This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26BFA2F60811F0A417CDC1DAE4EC9C.roa
File:                     0E26BFA2F60811F0A417CDC1DAE4EC9C.roa (raw, json)
Hash identifier:          VLOaWJUGFSfcA0LkkCxCvEBhlbJVFkvyIAzVImTR2HA=
Subject key identifier:   B7:D2:EE:A1:A6:18:06:7F:C7:7D:31:32:A0:25:1D:5D:3F:03:83:C9
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26BFA2F60811F0A417CDC1DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 13:58:11 +0000
ROA not before:           Tue 20 Jan 2026 13:58:06 +0000
ROA not after:            Tue 24 Feb 2026 13:58:06 +0000
asID:                     63139
IP address blocks:        154.94.64.0/24 maxlen: 24
                          154.94.79.0/24 maxlen: 24
                          154.94.83.0/24 maxlen: 24
                          154.94.84.0/24 maxlen: 24
                          154.94.85.0/24 maxlen: 24
                          154.94.86.0/24 maxlen: 24
                          154.94.87.0/24 maxlen: 24
                          154.94.88.0/24 maxlen: 24
                          154.94.89.0/24 maxlen: 24
                          154.94.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112085 (0x1b5d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 13:58:06 2026 GMT
            Not After : Feb 24 13:58:06 2026 GMT
        Subject: CN=696f89f3-2ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:21:1a:a5:2c:81:0b:6a:4f:85:df:ed:4c:38:
                    b1:bd:10:8e:72:bc:e8:e4:78:f5:38:52:64:bd:4f:
                    5e:74:9e:e2:c3:11:3e:a4:3b:78:60:c8:41:22:a0:
                    11:88:2a:43:c2:f0:95:d2:ba:9c:de:69:20:ba:e0:
                    30:3e:3a:3e:67:4b:25:f0:02:f2:32:4e:a9:14:57:
                    6c:dc:93:4f:b5:7e:cc:97:59:0c:f7:6a:21:35:70:
                    39:3f:e8:3a:cb:a5:ba:d3:04:4f:32:2d:ac:95:bf:
                    02:66:a2:3d:8e:07:8e:2f:63:dd:21:5e:ee:65:78:
                    e5:38:94:b9:7a:8e:81:c7:08:e8:1d:4f:b1:42:ca:
                    88:86:a5:df:6a:a2:76:30:81:2e:50:34:26:e5:1e:
                    8a:6d:54:91:7f:8d:14:03:39:9b:8f:d6:e4:1f:0d:
                    75:80:bf:c1:8e:99:c1:43:84:9f:b0:ee:3e:a1:41:
                    f4:37:16:1d:0a:8e:c9:1f:20:11:c6:46:ed:f6:a2:
                    27:68:c7:09:8e:3a:45:be:de:91:78:52:31:b4:0c:
                    7c:69:97:18:d6:30:10:8c:73:fe:ea:47:71:eb:b4:
                    46:16:57:95:87:66:f3:28:a0:56:d1:85:0d:9a:39:
                    df:22:ca:b0:62:e2:5e:00:38:11:d5:e5:72:56:61:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:EE:A1:A6:18:06:7F:C7:7D:31:32:A0:25:1D:5D:3F:03:83:C9
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E26BFA2F60811F0A417CDC1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.64.0/24
                  154.94.79.0/24
                  154.94.83.0-154.94.90.255

    Signature Algorithm: sha256WithRSAEncryption
         88:06:d0:9c:00:cc:cd:c9:59:41:75:b7:7d:e6:b2:63:5b:a6:
         1c:01:b8:c9:ff:c5:d2:08:56:71:5f:46:c1:f9:62:f9:24:01:
         c9:37:58:22:f2:26:0a:24:76:6a:39:75:de:e0:e4:7f:4f:35:
         33:b8:86:33:f2:17:0e:bb:b5:86:a9:41:cc:09:88:f3:73:cd:
         c3:70:65:55:7c:29:11:bb:98:cf:db:02:1c:9c:f7:d3:d1:02:
         1d:e8:9e:bd:e9:4e:8b:3b:9f:c6:4f:7f:36:e2:4c:1f:f5:18:
         b3:4e:2c:e1:45:11:bd:b4:c9:d7:a6:ca:6b:95:5b:5a:7a:cc:
         a8:5b:87:27:9c:c5:6e:1d:cf:49:db:f6:84:5b:58:41:15:06:
         3e:07:ab:ba:69:44:db:e8:b2:f3:33:86:bc:ff:0c:26:f0:a9:
         a7:00:40:28:6f:5c:97:7d:a5:ba:02:89:c5:58:63:45:9c:cb:
         30:d8:f1:4d:bd:16:ea:04:8d:6c:e2:cd:d3:f6:86:27:ea:96:
         38:46:b0:39:a3:d0:ef:a0:48:89:86:3a:4f:87:45:c5:29:92:
         d9:fc:06:71:ab:cb:69:f1:1b:c4:c9:28:e8:b0:b5:ac:8b:21:
         6c:28:f8:82:1e:73:a9:df:b7:c9:5a:13:52:e6:da:c5:a1:4f:
         4a:66:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:34 2026 by rpki-client