ff:ba:a5:
                    cb:9f:95:3a:85:1c:3a:5a:5c:b7:de:d4:b2:5e:dd:
                    7e:2d:aa:c0:ef:b0:23:b7:12:b6:45:f5:cc:f3:f8:
                    49:5a:26:b1:4d:f6:b5:5e:b9:b7:17:4c:28:54:2c:
                    a1:4d:b0:f1:61:8b:4f:08:fd:be:84:db:96:57:72:
                    f3:eb:e5:07:8d:e8:58:89:58:92:37:fb:b7:10:aa:
                    40:8e:a0:1e:fb:57:ce:60:a4:89:61:93:47:01:19:
                    03:b4:d5:36:e9:07:8a:c0:b3:1f:4b:f5:de:6d:13:
                    aa:a2:fa:25:ba:ec:c5:42:55:d6:38:e6:f2:b1:a9:
                    cf:27:be:80:bd:a9:e2:5e:1c:53:48:6b:59:14:af:
                    c4:ca:48:16:05:c0:68:43:62:11:df:73:4d:f1:c9:
                    df:31:81:6c:47:fe:fe:f2:9e:d9:44:5c:77:d1:35:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:7C:12:4B:94:B5:B1:60:78:43:E3:B1:A2:25:FB:B0:D9:6A:E0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.91.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:00:88:0c:99:31:72:7a:44:03:b7:ae:22:c4:06:6b:0f:38:
         d9:3b:2f:c6:25:4e:e6:5e:af:60:63:9e:b2:ce:c0:db:e9:d6:
         56:60:bc:b8:98:4f:0b:cb:c4:dc:3a:06:62:c0:10:3c:04:ab:
         32:e7:9d:4a:6f:8d:f8:6f:db:f7:6b:c8:68:8d:5f:e9:90:58:
         37:af:ea:ea:1a:c6:62:fe:2d:5c:7e:54:e8:d4:bc:7c:5c:74:
         48:1c:50:fb:a8:5c:81:b5:56:01:4a:1e:1a:a5:36:cf:f3:bd:
         3a:df:8a:ef:6c:c7:e6:2d:61:8d:5f:16:85:c2:da:29:65:d6:
         ee:de:b3:34:c4:78:2b:e4:8c:b8:04:a8:0b:55:35:12:e4:5c:
         94:88:4f:57:dc:51:bb:68:33:b8:92:85:5d:e8:fe:a5:60:de:
         15:af:95:6a:08:3c:0f:e9:55:80:8e:21:03:00:40:97:cf:dd:
         ff:f2:c4:a5:c8:f1:b4:8d:bb:fd:69:85:e1:eb:e0:2c:46:40:
         a0:b7:77:48:ec:0a:c0:d9:bd:e1:e7:80:bf:62:e2:5a:c1:b9:
         cc:fa:c5:18:6a:1b:05:ed:d3:72:f3:30:39:c6:26:16:c8:05:
         fa:2f:89:90:90:bb:59:79:86:68:2a:15:27:ed:f7:e8:75:b7:
         d3:7e:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:59 2026 by rpki-client