This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E799AC2CE55A11F09C3F3DD3DAE4EC9C.roa
File:                     E799AC2CE55A11F09C3F3DD3DAE4EC9C.roa (raw, json)
Hash identifier:          xGZjPHtq/PaD92nDuoxMayzSLIu/WjfLYt52p16IQ7c=
Subject key identifier:   28:D5:FB:9C:EE:E2:80:EE:05:EB:08:B1:6A:A5:79:0C:F0:3E:74:50
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B1C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E799AC2CE55A11F09C3F3DD3DAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 08:38:25 +0000
ROA not before:           Tue 30 Dec 2025 08:38:20 +0000
ROA not after:            Thu 05 Feb 2026 08:38:20 +0000
asID:                     272011
IP address blocks:        154.88.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111040 (0x1b1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 30 08:38:20 2025 GMT
            Not After : Feb  5 08:38:20 2026 GMT
        Subject: CN=69538f81-e7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:6e:22:86:2a:e9:14:e8:30:5a:ca:cc:73:
                    a4:44:59:f9:50:50:16:f3:f2:24:68:f6:71:93:ce:
                    e9:ed:0d:a8:47:63:3d:2b:94:b4:67:e7:d5:55:1c:
                    89:e9:bc:1a:2c:e7:e0:89:58:e3:e7:5b:a9:5f:10:
                    e3:02:5a:c5:d3:21:28:d4:ab:47:aa:82:05:94:24:
                    df:33:88:58:1c:e0:1c:1d:92:3b:a1:1d:17:22:f6:
                    71:55:14:fb:0d:f3:4a:4c:30:10:a6:08:69:82:bf:
                    09:30:35:85:04:44:13:a5:de:ce:96:53:85:5d:d0:
                    75:b4:cc:6b:aa:59:05:1d:6f:eb:83:60:d5:93:67:
                    a9:c3:fb:06:e0:46:da:cc:e5:71:f3:1c:0f:fd:44:
                    b2:92:5e:c0:d3:ae:1d:d0:f3:47:b5:eb:5e:18:21:
                    03:e1:32:9f:a2:4b:7a:94:50:64:28:67:15:4a:ec:
                    ef:b2:e8:2e:bb:b7:e2:d1:66:c3:c9:93:b2:dd:40:
                    62:41:bc:d4:9c:c1:0f:b1:c4:d1:ce:43:b5:29:7b:
                    23:71:61:d4:9b:07:ef:08:6b:bb:fa:f7:2f:19:2e:
                    ea:36:79:fb:ff:fe:56:19:4b:4d:5f:af:49:44:fc:
                    d9:0d:3b:97:58:f2:93:0d:62:8e:11:39:25:55:d0:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:FB:9C:EE:E2:80:EE:05:EB:08:B1:6A:A5:79:0C:F0:3E:74:50
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E799AC2CE55A11F09C3F3DD3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:d5:65:85:8d:ae:c6:6c:aa:77:cf:52:c1:78:3f:e1:86:
         ee:f4:a0:4a:f0:80:ea:15:50:99:42:b2:f8:aa:f1:f2:c3:89:
         2a:c0:ab:9d:a5:d2:bb:b3:71:bd:39:ba:8d:3a:e2:8b:8a:0e:
         d9:3a:c9:e0:8e:cd:34:58:3d:13:1c:fe:77:7c:48:27:4a:d1:
         c9:ab:ed:dc:1b:a2:9f:60:bb:1f:2f:45:fe:ff:d4:9e:78:f1:
         0e:33:7c:2f:49:c0:cc:4c:6a:db:28:6a:0b:ad:ac:79:f9:52:
         37:ae:86:a0:0c:14:2b:40:cf:72:36:21:90:2b:47:7b:91:fd:
         8e:56:9f:96:6b:27:92:5a:a1:c6:a1:5b:a0:9c:f5:96:e7:95:
         fe:43:6b:66:75:1c:b9:1a:e1:8b:3b:6e:ff:9c:85:10:fc:10:
         d1:50:fc:1a:93:2a:12:41:64:c8:03:a1:26:dd:76:ea:6d:12:
         63:90:0f:24:d9:5a:83:21:e1:97:80:a2:1a:4c:7d:59:ef:ee:
         34:11:06:27:99:f7:4c:5e:6c:9a:a1:10:53:76:60:65:7a:d7:
         58:f9:ea:cf:79:86:49:fb:94:2c:87:b1:80:ac:67:91:15:52:
         70:d3:cd:66:c7:88:5d:82:46:e9:41:bc:3a:0f:98:db:81:3f:
         35:cc:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:34 2026 by rpki-client