This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD35066EBAD11F0AEAF93BADAE4EC9C.roa
File:                     1CD35066EBAD11F0AEAF93BADAE4EC9C.roa (raw, json)
Hash identifier:          H1hYg3QROE4zhPKTiQ3cg310ZDp6xlEZoyFN8H5Os/o=
Subject key identifier:   C0:D5:3C:9C:0E:EB:52:E4:E1:4E:20:5F:0D:E2:5D:4B:DF:41:74:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B373
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD35066EBAD11F0AEAF93BADAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 09:42:00 +0000
ROA not before:           Wed 07 Jan 2026 09:41:53 +0000
ROA not after:            Mon 09 Feb 2026 09:41:53 +0000
asID:                     140666
IP address blocks:        154.95.72.0/22 maxlen: 24
                          154.95.96.0/22 maxlen: 24
                          154.95.100.0/22 maxlen: 24
                          154.95.104.0/22 maxlen: 24
                          154.95.108.0/22 maxlen: 24
                          154.95.112.0/22 maxlen: 24
                          154.95.116.0/22 maxlen: 24
                          154.95.120.0/23 maxlen: 24
                          154.95.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111475 (0x1b373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 09:41:53 2026 GMT
            Not After : Feb  9 09:41:53 2026 GMT
        Subject: CN=695e2a68-befb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:e6:e0:bb:82:92:f5:93:60:b1:a2:52:18:
                    59:76:03:64:d0:61:4e:d9:7d:c7:3b:1e:25:5d:f7:
                    5b:9b:4b:a8:66:11:a6:72:2e:a9:4d:ac:d9:e8:7f:
                    49:10:fd:45:d3:eb:47:e2:26:2d:5e:03:30:db:9a:
                    50:21:96:f9:16:55:a8:91:e2:c5:07:22:ed:c0:05:
                    96:1b:07:65:28:d0:71:53:bd:6d:7c:ce:40:70:50:
                    b7:ce:79:a5:d9:c9:c6:2b:7f:a4:61:40:3f:2e:8f:
                    e7:d9:19:c9:a2:9e:e9:e7:47:cc:e8:0b:67:98:47:
                    9d:c2:e6:7d:70:f9:da:b3:de:e2:53:f7:9d:a5:44:
                    5d:8e:4c:6c:b6:38:92:84:46:cd:76:06:6e:5e:99:
                    7a:82:d9:c8:ac:d1:3f:69:66:f3:b3:2b:57:1c:47:
                    c8:15:88:45:35:3a:a6:f3:5a:e4:06:e2:fa:ea:90:
                    f6:ef:d6:e0:78:7b:5f:b9:db:79:9a:19:04:b2:91:
                    1c:96:5a:db:d6:c7:05:6c:7a:5a:33:1f:3b:c7:9b:
                    cf:e7:90:aa:99:e7:c5:84:53:a3:9a:cb:51:d8:26:
                    51:34:64:8b:64:c6:4e:66:6a:08:a9:ec:0a:b3:74:
                    89:f8:42:1b:2d:4f:6e:6d:88:b9:ac:b4:31:e0:32:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D5:3C:9C:0E:EB:52:E4:E1:4E:20:5F:0D:E2:5D:4B:DF:41:74:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CD35066EBAD11F0AEAF93BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.72.0/22
                  154.95.96.0-154.95.121.255
                  154.95.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:d3:b0:6d:2b:82:7d:25:c8:4f:2a:1c:fb:38:e8:51:63:
         60:f9:f0:40:83:57:09:3f:c5:11:3a:17:97:e1:4b:27:9a:d8:
         4f:af:49:37:23:dc:5a:e6:5f:cd:5f:9f:86:2d:2f:b5:60:f4:
         ac:21:37:c7:b4:22:32:37:8e:f5:8d:22:1b:91:a6:4c:7c:8f:
         e0:60:de:f3:97:bf:b3:6d:4d:11:6c:8c:1c:f8:92:48:4b:c6:
         46:04:29:50:aa:ca:05:e5:60:10:ce:07:4d:a7:43:9a:0b:45:
         dd:c3:ff:79:4d:a1:6c:02:60:ea:f1:c9:bf:2b:16:bc:a3:9e:
         bc:ef:72:10:a6:2d:12:7f:ee:7d:13:bd:dc:ac:2f:8d:1c:e3:
         11:2d:e8:8b:0a:67:b2:4b:27:42:49:4d:b2:d7:f2:9c:1c:c0:
         12:1b:0d:c0:e0:ee:9f:4d:83:39:77:ae:89:05:db:fe:1e:34:
         05:7f:ca:aa:6c:87:43:be:ef:88:c0:3b:ff:28:fa:96:04:d9:
         0c:ae:f1:7f:9a:d6:71:16:fb:ca:f4:cd:ba:eb:28:66:f9:71:
         e3:a7:27:4d:4b:0b:6e:34:c0:23:f7:fb:8c:36:87:12:d3:3e:
         56:06:ce:e5:c3:91:46:97:d8:6b:5a:26:f2:17:cc:40:b6:85:
         ad:e3:13:60
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAbNzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA3MDk0MTUzWhcNMjYwMjA5MDk0MTUzWjAYMRYw
FAYDVQQDEw02OTVlMmE2OC1iZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApb/m4LuCkvWTYLGiUhhZdgNk0GFO2X3HOx4lXfdbm0uoZhGmci6pTazZ
6H9JEP1F0+tH4iYtXgMw25pQIZb5FlWokeLFByLtwAWWGwdlKNBxU71tfM5AcFC3
znml2cnGK3+kYUA/Lo/n2RnJop7p50fM6AtnmEedwuZ9cPnas97iU/edpURdjkxs
tjiShEbNdgZuXpl6gtnIrNE/aWbzsytXHEfIFYhFNTqm81rkBuL66pD279bgeHtf
udt5mhkEspEcllrb1scFbHpaMx87x5vP55CqmefFhFOjmstR2CZRNGSLZMZOZmoI
qewKs3SJ+EIbLU9ubYi5rLQx4DL91QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFMDV
PJwO61Lk4U4gXw3iXUvfQXS7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQ0QzNTA2NkVCQUQxMUYwQUVBRjkzQkFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCml9IMAwDBAWaX2ADBAGa
X3gDBACaX3wwDQYJKoZIhvcNAQELBQADggEBAKEQ07BtK4J9JchPKhz7OOhRY2D5
8ECDVwk/xRE6F5fhSyea2E+vSTcj3FrmX81fn4YtL7Vg9KwhN8e0IjI3jvWNIhuR
pkx8j+Bg3vOXv7NtTRFsjBz4kkhLxkYEKVCqygXlYBDOB02nQ5oLRd3D/3lNoWwC
YOrxyb8rFryjnrzvchCmLRJ/7n0TvdysL40c4xEt6IsKZ7JLJ0JJTbLX8pwcwBIb
DcDg7p9Ngzl3rokF2/4eNAV/yqpsh0O+74jAO/8o+pYE2Qyu8X+a1nEW+8r0zbrr
KGb5ceOnJ01LC240wCP3+4w2hxLTPlYGzuXDkUaX2GtaJvIXzEC2ha3jE2A=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:19 2026 by rpki-client