This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E65DDAF95D11F0A3D768C0DAE4EC9C.roa
File:                     C4E65DDAF95D11F0A3D768C0DAE4EC9C.roa (raw, json)
Hash identifier:          xRPiafLRPCR3hRMfXJZdVazi8WC+rVl8aax40kk17v4=
Subject key identifier:   4C:4C:EA:A7:2A:F5:5D:E0:20:55:C6:3F:45:FD:C3:10:9F:A5:CC:44
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B68E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E65DDAF95D11F0A3D768C0DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:49:18 +0000
ROA not before:           Sat 24 Jan 2026 19:49:14 +0000
ROA not after:            Thu 12 Mar 2026 19:49:14 +0000
asID:                     32043
IP address blocks:        154.193.99.0/24 maxlen: 24
                          154.193.100.0/22 maxlen: 24
                          154.193.104.0/22 maxlen: 24
                          154.193.108.0/23 maxlen: 24
                          154.193.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112270 (0x1b68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 19:49:14 2026 GMT
            Not After : Mar 12 19:49:14 2026 GMT
        Subject: CN=6975223e-0049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:9b:36:cf:81:7a:c7:b6:ab:78:ab:3a:fc:
                    9a:80:b2:02:2a:d7:1c:63:42:38:a8:9d:31:88:d1:
                    4b:37:eb:b1:17:ce:16:9b:a0:c0:24:6a:73:6d:93:
                    3b:b6:95:60:6d:27:33:b5:5d:e4:5b:2a:2a:85:b3:
                    2c:52:c9:13:64:ba:dd:73:01:e0:d9:b2:5d:83:5c:
                    6a:59:db:92:00:16:94:60:50:29:92:f9:9f:49:9c:
                    bf:69:a5:c4:ae:94:78:74:5f:59:ca:31:16:5b:3a:
                    ab:b1:cd:ef:63:8e:8e:76:45:66:1c:ce:b3:a8:0b:
                    ea:3b:3e:33:8b:a6:c1:41:60:82:b8:6d:49:e9:a1:
                    b5:a8:67:c9:ba:3c:21:98:20:d9:f8:16:95:03:e5:
                    9b:6d:bc:45:b6:e4:1b:8a:59:76:dd:d0:a4:0a:88:
                    69:8e:76:02:21:98:f2:6b:4d:5f:fc:e7:5c:eb:d3:
                    48:eb:fd:84:27:00:e6:31:62:15:d3:57:95:4f:62:
                    74:a1:2c:d4:ad:b4:02:f5:08:8a:71:c9:24:ef:06:
                    49:42:de:77:54:29:03:59:95:c1:e7:67:99:dc:69:
                    71:81:7d:c1:bd:5d:52:4c:ef:fb:a9:29:85:a7:5f:
                    14:2a:32:29:60:30:6c:55:ba:9b:0a:52:d1:49:86:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:EA:A7:2A:F5:5D:E0:20:55:C6:3F:45:FD:C3:10:9F:A5:CC:44
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4E65DDAF95D11F0A3D768C0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.99.0-154.193.110.255

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:f4:e4:b7:f6:f3:62:05:c0:87:29:e3:87:0c:40:b0:aa:
         93:c9:7a:9f:51:02:42:c2:06:b0:ce:a0:8d:58:ba:2b:e2:fb:
         26:3d:34:21:eb:2b:72:93:e1:97:08:3a:ed:87:87:6c:33:ec:
         2a:b0:83:11:cb:d6:dc:67:6e:ba:1b:9d:81:9d:62:d1:1b:6c:
         4d:d6:82:7f:13:96:9c:08:97:6c:6f:0c:52:dc:a3:19:c7:18:
         0f:ae:86:ae:28:76:88:f7:35:a0:8f:bf:20:d1:c6:0d:22:7a:
         e6:ba:19:1c:ef:de:80:8e:1f:cb:b9:10:93:dd:7c:30:6c:ed:
         98:de:99:97:96:d9:4a:97:55:17:3a:e8:6d:44:b9:9c:19:13:
         94:72:81:8f:da:e6:2b:8a:ac:4e:a9:b0:06:6d:e1:6c:e4:1f:
         da:8a:f7:76:82:9b:53:bb:51:5a:3d:05:1f:aa:8f:b5:09:62:
         44:0b:f3:32:68:0b:77:d7:a3:26:1c:89:6a:a6:c9:5a:13:03:
         e9:cf:2d:f1:68:c4:72:a9:5f:6a:46:89:17:fc:37:35:b6:5d:
         1d:2e:d9:48:77:75:bb:c8:44:33:9f:b4:ec:b8:8e:a6:74:1d:
         ae:a1:09:c0:cc:3e:77:2f:0d:dc:81:95:ff:df:9f:a2:10:f2:
         4d:2e:a9:dc
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbaOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI0MTk0OTE0WhcNMjYwMzEyMTk0OTE0WjAYMRYw
FAYDVQQDEw02OTc1MjIzZS0wMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwimbNs+Bese2q3irOvyagLICKtccY0I4qJ0xiNFLN+uxF84Wm6DAJGpz
bZM7tpVgbScztV3kWyoqhbMsUskTZLrdcwHg2bJdg1xqWduSABaUYFApkvmfSZy/
aaXErpR4dF9ZyjEWWzqrsc3vY46OdkVmHM6zqAvqOz4zi6bBQWCCuG1J6aG1qGfJ
ujwhmCDZ+BaVA+WbbbxFtuQbill23dCkCohpjnYCIZjya01f/Odc69NI6/2EJwDm
MWIV01eVT2J0oSzUrbQC9QiKcckk7wZJQt53VCkDWZXB52eZ3GlxgX3BvV1STO/7
qSmFp18UKjIpYDBsVbqbClLRSYae7QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFExM
6qcq9V3gIFXGP0X9wxCfpcxEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNEU2NUREQUY5NUQxMUYwQTNENzY4QzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACawWMDBACawW4wDQYJ
KoZIhvcNAQELBQADggEBAESK9OS39vNiBcCHKeOHDECwqpPJep9RAkLCBrDOoI1Y
uivi+yY9NCHrK3KT4ZcIOu2Hh2wz7CqwgxHL1txnbrobnYGdYtEbbE3Wgn8TlpwI
l2xvDFLcoxnHGA+uhq4odoj3NaCPvyDRxg0ieua6GRzv3oCOH8u5EJPdfDBs7Zje
mZeW2UqXVRc66G1EuZwZE5RygY/a5iuKrE6psAZt4WzkH9qK93aCm1O7UVo9BR+q
j7UJYkQL8zJoC3fXoyYciWqmyVoTA+nPLfFoxHKpX2pGiRf8NzW2XR0u2Uh3dbvI
RDOftOy4jqZ0Ha6hCcDMPncvDdyBlf/fn6IQ8k0uqdw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:29 2026 by rpki-client