This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62946C8E24211F08C938B91DAE4EC9C.roa
File:                     F62946C8E24211F08C938B91DAE4EC9C.roa (raw, json)
Hash identifier:          YsZmFJwOUD/GaiEO2H5eIr2Z+W1ToNeRoM+fHKBKdN4=
Subject key identifier:   D9:33:DA:ED:E0:5F:9D:41:FF:79:0E:83:AB:BC:B7:DD:90:21:16:F0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B167
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62946C8E24211F08C938B91DAE4EC9C.roa
Signing time:             Fri 26 Dec 2025 10:09:28 +0000
ROA not before:           Fri 26 Dec 2025 10:09:23 +0000
ROA not after:            Mon 02 Feb 2026 10:09:23 +0000
asID:                     209242
IP address blocks:        154.206.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110951 (0x1b167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 26 10:09:23 2025 GMT
            Not After : Feb  2 10:09:23 2026 GMT
        Subject: CN=694e5ed8-21a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:11:f4:50:d6:00:34:84:77:62:6c:05:d2:
                    74:2e:18:ce:ef:7b:9b:45:30:dc:9d:a3:fe:95:56:
                    5c:59:98:3d:e0:40:51:b0:b1:ce:7e:32:c0:73:92:
                    50:ac:8a:5e:93:d1:76:33:d0:3e:92:eb:69:fd:36:
                    6f:13:2a:95:7c:46:7c:bf:af:64:6e:04:55:31:31:
                    18:b3:8f:54:8d:39:c8:9d:49:c6:a2:e0:ec:b9:98:
                    dc:e7:b0:f9:80:43:4a:53:12:af:ee:93:d7:af:e6:
                    19:45:b9:bf:6e:30:5c:3f:f1:fa:c3:bf:fa:59:ad:
                    b3:32:4d:53:44:d4:7a:82:f9:16:a7:e2:22:17:22:
                    02:da:88:ca:c5:84:ad:da:be:c3:77:ff:43:9c:ed:
                    9c:8c:f1:90:66:1e:bd:62:af:ea:90:57:10:a1:8d:
                    31:41:2a:97:e6:fd:08:97:74:f0:d6:aa:e1:be:d5:
                    1d:c4:ae:3d:29:fe:58:64:fb:de:5c:c7:d5:16:bf:
                    d5:c1:8b:a9:a4:08:76:3f:18:d1:27:31:30:43:15:
                    ab:81:50:2a:49:02:e7:06:6e:06:92:0b:cf:e3:0f:
                    30:b3:f9:16:ba:ee:b1:b7:a2:e9:28:f8:51:9f:6e:
                    99:57:97:15:81:92:52:7b:9a:10:df:dc:37:55:c2:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:33:DA:ED:E0:5F:9D:41:FF:79:0E:83:AB:BC:B7:DD:90:21:16:F0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F62946C8E24211F08C938B91DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.206.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:62:cb:90:3d:c5:51:a6:1b:dd:e2:61:47:50:fb:0e:2a:
         a0:3b:13:c9:5d:94:aa:58:1b:be:52:8e:c6:6c:47:ee:27:82:
         ff:df:ec:e6:cc:bd:db:4e:ba:7a:f1:a4:35:b2:5d:e7:90:c0:
         2f:1e:e6:77:31:e3:d0:b8:d0:5e:00:8d:51:56:50:81:94:e0:
         b4:27:fd:48:4f:08:36:cf:3d:48:6e:cb:eb:bf:c2:77:45:65:
         68:c2:5f:c0:2c:d0:21:dd:01:0a:07:9c:6e:c0:67:7e:47:d1:
         75:b8:3c:fc:23:fb:af:3c:79:32:9c:c2:33:9e:4a:20:ff:d1:
         d6:9d:62:3e:a2:b2:a4:36:c0:a4:d9:ca:0e:c0:e4:3f:13:1e:
         b6:c2:6b:8a:1f:b9:93:e3:35:17:09:ad:b6:55:d3:93:2b:a7:
         fe:b0:89:ce:de:dc:6c:59:db:b9:9f:37:2a:a3:b8:1a:fb:37:
         0b:49:bf:91:3f:8e:82:43:8f:53:1a:a5:58:13:94:66:2f:2b:
         2c:f7:17:26:4b:15:5f:60:07:b5:43:76:7c:3c:e0:63:85:3a:
         ed:4b:88:b9:a7:06:32:57:47:d0:cb:5b:7c:9f:1c:81:d6:93:
         36:56:c1:4c:88:26:f2:14:7c:6a:11:fd:d9:86:6d:ae:63:57:
         13:7e:70:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbFnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjI2MTAwOTIzWhcNMjYwMjAyMTAwOTIzWjAYMRYw
FAYDVQQDEw02OTRlNWVkOC0yMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwj0R9FDWADSEd2JsBdJ0LhjO73ubRTDcnaP+lVZcWZg94EBRsLHOfjLA
c5JQrIpek9F2M9A+kutp/TZvEyqVfEZ8v69kbgRVMTEYs49UjTnInUnGouDsuZjc
57D5gENKUxKv7pPXr+YZRbm/bjBcP/H6w7/6Wa2zMk1TRNR6gvkWp+IiFyIC2ojK
xYSt2r7Dd/9DnO2cjPGQZh69Yq/qkFcQoY0xQSqX5v0Il3Tw1qrhvtUdxK49Kf5Y
ZPveXMfVFr/VwYuppAh2PxjRJzEwQxWrgVAqSQLnBm4GkgvP4w8ws/kWuu6xt6Lp
KPhRn26ZV5cVgZJSe5oQ39w3VcKPxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNkz
2u3gX51B/3kOg6u8t92QIRbwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjI5NDZDOEUyNDIxMUYwOEM5MzhCOTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4MMA0GCSqGSIb3DQEB
CwUAA4IBAQBdp2LLkD3FUaYb3eJhR1D7DiqgOxPJXZSqWBu+Uo7GbEfuJ4L/3+zm
zL3bTrp68aQ1sl3nkMAvHuZ3MePQuNBeAI1RVlCBlOC0J/1ITwg2zz1Ibsvrv8J3
RWVowl/ALNAh3QEKB5xuwGd+R9F1uDz8I/uvPHkynMIznkog/9HWnWI+orKkNsCk
2coOwOQ/Ex62wmuKH7mT4zUXCa22VdOTK6f+sInO3txsWdu5nzcqo7ga+zcLSb+R
P46CQ49TGqVYE5RmLyss9xcmSxVfYAe1Q3Z8POBjhTrtS4i5pwYyV0fQy1t8nxyB
1pM2VsFMiCbyFHxqEf3Zhm2uY1cTfnAr
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:21 2026 by rpki-client