This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309239CCF83811F0A5E50DBFDAE4EC9C.roa
File:                     309239CCF83811F0A5E50DBFDAE4EC9C.roa (raw, json)
Hash identifier:          XK/DeYman8DvEyvjE2Va7pIA745Fyx8m1SHDNtzA/Tw=
Subject key identifier:   91:61:0F:20:28:7A:32:3D:97:3C:0E:5F:BA:3C:7E:B5:06:7B:11:ED
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B615
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309239CCF83811F0A5E50DBFDAE4EC9C.roa
Signing time:             Fri 23 Jan 2026 08:47:47 +0000
ROA not before:           Fri 23 Jan 2026 08:47:41 +0000
ROA not after:            Sun 01 Mar 2026 08:47:41 +0000
asID:                     134365
IP address blocks:        154.194.248.0/21 maxlen: 24
                          154.194.248.0/24 maxlen: 24
                          154.194.249.0/24 maxlen: 24
                          154.194.250.0/24 maxlen: 24
                          154.194.251.0/24 maxlen: 24
                          154.194.252.0/24 maxlen: 24
                          154.194.253.0/24 maxlen: 24
                          154.194.254.0/24 maxlen: 24
                          154.194.255.0/24 maxlen: 24
                          154.198.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112149 (0x1b615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 23 08:47:41 2026 GMT
            Not After : Mar  1 08:47:41 2026 GMT
        Subject: CN=697335b3-e8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:f2:cc:07:d4:42:a6:96:7f:d9:2d:79:30:
                    e4:d9:60:fa:94:7b:30:c7:c7:83:ea:80:e0:31:fe:
                    47:3e:db:6d:9c:28:3f:8b:93:28:bc:5f:b8:fa:aa:
                    56:4f:f9:d5:a4:eb:45:70:ad:d5:42:a4:29:9f:ff:
                    b3:df:36:55:58:ed:0f:67:a4:c1:2a:aa:2d:b3:76:
                    16:23:9d:e0:bf:91:2d:b2:36:07:44:ed:86:70:80:
                    db:b2:17:19:7d:cc:28:4d:c9:f2:03:2b:0c:0b:40:
                    70:3b:18:40:d4:db:e3:c9:a1:27:13:97:bb:dd:a3:
                    ff:1e:98:4c:8f:78:ac:d9:73:0b:d9:c4:82:da:24:
                    42:0a:67:ac:4b:73:17:74:f4:b3:a4:5a:a2:74:53:
                    7d:67:6b:85:04:9c:57:05:99:3e:34:a7:ce:52:fd:
                    e9:ea:d8:5e:0c:2b:a2:1d:bd:a9:c0:55:d7:02:35:
                    bf:4f:4c:23:a5:e5:31:33:e7:d6:3c:25:92:18:7e:
                    c2:c3:54:c5:81:cd:fa:81:de:15:38:0c:cc:2b:fe:
                    28:03:3b:75:56:62:52:98:d1:0d:85:6d:8f:04:6d:
                    3d:2d:32:75:f2:43:40:03:e4:1a:ab:a8:2e:40:c7:
                    3a:55:86:6b:5a:4d:58:51:4a:0d:96:89:8c:88:34:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:0F:20:28:7A:32:3D:97:3C:0E:5F:BA:3C:7E:B5:06:7B:11:ED
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/309239CCF83811F0A5E50DBFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.248.0/21
                  154.198.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:f3:86:b6:c1:db:45:e1:99:08:a7:b4:d0:e9:11:ec:93:
         68:c8:f9:3c:eb:f1:f1:23:0f:17:c2:18:e1:24:98:4e:89:8f:
         4c:78:73:fe:9d:83:2d:c2:bb:8a:b6:7c:ca:eb:af:2a:0a:60:
         17:9e:d5:8c:fc:22:dc:37:95:41:28:20:d3:57:dd:d8:9a:55:
         53:2c:74:79:7f:9b:a7:2b:54:c6:0b:32:a8:3b:86:69:01:dd:
         50:9e:1c:90:e2:3f:c5:80:05:13:af:a8:83:30:9c:3d:f7:0a:
         17:84:e9:84:4c:06:33:aa:9d:2f:c3:7d:2e:5e:24:fa:66:bd:
         75:57:92:86:dc:92:09:9d:2a:13:ef:e7:03:cd:db:c3:95:f4:
         38:5a:62:47:30:90:5e:23:98:3c:e4:36:84:d9:51:d3:09:e3:
         7e:cd:69:cf:7f:75:48:8f:08:a8:b1:fb:b7:89:3c:ae:bc:7a:
         cb:56:a8:b7:06:95:d6:b2:1b:22:d9:38:f9:f8:28:cf:2f:d4:
         0c:fe:97:9d:ee:fb:1c:5f:0e:21:8c:0b:57:3b:38:2a:d0:f0:
         7b:fa:ae:72:2f:e2:cd:3a:45:0d:ca:1d:db:91:61:5d:e0:b7:
         de:91:ca:3b:0b:42:9d:6f:a3:50:a6:cf:ea:0c:65:72:8f:e6:
         26:0c:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:42:32 2026 by rpki-client