This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50E7392F82411F08F2DBACCDAE4EC9C.roa
File:                     F50E7392F82411F08F2DBACCDAE4EC9C.roa (raw, json)
Hash identifier:          j5isRlhTVTprsTQ+y0qaYWTiDZlw/eVYnreTwI5E6UU=
Subject key identifier:   69:8A:75:0F:0C:AC:4E:5E:E5:87:4E:ED:1B:D8:5E:87:64:48:ED:27
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B60B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50E7392F82411F08F2DBACCDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 06:30:07 +0000
ROA not before:           Fri 23 Jan 2026 06:30:01 +0000
ROA not after:            Sat 28 Feb 2026 06:30:01 +0000
asID:                     48031
IP address blocks:        154.92.12.0/24 maxlen: 24
                          154.92.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112139 (0x1b60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 06:30:01 2026 GMT
            Not After : Feb 28 06:30:01 2026 GMT
        Subject: CN=6973156e-9183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:0b:a5:9b:d6:b5:43:2c:fd:19:24:b1:d6:
                    11:6a:0a:e6:6a:e8:10:1a:f5:38:a8:08:b8:ae:a5:
                    00:bc:1d:2c:05:b1:d5:d3:52:cc:e6:a8:3b:27:3f:
                    03:56:28:1d:09:e1:05:a2:8f:d9:ad:54:58:4b:6c:
                    8b:a5:d5:30:1d:05:63:1d:b8:ad:e5:8b:ad:53:47:
                    90:70:fc:90:50:8c:9f:a0:3f:f8:ad:f3:6f:5f:bc:
                    ff:89:8f:c6:cd:fd:8d:87:4b:65:c5:5f:0b:cb:32:
                    6e:68:dc:98:14:5d:e7:8c:a9:ea:58:67:99:c2:cd:
                    30:d7:e5:4b:7e:ba:da:59:8a:d3:aa:01:e2:da:21:
                    2a:e6:16:e6:9a:9a:6c:78:3a:a7:d2:cb:39:7b:73:
                    92:83:55:ba:fd:25:a2:09:cd:23:6a:3a:ee:9c:ac:
                    ad:ed:9e:e1:c4:ad:4b:e5:71:f9:17:cd:c1:05:5d:
                    4f:48:fa:bb:8b:b7:f6:cf:8d:2c:50:04:3e:d1:fa:
                    34:7c:01:04:cc:a1:4d:0c:06:2d:0e:5d:cd:c0:9a:
                    09:6b:61:6d:d1:a1:ba:62:78:0e:97:b0:80:d5:fe:
                    d8:cf:6f:6d:20:b2:b5:53:20:f6:fc:74:72:01:d1:
                    c4:69:b8:0b:ff:55:7b:a6:63:85:1f:a8:d8:d0:c4:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:75:0F:0C:AC:4E:5E:E5:87:4E:ED:1B:D8:5E:87:64:48:ED:27
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F50E7392F82411F08F2DBACCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.92.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:b0:0f:f1:b1:a0:bc:14:e6:15:b4:4a:74:ff:ca:ff:46:
         8b:cc:ad:2a:8e:ad:18:99:b3:dd:82:e7:f1:29:4a:11:15:c2:
         de:75:e4:a4:8a:e7:bd:34:a7:03:60:0d:42:55:c3:cc:7e:de:
         df:09:08:3e:5d:17:50:5c:9c:b7:d0:a5:2c:ac:97:c1:a3:08:
         aa:f1:5e:5e:11:5c:53:d7:3a:4c:fd:f2:eb:e9:99:3a:53:01:
         6d:7b:e9:4c:ce:79:23:b7:30:13:d6:97:29:c9:80:02:68:48:
         81:5e:20:d8:00:ae:07:e3:32:20:f3:5e:d9:cb:ad:2e:87:c1:
         97:b1:08:dc:4d:ca:75:d2:3d:24:f4:c8:08:ca:09:ea:e4:42:
         f0:6e:20:69:93:96:9a:6d:bd:41:49:5b:aa:62:9b:06:5c:e4:
         86:8d:41:ea:2b:66:07:11:f0:ee:48:b6:b6:19:bf:37:57:6b:
         4a:d4:9e:3d:a0:59:80:0e:b3:b1:83:ed:68:95:b1:68:87:47:
         44:2b:52:6d:9a:61:57:7f:8a:4e:0f:f2:b7:b5:74:79:bd:4a:
         9c:3e:e1:9c:81:4d:bc:28:02:a7:bc:fc:90:e4:66:98:63:34:
         83:05:73:77:7e:c9:2d:d1:7a:14:2a:92:63:19:4e:61:18:63:
         3a:36:7c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:50:03 2026 by rpki-client