This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D329E0EB9D11F0841EA1DCDAE4EC9C.roa
File:                     E7D329E0EB9D11F0841EA1DCDAE4EC9C.roa (raw, json)
Hash identifier:          HsXtjvZ+KCaJg1HYyM3LUnO5t2BrXNjDtfkXimaxz5g=
Subject key identifier:   85:76:2B:33:94:B6:E0:73:34:7F:98:E5:41:1B:28:38:C0:F5:A2:D8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B359
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D329E0EB9D11F0841EA1DCDAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 07:53:08 +0000
ROA not before:           Wed 07 Jan 2026 07:53:03 +0000
ROA not after:            Mon 09 Feb 2026 07:53:03 +0000
asID:                     63139
IP address blocks:        154.81.1.0/24 maxlen: 24
                          154.95.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111449 (0x1b359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 07:53:03 2026 GMT
            Not After : Feb  9 07:53:03 2026 GMT
        Subject: CN=695e10e4-fead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:a8:d3:4c:ad:eb:e8:ae:c6:54:67:83:b7:
                    08:01:11:62:44:a4:24:a8:06:84:45:cb:8d:ca:93:
                    69:32:d9:a4:f2:03:4b:45:05:66:c7:ed:57:c5:28:
                    2e:a2:b7:93:b9:c3:38:62:1d:91:5c:95:e9:86:2c:
                    b8:6b:c9:b2:1b:aa:cf:5c:14:51:33:4d:a4:a4:ed:
                    4e:2b:a4:5c:de:b8:a2:df:51:aa:e5:b3:d9:5d:b4:
                    b7:be:5f:31:60:ff:3a:93:e0:24:73:44:9a:b3:cc:
                    30:5c:18:fe:e4:dd:a7:fc:1f:e5:50:0a:a4:dc:0b:
                    f0:c4:c2:98:81:2c:05:95:73:08:52:89:a3:1c:78:
                    6e:78:89:ce:3d:6f:dd:cb:ee:4c:f6:a6:c0:c8:9d:
                    ec:24:69:52:9b:3a:1c:59:0b:ee:bc:f6:ea:18:6f:
                    a5:8a:65:c3:b8:5f:42:a5:ef:db:83:1c:9d:cc:ef:
                    37:b3:b5:42:18:87:ca:08:ad:56:30:5f:d3:18:c7:
                    fb:20:18:99:1c:a7:71:33:24:77:87:e7:59:f8:64:
                    49:97:e0:9b:35:94:69:20:0a:7a:80:63:92:43:fd:
                    0b:86:fd:aa:46:a8:e7:43:15:3d:6d:cf:62:fa:b6:
                    c3:b8:0b:c9:d0:aa:4d:3e:ef:f8:83:13:6d:ef:aa:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:76:2B:33:94:B6:E0:73:34:7F:98:E5:41:1B:28:38:C0:F5:A2:D8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7D329E0EB9D11F0841EA1DCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.1.0/24
                  154.95.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:49:ad:63:d2:4e:1a:1d:a0:9f:01:9b:e1:2a:85:f0:78:fc:
         9c:20:96:49:8b:b7:cd:a0:d5:42:44:57:a4:37:e0:03:21:9c:
         48:90:4a:11:e5:90:62:d1:19:e8:c7:d1:05:02:b5:bc:4f:c4:
         ee:d7:ab:8e:00:17:c3:b8:3c:be:95:b6:ed:47:13:bf:e8:d7:
         d4:cf:ca:29:4e:05:2c:5f:b9:fb:cf:28:06:40:5e:56:3c:40:
         eb:f3:f0:d0:90:e1:0d:cb:7b:c0:b8:64:d6:88:66:54:1d:9e:
         82:94:36:dc:fc:17:83:be:c7:64:6f:ba:c6:fb:1d:d4:50:34:
         7b:1f:f2:22:9b:1e:37:20:6e:32:fb:33:cc:0b:46:5c:f6:38:
         f0:40:de:44:0d:6d:54:af:6a:c6:2c:a9:65:a7:6f:e9:61:4f:
         b2:f1:a4:85:25:a1:1a:80:69:d1:f7:98:fe:df:1f:6e:d9:c0:
         75:44:f6:9a:45:91:72:7c:37:cd:46:91:99:4f:ac:93:42:69:
         58:5c:72:5e:73:ae:f7:62:89:15:a1:95:82:74:f9:a6:34:6a:
         41:20:4a:52:0c:41:fa:50:95:51:59:43:a9:ff:52:80:ff:5d:
         fa:40:c9:56:41:c6:ca:da:22:22:5b:6a:14:75:3e:1a:6b:cc:
         fe:07:fd:25
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbNZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA3MDc1MzAzWhcNMjYwMjA5MDc1MzAzWjAYMRYw
FAYDVQQDEw02OTVlMTBlNC1mZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn2+o00yt6+iuxlRng7cIARFiRKQkqAaERcuNypNpMtmk8gNLRQVmx+1X
xSguoreTucM4Yh2RXJXphiy4a8myG6rPXBRRM02kpO1OK6Rc3rii31Gq5bPZXbS3
vl8xYP86k+Akc0Sas8wwXBj+5N2n/B/lUAqk3AvwxMKYgSwFlXMIUomjHHhueInO
PW/dy+5M9qbAyJ3sJGlSmzocWQvuvPbqGG+limXDuF9Cpe/bgxydzO83s7VCGIfK
CK1WMF/TGMf7IBiZHKdxMyR3h+dZ+GRJl+CbNZRpIAp6gGOSQ/0Lhv2qRqjnQxU9
bc9i+rbDuAvJ0KpNPu/4gxNt76opiwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIV2
KzOUtuBzNH+Y5UEbKDjA9aLYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0QzMjlFMEVCOUQxMUYwODQxRUExRENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmlEBAwQAml9fMA0GCSqG
SIb3DQEBCwUAA4IBAQA8Sa1j0k4aHaCfAZvhKoXwePycIJZJi7fNoNVCRFekN+AD
IZxIkEoR5ZBi0Rnox9EFArW8T8Tu16uOABfDuDy+lbbtRxO/6NfUz8opTgUsX7n7
zygGQF5WPEDr8/DQkOENy3vAuGTWiGZUHZ6ClDbc/BeDvsdkb7rG+x3UUDR7H/Ii
mx43IG4y+zPMC0Zc9jjwQN5EDW1Ur2rGLKllp2/pYU+y8aSFJaEagGnR95j+3x9u
2cB1RPaaRZFyfDfNRpGZT6yTQmlYXHJec673YokVoZWCdPmmNGpBIEpSDEH6UJVR
WUOp/1KA/136QMlWQcbK2iIiW2oUdT4aa8z+B/0l
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:20 2026 by rpki-client