This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3110F60EAFE11F0A0A6A287DAE4EC9C.roa
File:                     F3110F60EAFE11F0A0A6A287DAE4EC9C.roa (raw, json)
Hash identifier:          CIXO+gc+3n4VLR3IAbGGwW61oINee23ic+APCVzzfhY=
Subject key identifier:   6A:51:48:B6:9A:B5:25:80:4A:1E:F8:C0:ED:D1:44:25:34:3E:CA:84
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B348
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3110F60EAFE11F0A0A6A287DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 12:55:17 +0000
ROA not before:           Tue 06 Jan 2026 12:55:11 +0000
ROA not after:            Sun 15 Feb 2026 12:55:11 +0000
asID:                     57043
IP address blocks:        154.83.138.0/24 maxlen: 24
                          154.83.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111432 (0x1b348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  6 12:55:11 2026 GMT
            Not After : Feb 15 12:55:11 2026 GMT
        Subject: CN=695d0635-5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:d2:84:18:f3:92:c8:7d:2a:59:f5:f2:e9:
                    b5:12:79:c6:55:89:51:13:90:bf:e1:78:14:03:03:
                    a7:a3:1b:47:39:46:b1:d9:4c:d8:61:7c:b9:88:27:
                    dc:cc:41:f3:55:48:e7:e0:32:14:ce:cc:9c:ef:c5:
                    fc:d6:34:d9:2c:d7:ac:6b:36:1b:7a:55:99:51:b9:
                    fd:85:d5:1b:29:43:1b:cf:f9:d9:3c:70:72:8d:7a:
                    07:c7:ea:81:0b:e2:9a:fd:48:fe:7b:ca:9c:3e:5d:
                    0a:c5:ca:28:f5:1e:5e:e1:16:c2:68:af:a0:5d:98:
                    6c:2c:f6:45:83:41:3e:2c:ef:ac:5a:b8:e8:59:dd:
                    ac:41:c5:0f:f6:75:b3:5a:87:af:a8:7f:40:02:ab:
                    cd:bf:01:ab:88:73:1e:bb:cf:83:33:bc:81:54:af:
                    c2:85:21:2c:75:97:45:a6:39:73:7c:87:f7:b6:a2:
                    55:ac:28:36:d6:05:25:03:63:b9:bc:3e:a0:d2:3c:
                    88:60:00:d0:c6:92:65:3b:4c:2d:48:f8:13:e9:40:
                    11:0f:e4:3a:7c:1b:b6:3b:aa:60:36:73:f9:e3:aa:
                    25:75:13:a9:28:16:f4:6b:64:06:ab:fd:be:6e:37:
                    75:84:63:a3:9c:a2:bd:66:99:fa:90:29:cb:e7:96:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:51:48:B6:9A:B5:25:80:4A:1E:F8:C0:ED:D1:44:25:34:3E:CA:84
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3110F60EAFE11F0A0A6A287DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.83.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:2d:90:43:e7:0c:49:2d:0e:6a:57:d3:31:86:ec:83:6b:4f:
         dd:2d:c0:92:8c:f9:1b:c6:2a:4a:f4:3a:30:d3:e4:cc:19:e9:
         21:5d:a4:2a:84:23:66:08:b8:dc:68:30:27:bc:a0:04:f4:ba:
         00:7b:76:df:25:df:9c:ef:23:f3:4c:69:fd:ba:7b:8f:fd:40:
         4b:43:cc:39:29:44:9f:71:c4:4a:e3:40:1d:24:9b:92:de:fd:
         84:a3:d7:b2:78:49:e2:bf:5d:ce:97:ce:8b:b7:e4:a1:fb:de:
         b4:f5:40:b2:2d:49:cf:60:7e:eb:cc:7a:28:13:91:9d:11:37:
         4e:3a:a5:16:bb:06:42:da:49:96:7b:f3:6a:c6:8b:1d:2e:82:
         b7:45:0b:e8:27:68:89:1e:03:bb:4c:bd:14:35:c8:e8:69:c4:
         b8:e6:37:bd:46:af:93:77:81:6a:a5:b9:4a:40:1d:7b:26:eb:
         a7:09:c1:13:db:00:9e:54:50:c5:c6:33:55:d0:57:ff:2e:2e:
         71:96:f8:26:64:44:64:45:7b:3a:b9:14:fc:78:5b:40:22:b8:
         12:c0:c5:5e:74:96:2e:b8:b4:f7:14:53:18:a2:a4:26:e0:5e:
         29:d6:9f:7f:0a:39:79:36:6c:31:c0:b2:aa:dd:ce:06:47:b6:
         a5:eb:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:50 2026 by rpki-client