This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
File:                     04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa (raw, json)
Hash identifier:          XcepTlrQ9kaP3Ci7Hw6QSqhRXzvlkRKUY+z+xn29xR0=
Subject key identifier:   97:5F:57:5E:7B:3E:3E:0C:C8:DD:22:5D:53:24:8C:03:F7:B5:74:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 09:11:35 +0000
ROA not before:           Tue 20 Jan 2026 09:11:30 +0000
ROA not after:            Tue 24 Feb 2026 09:11:30 +0000
asID:                     63139
IP address blocks:        154.194.68.0/24 maxlen: 24
                          154.203.160.0/24 maxlen: 24
                          154.203.161.0/24 maxlen: 24
                          154.203.162.0/24 maxlen: 24
                          154.203.163.0/24 maxlen: 24
                          154.203.164.0/24 maxlen: 24
                          154.203.165.0/24 maxlen: 24
                          154.203.166.0/24 maxlen: 24
                          154.203.167.0/24 maxlen: 24
                          154.203.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112044 (0x1b5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 09:11:30 2026 GMT
            Not After : Feb 24 09:11:30 2026 GMT
        Subject: CN=696f46c7-2a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:cf:de:66:11:ba:9b:06:a8:39:ae:98:01:
                    b4:8d:7e:95:d4:e0:58:e1:6c:b5:1f:c0:63:d0:56:
                    45:99:07:6c:42:64:d7:b4:7c:ef:74:c8:36:81:96:
                    4e:af:81:0c:10:59:76:53:da:c8:a7:a8:06:40:d4:
                    4f:28:4f:f4:68:69:18:d2:31:70:06:0f:3d:8a:de:
                    ef:0e:d8:98:9e:47:73:28:2b:61:d9:4b:eb:07:34:
                    4d:1c:77:30:4c:4e:55:fe:d6:64:7d:30:c9:99:29:
                    fc:6f:90:80:56:46:72:73:04:8c:30:8e:cf:c7:74:
                    66:80:00:4b:91:29:19:d2:04:67:e4:33:c9:15:4f:
                    1f:ad:cc:18:66:14:5c:3b:dd:8c:f9:47:66:b6:ed:
                    8a:39:aa:0a:8b:a1:c7:62:ce:43:3f:cf:1e:b6:6a:
                    71:5a:e9:a3:28:44:fb:69:1c:17:02:8a:0f:5c:b2:
                    6d:fa:69:0b:97:1b:59:66:ae:eb:6b:e0:1f:20:b3:
                    bb:7f:50:3d:1f:fc:ab:78:7e:a3:93:7d:57:47:75:
                    29:9c:5a:9c:83:7d:cf:83:33:a8:ac:6c:74:08:bd:
                    b7:41:f0:d6:a0:66:56:12:14:d8:96:db:bc:30:34:
                    a8:fc:93:a3:47:37:1a:9c:1c:0d:a4:35:02:34:c8:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:57:5E:7B:3E:3E:0C:C8:DD:22:5D:53:24:8C:03:F7:B5:74:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.68.0/24
                  154.203.160.0-154.203.168.255

    Signature Algorithm: sha256WithRSAEncryption
         29:69:ef:f2:42:e4:c6:06:e4:e9:d0:d0:b1:3f:0b:3a:a4:50:
         98:14:ee:87:75:98:60:3c:af:f3:10:b0:0b:6c:6e:1e:bd:f0:
         e9:83:34:a8:42:dc:ef:ca:31:a7:e1:fc:52:7a:56:5f:ee:33:
         75:75:d7:ad:b4:26:be:ea:7b:a2:54:63:24:4d:1e:cd:40:a9:
         dc:bb:ad:0d:98:fa:e9:e7:ec:a3:ef:0c:a8:eb:54:88:f3:d1:
         f0:02:cb:65:69:09:6a:18:5f:9b:c1:f1:4f:f8:8f:5c:9d:4a:
         b8:93:0f:c4:45:30:60:07:c2:8d:88:4b:78:0a:22:f0:59:63:
         3d:f3:cb:e9:e6:19:c1:6a:5c:e8:01:f3:59:80:77:f2:0b:a0:
         28:5e:bb:c3:66:28:31:b9:7d:a3:65:49:38:e3:69:77:8c:13:
         18:28:b0:5d:70:3a:a1:cf:4d:5d:b1:8c:36:38:f8:43:f6:b0:
         ac:46:92:92:83:06:eb:79:23:56:c5:16:7d:4e:be:c8:62:fa:
         a1:3c:d6:23:21:a4:71:8e:51:bd:72:a6:75:33:50:11:63:6e:
         44:32:c4:97:f8:7f:8d:ac:9b:d4:83:65:2a:ba:34:64:92:e4:
         83:75:9d:f8:42:7b:7d:c5:ee:01:6c:f8:f1:53:fd:cd:31:03:
         9f:8f:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:36 2026 by rpki-client