This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E50203EF60911F086C6DEC9DAE4EC9C.roa
File:                     1E50203EF60911F086C6DEC9DAE4EC9C.roa (raw, json)
Hash identifier:          d8V4ThmRsaDXbfdxO0RHGpcqJ9XxqTC9D0hE84pMYEk=
Subject key identifier:   41:D0:C6:F3:7F:7A:EF:2E:BB:21:6A:5E:0E:B7:F6:AD:8C:43:83:B1
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B5D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E50203EF60911F086C6DEC9DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 14:05:48 +0000
ROA not before:           Tue 20 Jan 2026 14:05:42 +0000
ROA not after:            Tue 24 Feb 2026 14:05:42 +0000
asID:                     138915
IP address blocks:        154.93.84.0/23 maxlen: 24
                          154.93.86.0/24 maxlen: 24
                          154.93.92.0/24 maxlen: 24
                          154.93.93.0/24 maxlen: 24
                          154.93.100.0/23 maxlen: 24
                          154.93.104.0/23 maxlen: 24
                          154.93.109.0/24 maxlen: 24
                          154.93.110.0/24 maxlen: 24
                          154.93.111.0/24 maxlen: 24
                          154.93.114.0/24 maxlen: 24
                          154.93.115.0/24 maxlen: 24
                          154.93.116.0/22 maxlen: 24
                          154.93.120.0/24 maxlen: 24
                          154.93.121.0/24 maxlen: 24
                          154.93.122.0/24 maxlen: 24
                          154.93.124.0/23 maxlen: 24
                          154.93.124.0/24 maxlen: 24
                          154.93.125.0/24 maxlen: 24
                          154.93.126.0/24 maxlen: 24
                          154.93.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112087 (0x1b5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 14:05:42 2026 GMT
            Not After : Feb 24 14:05:42 2026 GMT
        Subject: CN=696f8bbb-65b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:79:3b:80:54:b3:a6:5d:2f:50:97:e5:42:
                    b9:28:76:2d:c1:24:2e:d1:5d:c7:9c:12:6d:32:23:
                    3d:60:ca:41:20:53:d8:ed:23:23:1a:fb:2d:8d:bc:
                    a2:16:e0:3f:89:d3:9d:1b:49:eb:6b:48:37:8b:6c:
                    6f:96:eb:38:16:d0:01:82:9c:85:21:78:52:21:e6:
                    03:8a:13:ad:9e:52:bb:a5:ee:1a:af:0c:c1:4a:40:
                    e2:01:d5:cd:b3:b9:af:55:c0:01:f6:c2:c4:77:eb:
                    11:b3:aa:dd:b1:b2:46:48:bc:db:fa:1c:82:b6:8f:
                    aa:e3:14:9a:ac:31:17:04:47:0a:5c:b0:ba:75:ad:
                    74:3b:82:08:0c:78:27:41:31:bd:c2:14:00:b5:b6:
                    36:30:90:b1:b0:f0:c6:dc:a8:c5:e4:91:e4:0e:d3:
                    92:a8:a6:2b:2d:38:eb:10:5d:10:27:85:c2:10:6a:
                    9a:09:4b:3a:f3:a0:0e:0d:e1:ab:14:22:67:52:28:
                    68:ed:c6:d5:e4:9e:8e:2a:c4:2e:80:48:dd:75:2f:
                    dd:ff:52:d6:a7:eb:1c:10:79:7d:13:0c:68:f4:88:
