This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78A5F12F75F11F0AF2DE88DDAE4EC9C.roa
File:                     E78A5F12F75F11F0AF2DE88DDAE4EC9C.roa (raw, json)
Hash identifier:          nRxWYF4UKrUGLOgKseOdX6WazGrSirRQqosftSBa9SU=
Subject key identifier:   E2:D1:1E:78:2C:6A:28:1D:6B:F0:0F:7F:68:67:6B:D1:7E:AF:47:04
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78A5F12F75F11F0AF2DE88DDAE4EC9C.roa
Signing time:             Thu 22 Jan 2026 06:59:33 +0000
ROA not before:           Thu 22 Jan 2026 06:59:28 +0000
ROA not after:            Sat 28 Feb 2026 06:59:28 +0000
asID:                     17561
IP address blocks:        154.82.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112117 (0x1b5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 22 06:59:28 2026 GMT
            Not After : Feb 28 06:59:28 2026 GMT
        Subject: CN=6971cad5-3d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:d4:24:7d:c4:16:ca:85:e3:dd:63:a7:ff:
                    89:65:84:e9:5b:d1:3a:ad:fa:c8:52:c5:d2:b2:8f:
                    4e:69:11:de:74:6f:b8:d6:d9:ef:fc:85:83:39:01:
                    28:79:a9:b4:bc:0b:da:aa:cc:ef:6e:04:fc:4c:e8:
                    b9:3d:6b:5c:ab:9f:d3:bf:f1:78:08:1d:e1:75:d8:
                    27:f2:c7:cf:a1:dc:7b:55:73:f6:cd:f2:9b:f5:23:
                    aa:f1:c0:b6:26:33:92:3c:98:f3:9f:a9:0f:91:d1:
                    ea:3a:60:7f:54:c6:dd:a5:ca:29:5c:ac:52:3c:b0:
                    28:7a:2f:fb:f5:d3:c6:c1:2d:77:6b:27:83:24:e7:
                    a0:9e:fa:1c:a0:55:47:4d:3e:19:db:e5:ad:97:bb:
                    52:6f:a9:52:8d:9d:0a:46:6d:b5:e9:ac:12:01:8d:
                    11:b2:c4:eb:9e:1a:9d:9a:d4:69:1d:65:01:17:78:
                    b0:59:1e:54:af:4a:bc:1f:5a:f2:ab:7a:aa:c8:fa:
                    9e:ab:59:f4:05:e4:3d:10:cf:b7:2e:fb:6c:38:ab:
                    78:41:47:85:10:33:64:e7:19:80:fe:41:b0:1f:38:
                    26:1c:f1:60:0d:92:62:ac:e0:43:e6:6e:db:ef:4e:
                    b3:8e:5b:a6:5c:ab:67:88:b2:72:d1:d1:0b:4f:de:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:1E:78:2C:6A:28:1D:6B:F0:0F:7F:68:67:6B:D1:7E:AF:47:04
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E78A5F12F75F11F0AF2DE88DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:60:e9:8e:41:b3:f2:27:1c:bd:c5:69:22:68:03:b2:4c:3d:
         57:e2:09:29:99:9a:c1:a4:7e:f4:07:cc:a5:9a:50:3d:45:15:
         f3:ca:6e:18:5b:97:b0:fd:7c:40:16:26:c5:2d:bb:8c:45:8a:
         ef:59:d5:04:a4:ec:c6:6e:16:49:4a:15:26:f5:dc:d9:34:99:
         1d:e9:c5:1d:5c:27:8b:e0:0c:9b:2b:61:71:26:73:a7:9a:d6:
         20:c0:b0:e5:5d:23:df:3d:3b:1b:71:ec:da:b5:f5:7d:44:fd:
         28:dd:e0:bf:60:b8:b9:16:53:e5:ed:f8:c8:c7:64:55:86:9e:
         9e:b2:d6:00:94:91:5c:70:48:3c:5c:63:5d:28:a3:b2:2a:0d:
         b7:1b:7b:0c:b6:bc:17:3f:41:8f:ba:98:14:7a:92:8c:b6:50:
         77:88:80:29:70:7e:64:0b:60:05:fb:94:1f:3c:de:f4:11:7d:
         a6:6d:09:5e:13:6e:fc:10:32:d1:b6:07:b5:5b:02:04:5a:89:
         76:1a:0a:f6:66:cd:01:4c:d7:bb:72:6d:17:83:44:a9:00:3a:
         94:aa:67:13:49:db:03:4e:32:b3:9f:e9:34:28:5f:77:70:d5:
         53:d8:08:d5:b5:e2:77:e7:fb:5d:27:89:25:6a:e3:8b:e8:ae:
         49:cb:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:44 2026 by rpki-client