This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DED86036F60A11F0AC2043D2DAE4EC9C.roa
File:                     DED86036F60A11F0AC2043D2DAE4EC9C.roa (raw, json)
Hash identifier:          JUmnFA2shupTDNLsPYM4LNwEwcG0M9CxZ8pnKZfzuMA=
Subject key identifier:   74:30:F6:88:B0:77:4C:54:F1:D4:F8:80:32:B1:3F:4E:1F:E4:AB:51
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DED86036F60A11F0AC2043D2DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 14:18:20 +0000
ROA not before:           Tue 20 Jan 2026 14:18:15 +0000
ROA not after:            Tue 24 Feb 2026 14:18:15 +0000
asID:                     138915
IP address blocks:        154.94.66.0/23 maxlen: 24
                          154.94.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112091 (0x1b5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 14:18:15 2026 GMT
            Not After : Feb 24 14:18:15 2026 GMT
        Subject: CN=696f8eac-d465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:71:06:39:8d:67:4d:16:08:34:40:6f:af:
                    1b:9c:82:ff:4e:7d:3b:39:a6:e2:c3:9a:c8:12:5b:
                    b0:23:c2:47:12:31:cb:62:e5:15:85:4f:dd:c4:3e:
                    54:95:6d:56:74:1d:a3:43:df:ee:88:34:63:ca:66:
                    dc:f9:70:5a:74:e5:7f:be:bf:19:8f:a5:24:b7:0e:
                    60:71:73:45:23:c7:93:1f:54:49:de:07:8b:cc:48:
                    cb:cb:d9:a2:12:3c:1b:cb:22:10:d9:cb:54:62:3d:
                    51:0f:4f:56:40:20:80:e5:82:79:18:fb:94:fa:64:
                    64:6e:2d:94:2c:66:3b:9f:a2:87:18:80:b1:fa:9b:
                    4d:33:41:e4:22:15:6e:4e:25:e5:f0:96:9c:d1:96:
                    2a:fb:96:9c:de:28:87:2e:ec:a0:84:14:4c:ae:bb:
                    ec:69:c8:16:bf:6d:b6:f1:c2:d7:57:08:ea:90:28:
                    f1:f2:4c:a8:f5:8a:cd:2d:ff:ce:5e:cb:33:22:43:
                    81:2b:39:bd:cb:76:14:50:02:74:79:c6:c2:cd:c9:
                    e3:8e:7f:e8:6c:f1:21:c7:e3:03:b7:96:13:65:66:
                    01:83:a8:2f:ca:f4:a5:35:f0:f2:1f:27:9c:f8:f3:
                    5b:ca:ad:a4:9a:03:eb:96:3a:21:19:74:a1:b7:5b:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:30:F6:88:B0:77:4C:54:F1:D4:F8:80:32:B1:3F:4E:1F:E4:AB:51
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DED86036F60A11F0AC2043D2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.66.0/23
                  154.94.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:c6:bd:33:64:8a:98:3a:70:2a:e0:0d:1f:dd:22:7d:ee:
         e2:07:eb:55:0c:2b:ee:5e:0d:0e:6b:e9:eb:ca:91:79:2e:ef:
         18:a7:37:37:10:18:8c:c8:17:76:12:f5:24:00:1f:92:8b:fb:
         75:13:08:71:24:c8:8c:c5:e1:11:15:d6:b4:9b:4c:f5:10:99:
         13:3f:b9:0c:b2:71:e9:11:bf:68:9b:6a:a8:e3:4f:91:a8:29:
         82:02:98:71:99:9c:55:8c:72:3b:75:96:32:72:56:3c:e5:bf:
         c1:af:09:cc:07:38:1f:ec:4d:80:bf:db:6e:49:b9:38:33:74:
         37:2b:16:6d:49:4f:79:75:5b:5c:74:b5:ab:65:5d:75:3f:d2:
         02:82:c9:81:8a:5c:8e:bb:42:df:6d:3f:82:42:45:e6:cb:47:
         7e:66:12:56:86:87:69:f3:50:30:a4:26:c2:66:75:93:5c:42:
         b9:de:7e:23:4a:9c:22:62:93:cf:3f:90:5f:92:58:ae:b4:a7:
         f1:f2:bc:21:60:40:a5:00:4d:36:b7:7e:7a:b5:da:45:b7:e4:
         f9:ac:2b:69:32:6c:15:e8:e2:3c:15:6d:42:36:a9:e9:38:96:
         e2:9a:f7:71:94:ec:e9:1b:0d:89:99:26:ef:f6:e5:e4:b1:0e:
         01:26:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:24:25 2026 by rpki-client