                    04:fd:64:8c:a6:68:e9:f4:9d:43:55:ad:66:2d:dc:
                    ab:20:09:b4:f3:9c:e4:4e:99:d1:86:27:93:0f:40:
                    b0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D0:C6:F3:7F:7A:EF:2E:BB:21:6A:5E:0E:B7:F6:AD:8C:43:83:B1
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E50203EF60911F086C6DEC9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.84.0-154.93.86.255
                  154.93.92.0/23
                  154.93.100.0/23
                  154.93.104.0/23
                  154.93.109.0-154.93.111.255
                  154.93.114.0-154.93.122.255
                  154.93.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:db:45:68:5d:91:17:2b:69:8b:36:53:df:33:ad:1d:29:5a:
         88:d3:21:39:97:c5:61:15:4e:b8:38:f0:ed:20:c9:26:0d:da:
         2c:74:76:06:57:a7:6c:55:31:a0:ed:72:9f:6d:a0:27:71:be:
         44:5a:7e:1b:06:98:f8:34:70:1b:b8:00:c6:20:28:78:9c:c4:
         04:2a:a4:b8:ad:8f:3b:50:19:ef:df:64:37:81:18:27:5b:bd:
         c6:02:cb:cd:84:fd:29:c4:67:65:d1:dc:e6:5c:b1:df:47:c3:
         b8:9a:cf:2e:f3:a3:32:f8:31:ba:38:a2:d7:f0:4f:37:89:89:
         1e:05:cb:e5:5b:92:dd:11:1b:b8:15:e7:be:39:93:a7:3c:f5:
         df:37:5d:4e:4e:4e:06:d0:db:f4:fe:e1:9b:e3:78:da:6f:8c:
         67:6b:4c:ee:9c:f9:db:84:ad:01:7b:10:7e:14:33:55:d1:69:
         6a:a6:b5:ef:3b:46:da:8c:af:77:0a:2e:de:7f:32:e7:42:58:
         59:6d:b5:fb:2a:96:e6:57:ff:49:ea:67:cb:c6:04:37:0b:bb:
         e7:b4:45:93:1d:36:49:56:99:25:86:d0:2d:54:f3:e9:b4:55:
         74:16:c8:8c:5b:7f:94:26:09:ef:42:55:5c:01:c2:a8:e5:87:
         31:5c:32:1c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIDAbXXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTIwMTQwNTQyWhcNMjYwMjI0MTQwNTQyWjAYMRYw
FAYDVQQDEw02OTZmOGJiYi02NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzbh5O4BUs6ZdL1CX5UK5KHYtwSQu0V3HnBJtMiM9YMpBIFPY7SMjGvst
jbyiFuA/idOdG0nra0g3i2xvlus4FtABgpyFIXhSIeYDihOtnlK7pe4arwzBSkDi
AdXNs7mvVcAB9sLEd+sRs6rdsbJGSLzb+hyCto+q4xSarDEXBEcKXLC6da10O4II
DHgnQTG9whQAtbY2MJCxsPDG3KjF5JHkDtOSqKYrLTjrEF0QJ4XCEGqaCUs686AO
DeGrFCJnUiho7cbV5J6OKsQugEjddS/d/1LWp+scEHl9Ewxo9IgE/WSMpmjp9J1D
Va1mLdyrIAm085zkTpnRhieTD0CwEQIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFEHQ
xvN/eu8uuyFqXg639q2MQ4OxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTUwMjAzRUY2MDkxMUYwODZDNkRFQzlEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAKaXVQDBACaXVYDBAGa
XVwDBAGaXWQDBAGaXWgwDAMEAJpdbQMEBJpdYDAMAwQBml1yAwQAml16AwQCml18
MA0GCSqGSIb3DQEBCwUAA4IBAQDV20VoXZEXK2mLNlPfM60dKVqI0yE5l8VhFU64
OPDtIMkmDdosdHYGV6dsVTGg7XKfbaAncb5EWn4bBpj4NHAbuADGICh4nMQEKqS4
rY87UBnv32Q3gRgnW73GAsvNhP0pxGdl0dzmXLHfR8O4ms8u86My+DG6OKLX8E83
iYkeBcvlW5LdERu4Fee+OZOnPPXfN11OTk4G0Nv0/uGb43jab4xna0zunPnbhK0B
exB+FDNV0WlqprXvO0bajK93Ci7efzLnQlhZbbX7KpbmV/9J6mfLxgQ3C7vntEWT
HTZJVpklhtAtVPPptFV0FsiMW3+UJgnvQlVcAcKo5YcxXDIc
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:23:59 2026 by rpki-client