This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
File:                     DDCADAA2E96711F098E482C0DAE4EC9C.roa (raw, json)
Hash identifier:          cZOq+6R64g9vkIpejoF7CLFIM/rEx4dYLW7KnFCOHJE=
Subject key identifier:   4A:F8:03:96:8D:07:49:CB:76:12:12:EB:B1:6F:66:AA:33:55:2E:AF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B302
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
Signing time:             Sun 04 Jan 2026 12:21:16 +0000
ROA not before:           Sun 04 Jan 2026 12:21:11 +0000
ROA not after:            Tue 10 Feb 2026 12:21:11 +0000
asID:                     401701
IP address blocks:        154.94.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111362 (0x1b302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  4 12:21:11 2026 GMT
            Not After : Feb 10 12:21:11 2026 GMT
        Subject: CN=695a5b3c-bce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:db:29:73:da:79:66:35:66:ff:52:e6:9f:
                    45:ae:99:57:37:dc:1a:cc:fa:28:70:1f:d4:41:83:
                    97:48:3e:b4:1b:ac:82:b3:d1:d8:d5:22:5d:51:bf:
                    a8:9c:80:1d:5c:d3:ab:ba:4e:9e:fd:ee:ea:34:d4:
                    a1:76:f1:a1:e7:ae:bd:e7:4a:ec:fe:c9:9b:6b:6e:
                    5f:28:cd:1f:20:2a:cf:56:1c:c9:dc:f7:dd:f3:d0:
                    d2:1a:fd:d5:0f:2e:8c:9f:dd:43:88:ee:6d:d8:09:
                    a6:d8:99:1a:4c:bf:be:0a:1f:c6:ee:b5:f4:62:0b:
                    c9:58:cd:9b:4f:15:eb:88:12:0f:ca:ca:4e:66:a1:
                    63:8c:4d:16:48:5b:73:86:28:2a:0d:c6:53:6b:83:
                    80:e7:81:44:fe:86:38:91:f1:f4:e3:de:70:44:f6:
                    20:9a:bd:a4:19:92:37:73:2a:f3:dc:11:3f:0d:ae:
                    32:cb:69:5c:5e:3d:e9:8b:a8:d1:6c:bc:53:cc:c6:
                    50:86:42:49:c5:c8:ce:80:da:1a:80:de:d5:da:1e:
                    15:5b:9d:40:4d:e7:40:d3:ad:cf:d5:89:e9:fd:b0:
                    33:02:ce:e1:76:d0:a0:24:43:8f:75:7c:2f:da:67:
                    f3:93:c6:62:4a:57:31:07:5a:c2:cd:7e:47:41:fb:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:03:96:8D:07:49:CB:76:12:12:EB:B1:6F:66:AA:33:55:2E:AF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:df:11:c0:b8:2e:30:63:c0:b0:b1:64:73:2d:6a:7f:89:
         40:d0:19:fa:59:69:3e:9b:40:a5:3f:0f:2e:1c:54:9a:c1:2d:
         85:81:6f:13:d7:aa:af:58:6e:51:33:80:b5:95:17:cf:62:80:
         6b:f7:2c:23:6e:c4:aa:33:a9:35:fd:c7:f6:12:bd:43:e0:68:
         62:cf:25:31:d0:a1:be:53:db:1e:07:af:6b:63:44:ea:19:e6:
         d7:67:47:29:d9:3f:17:7f:f0:4b:dd:88:24:ae:1f:07:b5:59:
         de:e3:0e:a5:a4:19:82:b4:04:0c:83:24:80:34:3a:19:bd:be:
         8a:c0:e2:70:13:a8:43:7c:51:c5:12:c8:23:0a:6b:db:4a:2d:
         46:0e:07:00:db:37:d4:9b:15:11:d5:4f:bb:b4:cb:e3:85:80:
         c9:26:2e:d3:de:f4:1f:71:e8:bc:cf:a5:5b:f1:4b:95:4e:b9:
         92:8e:1f:b1:42:1a:6b:3c:dd:73:3a:18:88:9a:34:1c:41:50:
         1f:1f:0c:08:f9:3e:e7:5c:3a:69:a4:92:4f:d5:37:dd:e7:c4:
         5e:fe:74:02:23:ac:93:f1:79:79:11:64:93:3c:da:a6:9b:43:
         1f:7a:ff:7b:fe:62:0c:90:bd:b1:7e:eb:c6:0c:e1:e9:c8:66:
         85:3d:71:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbMCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA0MTIyMTExWhcNMjYwMjEwMTIyMTExWjAYMRYw
FAYDVQQDEw02OTVhNWIzYy1iY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApNLbKXPaeWY1Zv9S5p9FrplXN9wazPoocB/UQYOXSD60G6yCs9HY1SJd
Ub+onIAdXNOruk6e/e7qNNShdvGh566950rs/smba25fKM0fICrPVhzJ3Pfd89DS
Gv3VDy6Mn91DiO5t2Amm2JkaTL++Ch/G7rX0YgvJWM2bTxXriBIPyspOZqFjjE0W
SFtzhigqDcZTa4OA54FE/oY4kfH0495wRPYgmr2kGZI3cyrz3BE/Da4yy2lcXj3p
i6jRbLxTzMZQhkJJxcjOgNoagN7V2h4VW51ATedA063P1Ynp/bAzAs7hdtCgJEOP
dXwv2mfzk8ZiSlcxB1rCzX5HQfuv7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEr4
A5aNB0nLdhIS67FvZqozVS6vMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERENBREFBMkU5NjcxMUYwOThFNDgyQzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBbW98RwLguMGPAsLFkcy1qf4lA0Bn6WWk+m0ClPw8uHFSawS2FgW8T
16qvWG5RM4C1lRfPYoBr9ywjbsSqM6k1/cf2Er1D4GhizyUx0KG+U9seB69rY0Tq
GebXZ0cp2T8Xf/BL3Ygkrh8HtVne4w6lpBmCtAQMgySANDoZvb6KwOJwE6hDfFHF
EsgjCmvbSi1GDgcA2zfUmxUR1U+7tMvjhYDJJi7T3vQfcei8z6Vb8UuVTrmSjh+x
QhprPN1zOhiImjQcQVAfHwwI+T7nXDpppJJP1Tfd58Re/nQCI6yT8Xl5EWSTPNqm
m0Mfev97/mIMkL2xfuvGDOHpyGaFPXFW
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:05 2026 by rpki-client