This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FDD176F5E711F088923280DAE4EC9C.roa
File:                     F3FDD176F5E711F088923280DAE4EC9C.roa (raw, json)
Hash identifier:          SVtlROi4Vz0QFP64IpMBxSSPf4U3AY82nDb2gYp6Gd8=
Subject key identifier:   47:9C:22:A5:81:54:80:0E:35:33:9D:24:49:67:98:6A:89:EF:1E:8B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FDD176F5E711F088923280DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 10:08:23 +0000
ROA not before:           Tue 20 Jan 2026 10:08:18 +0000
ROA not after:            Wed 11 Feb 2026 10:08:18 +0000
asID:                     214143
IP address blocks:        154.81.132.0/22 maxlen: 24
                          154.81.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112062 (0x1b5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 10:08:18 2026 GMT
            Not After : Feb 11 10:08:18 2026 GMT
        Subject: CN=696f5417-f1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:4b:9f:58:c3:17:5b:45:ea:ff:62:d8:e2:
                    7a:7c:f6:a3:76:31:7d:31:f2:69:14:39:68:0d:d3:
                    a7:92:4e:28:e9:81:f6:04:92:92:bb:08:65:9e:06:
                    36:aa:58:bc:39:01:06:ee:45:f1:66:47:d1:78:09:
                    35:35:3b:9c:b5:86:7e:24:69:36:41:33:ce:a6:de:
                    63:7b:a2:4b:8f:2a:b8:7b:52:93:be:d9:64:b7:3a:
                    41:f1:40:92:ce:9a:f4:35:cb:57:fa:cc:3b:af:7b:
                    05:57:36:ea:33:41:86:5f:1e:c1:c4:08:cf:2a:b9:
                    d7:42:5a:e2:aa:54:d3:74:ea:0b:ea:96:bc:4f:24:
                    9e:e7:18:cc:5c:3c:3f:4d:33:4d:17:52:f7:d4:87:
                    a8:4a:26:fb:52:2f:78:96:c0:64:c7:4b:c8:25:1c:
                    36:55:7e:16:43:c5:89:aa:19:ce:94:1c:fa:09:b0:
                    2c:d0:a3:6d:d8:0e:dc:8a:67:df:38:17:f2:a7:c9:
                    95:17:76:b2:9b:ad:25:2f:40:93:62:ed:48:c5:e8:
                    19:67:06:dc:cd:10:2a:44:5c:0b:de:67:4b:d0:b0:
                    57:19:7f:14:6f:3c:77:f7:06:42:0a:11:2c:07:9f:
                    9c:37:9a:62:c4:b8:9f:09:b7:e6:92:af:2e:94:c9:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:22:A5:81:54:80:0E:35:33:9D:24:49:67:98:6A:89:EF:1E:8B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3FDD176F5E711F088923280DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.132.0/22
                  154.81.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:44:5c:5e:2a:43:c7:dd:1c:b7:f0:e1:15:16:35:ae:2c:d9:
         eb:cc:42:e7:89:97:ec:cd:48:78:c0:11:06:b6:1c:8b:a7:84:
         1d:8d:52:ce:9a:d0:a3:f7:95:79:18:a8:9f:9c:89:b6:29:fe:
         fe:5c:1c:4a:5d:dd:c9:ce:db:91:b5:35:14:d3:22:28:3b:cd:
         b1:80:17:1e:ef:1d:0f:75:00:c3:c8:5c:cb:ee:7e:57:ad:14:
         55:b4:9e:eb:75:bf:e1:27:de:9a:cc:36:59:fc:4a:91:e3:e2:
         9e:88:27:00:22:be:c5:92:c8:cb:36:1e:1a:c7:35:7b:c2:b9:
         a4:9d:21:5e:bc:5d:d2:b9:b5:37:b1:e4:82:5a:c1:74:1b:28:
         1d:e3:9f:ee:67:eb:54:43:a6:9d:8a:17:4b:d1:57:fa:de:9d:
         5e:ed:51:1d:7f:af:96:5e:db:20:d0:18:22:ce:ac:7f:e6:c2:
         63:63:67:e5:a1:e8:0b:1d:3d:71:c3:aa:bf:0e:47:9a:2d:28:
         ab:cd:7b:f1:bf:6f:0f:32:62:71:80:39:f6:e6:f0:d6:fc:24:
         a6:97:7b:7d:1f:8b:a7:5c:d0:88:cf:e8:48:65:4f:86:be:6c:
         40:97:a3:4f:34:ac:88:20:87:80:99:6b:c6:5c:de:5c:3b:69:
         eb:f5:98:49
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAbW+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTIwMTAwODE4WhcNMjYwMjExMTAwODE4WjAYMRYw
FAYDVQQDEw02OTZmNTQxNy1mMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SxLn1jDF1tF6v9i2OJ6fPajdjF9MfJpFDloDdOnkk4o6YH2BJKSuwhl
ngY2qli8OQEG7kXxZkfReAk1NTuctYZ+JGk2QTPOpt5je6JLjyq4e1KTvtlktzpB
8UCSzpr0NctX+sw7r3sFVzbqM0GGXx7BxAjPKrnXQlriqlTTdOoL6pa8TySe5xjM
XDw/TTNNF1L31IeoSib7Ui94lsBkx0vIJRw2VX4WQ8WJqhnOlBz6CbAs0KNt2A7c
imffOBfyp8mVF3aym60lL0CTYu1IxegZZwbczRAqRFwL3mdL0LBXGX8Ubzx39wZC
ChEsB5+cN5pixLifCbfmkq8ulMmDhwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEec
IqWBVIAONTOdJElnmGqJ7x6LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GM0ZERDE3NkY1RTcxMUYwODg5MjMyODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCmlGEAwQBmlGKMA0GCSqG
SIb3DQEBCwUAA4IBAQBvRFxeKkPH3Ry38OEVFjWuLNnrzELniZfszUh4wBEGthyL
p4QdjVLOmtCj95V5GKifnIm2Kf7+XBxKXd3JztuRtTUU0yIoO82xgBce7x0PdQDD
yFzL7n5XrRRVtJ7rdb/hJ96azDZZ/EqR4+KeiCcAIr7FksjLNh4axzV7wrmknSFe
vF3SubU3seSCWsF0Gygd45/uZ+tUQ6adihdL0Vf63p1e7VEdf6+WXtsg0Bgizqx/
5sJjY2floegLHT1xw6q/DkeaLSirzXvxv28PMmJxgDn25vDW/CSml3t9H4unXNCI
z+hIZU+GvmxAl6NPNKyIIIeAmWvGXN5cO2nr9ZhJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:42 2026 by rpki-client