This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3A3BE2F95311F08E08667FDAE4EC9C.roa
File:                     3B3A3BE2F95311F08E08667FDAE4EC9C.roa (raw, json)
Hash identifier:          ciRdTZQhsncZjVXPh37mSDh/OsoazJWxL/FBPHichXc=
Subject key identifier:   16:3A:A1:14:92:F0:BF:A9:2C:3C:00:BF:1B:F8:5B:5B:25:AE:62:9C
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B668
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3A3BE2F95311F08E08667FDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:33:52 +0000
ROA not before:           Sat 24 Jan 2026 18:33:48 +0000
ROA not after:            Tue 03 Mar 2026 18:33:48 +0000
asID:                     62240
IP address blocks:        154.195.168.0/24 maxlen: 24
                          154.195.169.0/24 maxlen: 24
                          154.195.170.0/24 maxlen: 24
                          154.195.171.0/24 maxlen: 24
                          154.195.172.0/24 maxlen: 24
                          154.195.173.0/24 maxlen: 24
                          154.195.174.0/24 maxlen: 24
                          154.195.175.0/24 maxlen: 24
                          154.195.176.0/24 maxlen: 24
                          154.195.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112232 (0x1b668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 18:33:48 2026 GMT
            Not After : Mar  3 18:33:48 2026 GMT
        Subject: CN=69751090-7c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:10:6f:e6:61:28:76:24:56:da:f0:02:6f:
                    69:12:d0:de:be:3f:9c:a7:82:cc:22:17:d6:1d:09:
                    9c:4e:b1:4f:c6:62:b0:5a:8c:de:68:02:97:10:bb:
                    0c:1f:39:97:3c:09:64:65:9f:ba:48:46:3b:54:97:
                    1b:ea:e0:be:94:d9:c8:16:50:fb:32:69:45:19:72:
                    b6:bc:24:72:30:aa:d4:34:d8:70:9b:ca:9e:33:bb:
                    d2:aa:a6:2f:9f:e0:b4:cc:15:b9:40:40:e8:64:72:
                    11:d5:cd:47:28:2b:86:08:ac:9d:bd:f2:6e:60:49:
                    41:44:d4:fd:c5:6a:9a:11:f7:1f:f6:26:68:e2:6f:
                    f0:f2:3d:4e:e4:e0:55:09:b5:1d:e3:32:af:21:b9:
                    b7:34:f2:14:b9:95:42:3e:a8:f5:00:72:3b:6c:cf:
                    42:a2:e2:a9:84:ec:e6:11:f4:08:e4:c5:9a:1b:d1:
                    0d:89:bb:b4:76:ca:e8:79:d4:14:7d:bc:7f:8d:b2:
                    6c:1d:bd:11:56:75:30:27:95:81:7a:d3:04:ee:26:
                    a2:67:89:ac:c6:44:56:03:6d:78:f2:50:b5:90:fd:
                    0b:65:8b:27:a9:ca:03:19:d9:3a:1c:1e:cc:10:15:
                    fa:6c:82:4b:7a:d3:d3:c3:30:b7:25:0f:50:22:5b:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:A1:14:92:F0:BF:A9:2C:3C:00:BF:1B:F8:5B:5B:25:AE:62:9C
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3A3BE2F95311F08E08667FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.168.0-154.195.177.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:ee:ca:1d:fe:58:f9:38:ef:fb:1b:aa:37:9c:95:81:55:
         5c:b6:37:6b:b8:8e:20:81:3c:25:c3:ab:6a:0e:c6:b0:c9:19:
         02:e4:34:c5:e7:a7:20:15:bf:05:5f:67:78:1b:bb:36:c4:51:
         9c:b5:9c:f4:7f:bd:51:35:72:70:4c:02:41:2a:b7:cb:7a:a7:
         e0:8f:c3:60:c3:11:2c:85:de:67:f9:e9:61:1f:39:66:06:67:
         0f:76:b4:90:e9:bb:20:8d:33:9d:1e:5e:51:10:63:7b:46:bd:
         06:d0:9a:c8:35:ca:25:57:5c:af:62:88:bc:e8:78:43:51:ab:
         ed:99:68:9c:49:cb:fb:17:54:6d:56:9d:9d:d8:dd:a5:c8:68:
         f4:a2:52:3f:5a:1f:62:84:80:ae:df:08:e1:9b:04:20:67:7f:
         52:18:0e:eb:b7:cb:2e:b3:95:f8:d9:1a:09:f5:47:06:96:75:
         5a:c2:24:c2:ae:8b:b3:8e:c4:18:91:cb:f5:a2:0e:a9:8c:6c:
         70:8a:e2:33:3f:c3:bb:7a:57:1b:4d:68:28:48:a7:27:5c:48:
         36:05:09:8c:77:8c:7a:68:b9:b3:66:69:21:82:cb:3d:0c:49:
         6c:a2:ca:28:42:07:d9:a7:22:5c:d6:7b:3d:2c:18:f5:21:3b:
         7b:b7:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:16 2026 by rpki-client