This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBADD080F5DC11F09E5929BEDAE4EC9C.roa
File:                     EBADD080F5DC11F09E5929BEDAE4EC9C.roa (raw, json)
Hash identifier:          PKOGruNP02XF4q9E3YmWxIgGoUyHcvl4i/8MD3ypa8U=
Subject key identifier:   73:94:9B:CC:9B:7D:E6:92:44:B9:1A:21:92:D5:5B:8E:0E:C5:09:93
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBADD080F5DC11F09E5929BEDAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 08:49:25 +0000
ROA not before:           Tue 20 Jan 2026 08:49:20 +0000
ROA not after:            Sun 26 Apr 2026 08:49:20 +0000
asID:                     29852
IP address blocks:        154.194.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112036 (0x1b5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 08:49:20 2026 GMT
            Not After : Apr 26 08:49:20 2026 GMT
        Subject: CN=696f4195-9069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:4e:1b:9b:4c:3c:37:a1:f5:02:4d:cc:8f:
                    49:8f:b7:54:02:63:0b:30:c0:2a:11:1d:07:d3:e0:
                    77:42:3a:18:4a:fa:d7:42:c9:2e:58:eb:38:dc:c0:
                    ab:ee:4b:98:b6:06:7b:66:d8:55:e4:61:94:22:e3:
                    9d:8f:12:3c:b6:8d:58:34:41:95:72:05:8e:33:b1:
                    92:c7:0f:8e:3f:71:b2:bb:e9:03:7d:ca:b5:e9:b7:
                    0f:49:38:7d:d7:4b:c1:5d:5a:5c:3b:39:5e:7e:5c:
                    e4:0b:3f:1a:46:38:95:bb:7f:f7:c6:e0:27:dc:62:
                    62:91:21:22:75:42:dd:d2:9c:9e:17:53:f1:f2:5b:
                    c7:83:11:2f:6c:c5:f7:5a:67:ba:dc:35:e5:6f:2c:
                    8b:39:c2:b8:18:51:ce:62:4a:9a:23:fb:d3:60:3d:
                    22:a4:3b:b6:fc:72:a9:0a:99:4a:71:bd:93:50:d4:
                    72:8a:f0:36:e1:1d:a2:4d:52:98:3f:5a:c4:ab:33:
                    cb:fa:ec:2d:ce:62:41:18:f4:b8:20:c7:71:7f:65:
                    e9:98:38:26:62:b3:b3:07:7a:07:7f:43:af:19:ac:
                    77:46:5b:af:de:40:b4:c8:d6:81:bc:b8:6a:32:d3:
                    7a:92:1d:11:e3:e7:ba:42:a7:9c:c1:60:4b:79:66:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:9B:CC:9B:7D:E6:92:44:B9:1A:21:92:D5:5B:8E:0E:C5:09:93
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBADD080F5DC11F09E5929BEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:91:7c:a5:3b:b7:ab:24:fe:55:52:28:6c:75:48:69:97:44:
         bc:11:2d:b0:01:1c:42:92:76:57:3b:e3:74:af:cd:9c:d5:2e:
         d0:64:21:5e:c1:a2:f7:03:28:04:68:36:9f:58:4c:01:6e:83:
         1c:e5:db:e3:4a:6f:7b:86:a2:13:40:09:29:7a:10:4d:43:46:
         c7:c0:6d:96:1b:50:98:cf:71:8d:3f:33:ef:dd:10:24:64:e8:
         c2:c1:3d:d0:b1:4d:ef:c2:8e:91:59:b8:13:08:db:9d:42:d1:
         a9:3d:53:dd:5e:09:df:70:31:16:60:31:00:73:b5:ca:30:f1:
         a1:7a:29:74:10:a5:50:b3:ab:d9:31:61:3e:76:18:51:61:c2:
         85:cc:5d:7f:35:0a:51:c6:ca:f3:d4:08:5e:d0:08:96:34:e4:
         8e:68:2a:36:9d:a8:93:a9:64:48:f5:17:29:1c:f2:e9:43:1c:
         51:e1:ae:cf:8d:75:78:ca:f6:8d:69:74:94:af:cc:4d:3f:b7:
         04:64:86:d6:21:28:7b:18:27:57:d9:c0:25:8f:69:92:06:55:
         4c:66:55:5a:1d:b1:cd:29:63:47:a0:9f:db:61:5e:4c:51:d4:
         fe:8f:d5:39:06:d5:34:83:0f:66:7a:e8:4f:cb:40:d5:33:f0:
         95:f9:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:33 2026 by rpki-client