This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AABDCC0F95411F08DE2A287DAE4EC9C.roa
File:                     3AABDCC0F95411F08DE2A287DAE4EC9C.roa (raw, json)
Hash identifier:          GP9tlbD4rlyblmXpjSwoxMMVX1HntOsuExfJn/tsCmI=
Subject key identifier:   76:53:74:9B:35:3B:DA:1B:8D:26:29:5E:7A:F9:3E:88:5B:ED:C5:81
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B66E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AABDCC0F95411F08DE2A287DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:41:01 +0000
ROA not before:           Sat 24 Jan 2026 18:40:56 +0000
ROA not after:            Thu 12 Mar 2026 18:40:56 +0000
asID:                     214143
IP address blocks:        154.194.208.0/22 maxlen: 24
                          154.194.212.0/23 maxlen: 24
                          154.196.214.0/24 maxlen: 24
                          154.206.11.0/24 maxlen: 24
                          154.208.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112238 (0x1b66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 18:40:56 2026 GMT
            Not After : Mar 12 18:40:56 2026 GMT
        Subject: CN=6975123d-7b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:11:0b:cf:97:fd:6d:a5:30:ee:5b:2a:4a:
                    ea:a8:f5:16:d3:27:c1:31:44:fe:08:7d:2a:ab:82:
                    82:99:ce:f7:21:f2:64:c2:a4:6f:55:07:ea:70:db:
                    7e:65:cf:bb:ac:39:df:a9:de:93:37:6c:6e:73:a7:
                    4f:88:9f:33:16:ee:9e:ae:6b:0a:3a:3f:58:04:f9:
                    e5:05:74:8c:50:b0:d0:be:02:e6:ff:c7:3c:22:c4:
                    73:a0:01:13:5e:94:4c:ef:54:57:95:e2:fd:01:7f:
                    85:d6:fe:bc:31:3a:56:c0:a8:19:d0:06:14:8a:10:
                    80:03:06:17:5b:95:43:86:57:07:63:5d:ac:ac:8a:
                    27:e8:e6:b0:36:23:6b:8c:e0:b2:a3:ad:6d:25:5f:
                    d5:13:10:8a:8e:92:54:77:d2:d4:28:8e:21:a3:e5:
                    5f:9f:c2:60:9f:a1:40:40:66:21:34:1d:53:66:fa:
                    65:9a:bb:7d:89:d2:fa:4b:05:dd:21:8f:41:7f:f8:
                    d3:2c:5b:93:4c:84:e1:c9:8c:88:d3:7c:54:8a:31:
                    aa:15:e0:a5:24:f8:1c:c2:fd:73:e1:70:61:be:94:
                    84:c0:1a:a3:ef:74:66:26:25:82:54:9f:f9:45:e0:
                    f6:33:be:ac:7d:e5:fb:14:44:c5:7d:4e:86:f4:b5:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:74:9B:35:3B:DA:1B:8D:26:29:5E:7A:F9:3E:88:5B:ED:C5:81
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AABDCC0F95411F08DE2A287DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.208.0-154.194.213.255
                  154.196.214.0/24
                  154.206.11.0/24
                  154.208.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:b5:63:b6:36:b1:73:e0:2e:59:19:e3:eb:9e:0e:76:85:
         64:ab:39:46:0a:fb:22:5b:30:6b:e8:22:c8:7a:a8:4a:6f:ad:
         2e:0e:eb:b1:91:a1:83:ae:04:b0:b5:aa:53:67:10:25:9d:19:
         69:a0:8c:59:a8:2f:f2:51:b3:82:a9:2f:b6:3f:40:99:5f:f6:
         2c:32:28:d4:69:61:64:f4:63:61:51:17:be:30:30:98:a2:13:
         98:94:4b:6b:dd:f6:c3:2c:f2:7e:94:59:78:d7:52:f7:ef:22:
         69:b6:e9:79:8e:08:07:37:d7:57:c2:f0:4f:40:f6:6c:44:63:
         6d:0b:88:37:56:1b:f5:2d:2e:44:12:c1:e6:fa:68:e2:db:bd:
         ec:74:a7:ab:03:46:d6:be:52:45:77:e6:11:f5:4a:c2:9f:4c:
         49:a3:22:5f:4a:9b:17:74:40:8a:f5:d1:8e:d1:fb:db:97:d9:
         21:74:d9:9f:55:00:2c:ec:5e:ba:78:5a:1a:30:7e:cd:a2:fc:
         8f:c4:75:c1:4d:49:e8:a7:7d:b4:f0:5d:e3:3c:88:a7:62:82:
         bb:c0:72:27:2e:e7:66:22:f4:74:28:0a:b9:59:bc:15:03:dd:
         7f:0e:c0:7c:e5:ab:2f:39:02:49:9a:f5:fb:5e:b8:86:0b:e7:
         dc:65:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:11 2026 by rpki-client