This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22D53A2F44611F0A2AF9581DAE4EC9C.roa
File:                     D22D53A2F44611F0A2AF9581DAE4EC9C.roa (raw, json)
Hash identifier:          e93kjSZPmgLxAWS83TY3PzujWTIu4oAiZI3SmWD8VYg=
Subject key identifier:   6B:2E:DA:4F:51:2D:B5:93:91:58:CD:08:29:65:01:7A:DC:B4:6B:55
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B54C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22D53A2F44611F0A2AF9581DAE4EC9C.roa
Signing time:             Sun 18 Jan 2026 08:22:26 +0000
ROA not before:           Sun 18 Jan 2026 08:22:21 +0000
ROA not after:            Tue 24 Feb 2026 08:22:21 +0000
asID:                     17497
IP address blocks:        154.81.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111948 (0x1b54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 18 08:22:21 2026 GMT
            Not After : Feb 24 08:22:21 2026 GMT
        Subject: CN=696c9842-36f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:75:b2:61:fa:a4:99:44:ce:7a:4e:2c:03:
                    4a:ec:3d:ba:89:65:44:1c:0d:29:ee:d0:07:84:58:
                    a3:ea:6e:80:fd:51:ab:30:ba:51:5b:71:4d:49:9a:
                    63:d5:d2:d0:32:4d:36:6d:a6:69:91:3e:51:2d:f3:
                    2a:32:0d:69:2e:b8:d4:cb:e7:fd:54:29:1c:43:fb:
                    05:16:a3:ad:10:0e:52:49:76:1b:f0:8e:7a:18:17:
                    71:94:65:9f:83:c6:e5:03:2f:1a:4a:33:b3:e5:53:
                    28:32:f8:a5:e3:d2:f7:0a:e2:b5:93:96:29:ab:27:
                    11:a3:97:c4:f1:d7:20:28:56:fd:e1:fb:eb:fe:82:
                    5d:85:be:da:84:96:9f:8d:de:3a:bc:10:69:7f:a2:
                    b0:21:d3:5d:36:af:43:fa:f8:cf:3d:bc:36:7e:a6:
                    d6:dd:39:6d:6b:6c:89:55:d7:5d:c0:c8:ed:a2:1a:
                    32:6d:37:9d:81:f2:9c:ad:7d:1f:5c:35:6b:0a:18:
                    7c:65:14:03:63:f3:8d:16:f9:5c:94:4d:e6:15:b3:
                    54:70:f3:da:9f:1c:b0:bf:51:a8:d8:d4:79:2e:68:
                    ae:d4:60:20:3d:5a:48:5b:7c:f3:d5:5f:c0:f9:20:
                    b2:87:8e:73:05:24:e7:17:d8:d5:3b:7a:3f:76:06:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2E:DA:4F:51:2D:B5:93:91:58:CD:08:29:65:01:7A:DC:B4:6B:55
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22D53A2F44611F0A2AF9581DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:41:be:df:05:f2:da:5c:6b:36:00:86:df:c9:f5:8b:35:e1:
         64:b5:19:ae:79:09:13:ad:39:aa:3b:f3:18:fa:83:54:e9:cf:
         1e:d4:ba:11:56:f2:5a:8d:2d:29:85:4a:18:e7:fb:21:c1:bb:
         a7:58:84:c3:df:e6:fa:86:c8:c1:93:57:dc:4a:89:6f:e3:70:
         3c:0c:d1:33:4e:3b:4c:39:c0:c1:5a:83:bb:74:0b:36:87:50:
         3a:ad:6b:0f:a9:ea:2c:f0:54:8b:84:d4:f6:75:85:c3:c3:01:
         57:b7:dd:1e:eb:98:55:04:64:d8:80:e1:b6:26:99:9b:c9:1b:
         e2:d1:b5:6a:22:e2:55:38:53:b9:ad:e1:26:fd:ed:52:3c:fd:
         ab:5b:14:ba:87:d7:0f:51:01:a4:26:5e:73:2a:7a:49:97:14:
         ec:30:94:d2:b2:7e:eb:15:a9:ea:17:2b:b6:f1:53:0b:f9:fa:
         ba:af:6d:28:6a:52:af:58:bb:c8:75:8e:fa:9c:74:95:c4:41:
         93:5a:b1:d6:1e:59:41:ea:5f:48:91:fb:f0:f3:e4:6f:4c:da:
         c8:ed:3a:65:67:08:a9:9b:cd:27:a9:73:c8:76:7e:d9:7b:32:
         e8:4b:00:d5:a7:e1:d2:91:16:2d:93:66:4e:19:66:b0:38:33:
         00:aa:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:43:14 2026 by rpki-client