This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28FD2B72F5D111F0AC9C1678DAE4EC9C.roa
File:                     28FD2B72F5D111F0AC9C1678DAE4EC9C.roa (raw, json)
Hash identifier:          zUeRVEUyRnPIIgmF/jWgndfElAc4r0GlRgvsUDWQidk=
Subject key identifier:   12:71:50:26:B5:10:C8:B8:5E:43:E0:CF:C7:64:AE:24:B5:C0:88:22
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B575
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28FD2B72F5D111F0AC9C1678DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 07:25:14 +0000
ROA not before:           Tue 20 Jan 2026 07:25:09 +0000
ROA not after:            Tue 24 Feb 2026 07:25:09 +0000
asID:                     63139
IP address blocks:        154.93.77.0/24 maxlen: 24
                          154.93.78.0/24 maxlen: 24
                          154.93.79.0/24 maxlen: 24
                          154.93.80.0/24 maxlen: 24
                          154.93.81.0/24 maxlen: 24
                          154.93.82.0/24 maxlen: 24
                          154.93.83.0/24 maxlen: 24
                          154.93.95.0/24 maxlen: 24
                          154.93.123.0/24 maxlen: 24
                          154.94.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111989 (0x1b575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 07:25:09 2026 GMT
            Not After : Feb 24 07:25:09 2026 GMT
        Subject: CN=696f2dda-956a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:00:83:c1:1a:05:77:00:3e:74:07:55:aa:
                    c3:f1:6a:51:9a:17:c3:cd:fc:b0:2e:1b:26:7c:e6:
                    82:0e:61:32:3e:d5:98:c4:57:9f:aa:79:21:a1:eb:
                    60:37:6d:f4:bb:c2:43:91:4d:df:a8:2e:d5:ef:fb:
                    fd:1b:e8:4f:36:cb:f1:e8:32:d7:bf:98:15:f8:de:
                    97:b8:6d:4a:f7:ee:25:4b:af:64:c2:33:f5:1a:21:
                    ea:b9:01:da:d9:c2:9f:02:b9:4e:2e:cd:9f:f3:7b:
                    a2:25:a2:be:20:f6:b0:15:95:30:e6:a9:06:97:a6:
                    de:cc:9e:a1:e7:22:34:dc:f5:21:fc:5f:50:91:2c:
                    a6:03:2b:16:d2:91:a9:7c:ff:76:7f:f3:9e:45:35:
                    c7:17:b9:f2:40:45:fa:72:4b:27:ab:5d:8f:2a:ef:
                    e6:ba:88:fd:9c:6d:ef:20:36:d6:6a:cb:7b:9f:05:
                    c9:3a:98:7a:25:2e:9b:4a:c8:66:1a:56:9b:96:16:
                    a8:cc:d0:79:33:41:ba:78:2f:9e:d8:80:c7:f7:68:
                    e4:74:46:4f:b0:58:ce:80:ba:7a:a2:19:50:a8:3b:
                    10:ff:ab:75:62:29:7f:87:65:b8:b6:20:9f:e5:06:
                    68:8f:3a:6d:2f:fd:20:3e:ec:c2:1b:e8:ce:0d:35:
                    3e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:50:26:B5:10:C8:B8:5E:43:E0:CF:C7:64:AE:24:B5:C0:88:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28FD2B72F5D111F0AC9C1678DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.93.77.0-154.93.83.255
                  154.93.95.0/24
                  154.93.123.0/24
                  154.94.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:29:58:b2:36:5d:71:6b:1d:b3:f6:f6:15:7f:a6:76:4e:
         d5:e3:19:a7:18:25:5a:76:be:c7:4f:ef:6a:17:17:06:d4:18:
         ce:42:4f:d1:38:ba:1f:23:51:a5:70:cf:eb:52:49:e3:40:64:
         b9:0c:85:06:cb:32:c3:27:96:2b:52:05:70:c1:ad:ee:20:d2:
         cf:59:2c:40:96:76:9a:56:db:f6:92:0b:ed:1d:49:01:0a:70:
         62:cc:ea:99:45:c4:2c:af:6b:d4:c2:23:f1:ba:e4:18:7a:e0:
         5c:2c:6f:1f:38:d2:cc:a4:d0:8f:ac:8e:54:27:b6:c8:09:d3:
         8b:e1:1a:b6:32:c3:0a:0f:c8:6c:79:2d:01:f2:7d:f0:b6:aa:
         06:8f:5e:f9:22:ce:01:a5:0e:ee:9d:17:de:24:73:5e:4a:4d:
         1a:a7:3e:56:44:0c:c1:8b:db:c1:94:55:50:df:41:ee:0a:4c:
         fc:30:30:46:fc:2a:3e:0e:ac:7c:88:0c:80:67:13:dd:dd:50:
         28:d6:46:d3:d4:03:c3:ce:05:b7:a8:b9:7d:2e:b1:20:6a:8b:
         f1:0f:92:cd:ee:b6:9d:f5:bf:24:c9:97:48:0b:b8:17:5c:e7:
         07:e7:47:94:cc:ae:87:dd:a0:95:81:f5:1a:40:b1:90:b4:34:
         f6:03:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:38:15 2026 by rpki-client