This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1170A9FCF1E911F0876AA898DAE4EC9C.roa
File:                     1170A9FCF1E911F0876AA898DAE4EC9C.roa (raw, json)
Hash identifier:          9NUtvx4tEfN9d7ARoHllLsdUGnF+oqXY7Dd9+0smsKI=
Subject key identifier:   9D:5E:6D:2D:52:67:20:8A:A6:02:17:9E:8F:A0:A6:95:45:55:7C:A5
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1170A9FCF1E911F0876AA898DAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 08:06:17 +0000
ROA not before:           Thu 15 Jan 2026 08:06:12 +0000
ROA not after:            Mon 16 Feb 2026 08:06:12 +0000
asID:                     22773
IP address blocks:        154.202.90.0/24 maxlen: 24
                          154.202.92.0/24 maxlen: 24
                          154.202.93.0/24 maxlen: 24
                          154.202.94.0/24 maxlen: 24
                          154.202.95.0/24 maxlen: 24
                          154.202.96.0/24 maxlen: 24
                          154.202.97.0/24 maxlen: 24
                          154.202.98.0/24 maxlen: 24
                          154.202.102.0/24 maxlen: 24
                          154.202.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111797 (0x1b4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 15 08:06:12 2026 GMT
            Not After : Feb 16 08:06:12 2026 GMT
        Subject: CN=69689ff9-7979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:78:a5:8f:25:e1:80:8d:b0:09:ff:dc:8e:
                    4d:6d:af:eb:45:bc:bd:d0:52:c4:03:80:71:18:1d:
                    d2:bf:0e:f1:28:bb:76:89:e4:69:15:7e:c8:43:0f:
                    2e:47:bc:46:c7:ad:37:d6:3a:2f:b1:ae:37:5b:a5:
                    c8:65:08:b4:72:c2:ad:15:7e:01:81:d1:b9:ae:30:
                    93:8a:72:d5:a7:5f:14:9b:ba:08:90:30:6b:d4:50:
                    5e:b6:17:35:6a:99:ce:43:82:42:00:19:51:be:16:
                    54:32:ae:2e:92:54:46:8b:bf:55:b5:74:e9:28:49:
                    96:45:d5:f4:53:38:68:60:dc:bb:97:5e:c8:a6:53:
                    12:71:f2:c8:c1:a5:98:39:5a:ce:4a:43:88:60:6b:
                    64:bf:52:a8:30:13:62:b5:5a:8e:de:da:8d:06:ae:
                    50:0f:53:cf:37:e1:a7:a6:a5:0c:97:2b:79:9d:1c:
                    a6:28:0d:ea:77:90:30:ce:de:d8:1c:61:22:59:5e:
                    bf:50:ab:d2:8b:b6:b7:de:07:21:9c:ef:ca:d4:26:
                    ef:b6:5d:4f:0d:78:f1:ec:46:31:16:83:80:79:13:
                    0d:71:85:94:14:37:d5:90:eb:4b:fe:48:5f:42:db:
                    11:1e:e5:e4:fe:a5:be:0c:4c:b4:95:6d:0e:90:60:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5E:6D:2D:52:67:20:8A:A6:02:17:9E:8F:A0:A6:95:45:55:7C:A5
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1170A9FCF1E911F0876AA898DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.202.90.0/24
                  154.202.92.0-154.202.98.255
                  154.202.102.0/24
                  154.202.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:67:93:32:07:2e:56:18:3d:db:94:7e:56:be:b2:c8:51:ce:
         18:2d:42:da:df:ca:53:45:3c:3e:29:d1:15:8a:43:c8:af:88:
         16:50:1f:97:bb:14:19:8e:ac:6a:e9:61:33:71:db:ec:8a:20:
         c3:65:11:5d:32:8d:5d:b9:11:ba:9c:c1:6c:c2:bc:36:99:bb:
         5e:23:bc:f9:d2:bd:2e:99:19:6c:30:ae:17:cb:d2:76:9d:8a:
         86:62:c6:bf:41:8f:69:6d:dd:08:8a:c1:81:3b:b6:5e:38:8b:
         5b:a4:0f:60:1b:b1:5a:05:f5:2a:ce:32:1a:29:9d:00:2a:be:
         c1:ae:72:45:b3:0a:d0:ae:3e:b6:d5:11:7d:6d:fd:ac:1c:20:
         ca:e8:67:7d:40:e5:55:2f:3b:21:5a:d3:f8:03:9e:63:00:45:
         87:3a:a1:aa:29:66:76:45:a8:98:bc:6e:23:df:b4:4f:92:73:
         f6:49:b0:e0:95:c0:16:e7:0a:61:18:b0:c6:cc:c7:10:23:26:
         4e:4b:4c:2c:71:4f:6f:df:48:69:b4:c9:77:7a:4b:a8:8f:32:
         45:ec:ba:95:33:04:20:25:15:39:9d:71:a9:60:46:3a:0a:7f:
         85:84:6b:de:f4:c2:35:a5:20:02:75:a4:bb:a1:f9:96:1b:c3:
         11:2b:df:14
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAbS1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTE1MDgwNjEyWhcNMjYwMjE2MDgwNjEyWjAYMRYw
FAYDVQQDEw02OTY4OWZmOS03OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4n54pY8l4YCNsAn/3I5Nba/rRby90FLEA4BxGB3Svw7xKLt2ieRpFX7I
Qw8uR7xGx6031jovsa43W6XIZQi0csKtFX4BgdG5rjCTinLVp18Um7oIkDBr1FBe
thc1apnOQ4JCABlRvhZUMq4uklRGi79VtXTpKEmWRdX0UzhoYNy7l17IplMScfLI
waWYOVrOSkOIYGtkv1KoMBNitVqO3tqNBq5QD1PPN+GnpqUMlyt5nRymKA3qd5Aw
zt7YHGEiWV6/UKvSi7a33gchnO/K1Cbvtl1PDXjx7EYxFoOAeRMNcYWUFDfVkOtL
/khfQtsRHuXk/qW+DEy0lW0OkGDh2QIDAQABo4ICvzCCArswHQYDVR0OBBYEFJ1e
bS1SZyCKpgIXno+gppVFVXylMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTcwQTlGQ0YxRTkxMUYwODc2QUE4OThEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmspaMAwDBAKaylwDBACa
ymIDBACaymYDBACaymswDQYJKoZIhvcNAQELBQADggEBAM1nkzIHLlYYPduUfla+
sshRzhgtQtrfylNFPD4p0RWKQ8iviBZQH5e7FBmOrGrpYTNx2+yKIMNlEV0yjV25
EbqcwWzCvDaZu14jvPnSvS6ZGWwwrhfL0nadioZixr9Bj2lt3QiKwYE7tl44i1uk
D2AbsVoF9SrOMhopnQAqvsGuckWzCtCuPrbVEX1t/awcIMroZ31A5VUvOyFa0/gD
nmMARYc6oaopZnZFqJi8biPftE+Sc/ZJsOCVwBbnCmEYsMbMxxAjJk5LTCxxT2/f
SGm0yXd6S6iPMkXsupUzBCAlFTmdcalgRjoKf4WEa970wjWlIAJ1pLuh+ZYbwxEr
3xQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:39 2026 by rpki-client