This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45652230F20A11F09C1DC9DFDAE4EC9C.roa
File:                     45652230F20A11F09C1DC9DFDAE4EC9C.roa (raw, json)
Hash identifier:          SW5/1P5Ph9j0E4aKjlL3oTAAHXtP0wW0cuUDiEZ4kMM=
Subject key identifier:   A0:9A:5C:CA:15:20:F7:D0:AA:DC:D4:62:C1:9F:85:C0:F3:5B:C0:D0
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45652230F20A11F09C1DC9DFDAE4EC9C.roa
Signing time:             Thu 15 Jan 2026 12:03:58 +0000
ROA not before:           Thu 15 Jan 2026 12:03:52 +0000
ROA not after:            Mon 16 Feb 2026 12:03:52 +0000
asID:                     22773
IP address blocks:        154.90.152.0/24 maxlen: 24
                          154.90.153.0/24 maxlen: 24
                          154.90.154.0/24 maxlen: 24
                          154.90.155.0/24 maxlen: 24
                          154.90.156.0/24 maxlen: 24
                          154.90.157.0/24 maxlen: 24
                          154.90.158.0/24 maxlen: 24
                          154.90.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111807 (0x1b4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 15 12:03:52 2026 GMT
            Not After : Feb 16 12:03:52 2026 GMT
        Subject: CN=6968d7ae-ff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:c3:34:30:5b:73:46:99:bb:ea:9e:2a:48:
                    69:d3:81:43:13:03:1a:01:53:4c:9a:0e:0d:b3:7e:
                    6e:d6:ae:52:a7:f7:69:c5:50:e4:1f:61:36:ab:26:
                    f7:44:4e:2c:86:02:5f:43:d5:76:6c:c5:91:f7:79:
                    6b:75:42:a7:5a:a0:ab:90:9f:2f:d1:5a:72:f4:a9:
                    ed:3e:60:a4:68:7c:8a:a8:70:c3:e8:35:ff:ce:2c:
                    67:0f:56:73:1f:b5:ec:86:53:62:5f:fb:96:17:2e:
                    67:cb:f0:c9:10:11:23:6f:d1:52:c8:17:06:14:0a:
                    70:8f:0a:50:84:6e:15:da:8a:ea:55:f0:75:2d:41:
                    b9:6b:73:4c:05:a8:21:8a:a7:8e:e7:94:cd:5f:a9:
                    a8:ad:bf:35:b5:4e:b6:c7:e2:2b:e9:8b:87:e9:1d:
                    7c:91:18:69:88:00:65:6d:f6:b2:d2:9e:5e:d9:6a:
                    d1:75:9b:91:b8:34:da:6f:d3:f9:d2:5a:16:b9:b9:
                    79:29:56:1e:dc:c2:57:46:e5:ab:fc:e7:61:65:5a:
                    82:fb:4c:d4:e0:a2:40:14:cd:96:0c:63:b8:79:20:
                    db:11:66:08:ee:29:6c:af:d5:ed:e5:c5:5b:c9:d4:
                    ae:a9:be:d5:0b:07:83:6d:b5:39:59:4b:4a:3e:ff:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:5C:CA:15:20:F7:D0:AA:DC:D4:62:C1:9F:85:C0:F3:5B:C0:D0
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45652230F20A11F09C1DC9DFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:ac:fb:8d:50:ff:76:af:1b:8a:dc:46:d9:ee:3d:6a:ca:71:
         ca:b0:e0:09:b3:df:45:2d:f6:8c:e2:4c:c4:35:51:e7:71:90:
         56:34:87:da:23:62:39:ef:3e:67:b7:63:01:58:cf:5d:55:b7:
         f5:6e:8a:ee:ae:b7:31:97:e9:5e:00:df:8a:6e:f7:61:24:86:
         46:b9:27:7b:70:91:51:e3:d2:48:2c:23:c4:06:7f:0b:9e:53:
         10:d7:48:64:f9:b4:60:b4:7b:96:7d:54:d6:0e:f5:7a:7b:a8:
         73:f2:74:f0:83:b1:a6:81:f0:e5:fb:07:7a:57:ee:e6:c9:9d:
         57:45:60:bf:f3:14:e9:a0:02:60:3d:96:7b:a2:8f:15:8b:ae:
         43:0f:93:5c:d5:98:9a:6e:ce:71:50:4b:64:e0:fb:c2:8d:23:
         96:87:94:a0:6a:84:53:20:9f:34:67:c3:07:67:3f:ab:de:d1:
         fe:99:53:c7:55:f7:8c:1b:44:fd:bd:db:a4:7d:77:77:c7:39:
         8e:e8:e7:ab:13:24:27:26:96:92:3e:a3:3b:77:43:57:04:2a:
         4d:22:75:a6:03:1f:d7:e2:b6:8a:1f:f3:98:df:44:31:36:d4:
         a5:7e:73:9b:01:0f:79:e1:b2:a5:57:bb:ad:dc:0a:ac:0d:6e:
         2d:16:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:33 2026 by rpki-client