This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A9FB6E6E17611F0AAF3E189DAE4EC9C.roa
File:                     0A9FB6E6E17611F0AAF3E189DAE4EC9C.roa (raw, json)
Hash identifier:          apbC988jATSI4GFKbCQsYAMAFaUKSVlL9FQnCx6RaTM=
Subject key identifier:   43:AF:1C:72:71:AE:73:A9:9D:94:15:54:A6:A3:C5:E3:93:A0:20:BF
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B14E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A9FB6E6E17611F0AAF3E189DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 09:42:35 +0000
ROA not before:           Thu 25 Dec 2025 09:42:30 +0000
ROA not after:            Sun 01 Feb 2026 09:42:30 +0000
asID:                     214238
IP address blocks:        154.81.193.0/24 maxlen: 24
                          154.81.194.0/24 maxlen: 24
                          154.81.196.0/24 maxlen: 24
                          154.81.197.0/24 maxlen: 24
                          154.81.198.0/24 maxlen: 24
                          154.81.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110926 (0x1b14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Dec 25 09:42:30 2025 GMT
            Not After : Feb  1 09:42:30 2026 GMT
        Subject: CN=694d070b-de7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:7f:35:a6:78:32:bc:55:dd:90:45:54:9f:
                    d9:3c:c6:c7:af:f7:8c:aa:18:9a:94:55:4b:c9:54:
                    b9:13:fa:d0:d2:c3:6a:ec:68:43:c9:ac:ff:5c:0e:
                    25:4e:0d:f1:7f:f1:e5:85:1f:d3:6c:c1:27:14:29:
                    89:85:2e:f8:b7:08:87:2b:e3:6b:45:f9:62:d1:ab:
                    a9:ba:7b:36:62:0b:6a:08:9c:73:03:28:54:27:ee:
                    a2:b4:57:29:2b:b6:92:36:7c:78:6a:93:ab:4a:02:
                    d6:6c:27:c8:e0:c3:c8:8a:6a:5b:e3:06:c5:1f:82:
                    c2:b7:87:f1:7a:8d:12:af:c2:c2:c5:bd:b2:b6:96:
                    fd:a1:e7:61:f1:88:c8:1a:0c:a2:7f:c1:d4:50:9e:
                    f5:2b:68:43:3a:0b:72:3c:55:63:34:31:43:9e:9a:
                    c5:2d:e6:bb:5c:7a:98:53:64:e7:13:6d:a7:3d:ec:
                    2e:1f:dd:43:2d:d6:98:3e:2b:30:a5:2e:f1:6d:d3:
                    4b:61:e0:e5:b0:2f:25:29:d7:d1:1f:09:f7:89:7d:
                    5a:19:9d:b6:d5:2b:ba:85:9d:48:26:1c:98:3f:a3:
                    36:fb:a8:10:2d:61:e2:30:1f:eb:2f:e4:c3:18:72:
                    ee:26:ea:f4:99:fa:bb:92:e8:67:1d:fc:d9:15:27:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AF:1C:72:71:AE:73:A9:9D:94:15:54:A6:A3:C5:E3:93:A0:20:BF
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A9FB6E6E17611F0AAF3E189DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.193.0-154.81.194.255
                  154.81.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:d8:38:c3:a6:56:14:39:8b:d0:cf:16:12:fa:62:5e:25:cf:
         19:b2:bc:d5:8c:d3:81:eb:5e:76:23:77:e6:89:92:e7:4c:7d:
         90:cf:71:0c:99:1b:a3:81:bb:42:c2:7b:dd:9a:a9:4e:12:f0:
         cd:1b:9b:ae:5e:b2:96:c1:92:c6:65:48:ff:8d:b9:c7:62:40:
         0b:36:26:86:ab:ee:c9:22:dc:00:cb:af:20:a1:81:1a:42:cb:
         01:4e:12:13:53:69:ad:2c:56:46:cb:ea:bd:27:f7:f2:e9:10:
         c4:d4:f4:34:b3:93:0e:1d:a1:a1:fc:86:27:31:35:54:df:77:
         c6:4a:5d:1c:f4:d2:54:6c:06:a9:b5:bc:b3:01:d8:e3:32:82:
         59:b4:00:53:66:37:96:6d:ef:01:18:dd:ac:63:3e:a5:0b:e6:
         8b:f9:6e:de:4c:af:b5:52:2e:13:fe:aa:66:00:0a:07:c9:72:
         9a:ca:3c:12:d8:18:aa:45:c3:7c:a6:82:dd:81:d8:19:a0:93:
         87:8a:6f:85:a7:f0:bb:34:68:0e:4b:0e:6e:54:a6:3b:df:95:
         d6:24:c7:62:32:a0:4c:4d:da:32:d3:50:c5:b8:cc:cb:35:41:
         2f:a2:b1:32:b4:07:84:03:15:ba:1f:46:98:f0:68:00:b7:9d:
         0f:ac:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:25 2026 by rpki-client