This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/182E5A72F69A11F0B1873ECBDAE4EC9C.roa
File:                     182E5A72F69A11F0B1873ECBDAE4EC9C.roa (raw, json)
Hash identifier:          elp+D8qcot4OeR+2S80SzZcKzQvKckhVJaDxGAsLctU=
Subject key identifier:   71:8F:E7:DE:87:48:62:99:F3:59:68:91:D8:E7:03:29:BB:F9:56:EE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/182E5A72F69A11F0B1873ECBDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 07:23:34 +0000
ROA not before:           Wed 21 Jan 2026 07:23:28 +0000
ROA not after:            Wed 07 Jul 2027 07:23:28 +0000
asID:                     328608
IP address blocks:        154.88.40.0/24 maxlen: 24
                          154.91.172.0/22 maxlen: 24
                          154.201.48.0/22 maxlen: 24
                          154.201.52.0/24 maxlen: 24
                          154.214.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112102 (0x1b5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 21 07:23:28 2026 GMT
            Not After : Jul  7 07:23:28 2027 GMT
        Subject: CN=69707ef6-83b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b3:14:94:9a:36:2f:06:04:fb:7d:a7:a7:2c:
                    6d:5e:b1:7b:76:84:0f:17:a7:60:95:26:a2:ef:8f:
                    75:7d:a9:f4:37:40:c8:45:82:14:33:f2:9b:46:73:
                    ff:ba:93:20:f5:c9:bc:1e:cd:89:94:41:b8:53:70:
                    9d:5d:62:73:09:0d:47:86:7a:95:a7:33:f3:1c:1f:
                    9b:3e:b0:d3:2c:0f:86:c3:bc:78:f4:2f:6d:0d:f4:
                    e9:db:d4:a2:bc:4b:79:af:6f:b0:cf:d9:a1:71:e0:
                    a4:4d:07:a8:74:27:75:66:d2:62:30:89:03:7d:eb:
                    29:1f:93:85:e0:a7:aa:cf:11:9b:31:45:1a:a4:b4:
                    6e:0c:30:a0:2c:2e:cf:27:c6:fb:6d:d5:0d:05:92:
                    2d:9b:9d:96:9c:a0:27:cd:5e:35:ef:65:05:ce:3d:
                    a5:6a:ba:6e:d8:4f:3f:6e:32:3e:d6:d4:6f:de:0d:
                    0d:0c:c9:eb:7c:a7:43:ee:e7:ad:12:9c:80:a8:9f:
                    2f:01:f9:52:1c:cf:af:41:77:8d:e2:8f:a8:68:ef:
                    98:bf:61:e1:c9:95:a2:cf:3a:f2:db:25:21:46:a2:
                    0f:d9:1d:2d:3c:43:45:16:09:3b:1c:7e:9e:14:d2:
                    2d:07:fc:57:08:ea:d6:9b:6f:3e:1e:78:7a:63:c6:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8F:E7:DE:87:48:62:99:F3:59:68:91:D8:E7:03:29:BB:F9:56:EE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/182E5A72F69A11F0B1873ECBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.88.40.0/24
                  154.91.172.0/22
                  154.201.48.0-154.201.52.255
                  154.214.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:93:9f:91:57:2f:74:a0:95:7b:3d:c1:1e:06:3a:43:cf:
         86:db:c7:1a:3d:e6:b3:4f:21:93:03:f6:ba:82:2b:a5:77:0c:
         45:dc:fe:2c:40:bd:ab:3a:8a:c4:8b:89:c7:ca:0d:26:b9:31:
         f3:8f:82:c4:c7:2b:f6:72:93:07:66:7e:5b:33:23:f8:c0:27:
         e3:1d:a1:77:6e:50:e8:0a:e9:8b:d0:c8:38:b3:a0:6f:74:27:
         ec:36:bf:7f:35:cb:de:14:d7:6c:5f:eb:45:63:4d:05:ba:16:
         34:2e:0e:e1:a2:1d:63:01:89:5f:32:f0:cd:a5:63:c8:9d:77:
         35:5b:57:64:88:2a:34:21:33:43:8e:65:68:90:87:35:60:5c:
         30:c5:9f:0e:25:1e:18:02:b6:b2:c5:e1:8f:5f:53:e1:8c:26:
         a5:b6:08:9c:ed:08:06:ba:86:1c:3f:ff:c6:80:49:d3:42:6a:
         a0:d9:52:2b:70:d0:17:49:bb:db:6c:5f:ac:d1:59:42:8e:1e:
         de:e7:5c:8f:9a:c0:39:5b:3d:b1:3e:4f:59:39:f6:fc:ad:51:
         8b:74:16:c9:5c:24:ee:75:20:a8:05:df:47:9a:15:2c:e5:f5:
         fc:68:52:79:67:63:2f:04:2d:64:df:dc:15:f6:15:63:a5:4e:
         78:0f:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:48 2026 by rpki-client