This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C4A2634EBA411F08C9CC386DAE4EC9C.roa
File:                     4C4A2634EBA411F08C9CC386DAE4EC9C.roa (raw, json)
Hash identifier:          1xTUKhH50irNv3PxKPTLrYs0evmndVh+UY3oybOnAdA=
Subject key identifier:   36:0A:9B:9F:7A:4F:15:F5:FE:07:B5:1E:96:C9:05:FC:F1:23:5B:BA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B367
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C4A2634EBA411F08C9CC386DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 08:38:54 +0000
ROA not before:           Wed 07 Jan 2026 08:38:49 +0000
ROA not after:            Mon 09 Feb 2026 08:38:49 +0000
asID:                     63139
IP address blocks:        154.95.95.0/24 maxlen: 24
                          154.223.22.0/24 maxlen: 24
                          154.223.25.0/24 maxlen: 24
                          154.223.27.0/24 maxlen: 24
                          154.223.30.0/24 maxlen: 24
                          154.223.31.0/24 maxlen: 24
                          154.223.36.0/24 maxlen: 24
                          154.223.38.0/24 maxlen: 24
                          154.223.39.0/24 maxlen: 24
                          154.223.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111463 (0x1b367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 08:38:49 2026 GMT
            Not After : Feb  9 08:38:49 2026 GMT
        Subject: CN=695e1b9e-18f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:97:d7:a0:e2:47:f1:b6:fb:15:2d:01:fa:65:
                    06:81:3f:c1:40:41:38:e3:32:45:a5:4e:53:9b:55:
                    22:40:4d:b0:7a:3b:55:e9:f5:8e:d5:02:99:d3:78:
                    df:44:58:3d:24:3e:d7:01:5f:a8:ca:66:0d:82:b3:
                    0c:80:a7:2c:f7:0c:c6:15:cd:7c:c5:d5:52:56:ef:
                    a3:fb:73:97:30:a4:ef:10:53:6a:19:98:81:63:ac:
                    7b:c0:a1:6e:8c:3a:f7:83:c4:b2:0e:54:15:a1:50:
                    90:ce:17:19:88:05:43:e5:52:4c:d7:cd:9d:db:93:
                    bf:5d:6b:96:42:64:5b:fc:49:8b:98:69:17:f6:fa:
                    e5:01:f1:94:b0:cb:7a:8d:47:ef:26:1d:3c:57:ae:
                    f1:7a:15:0e:f4:20:0d:d0:61:d4:e1:1a:1d:68:f4:
                    ea:fa:95:9e:1b:c0:f4:67:0b:cb:fc:5b:8e:d9:a9:
                    18:f8:1c:36:db:fa:91:29:56:a3:45:4c:10:fd:8d:
                    24:9b:aa:12:93:d6:49:66:94:35:96:ab:09:b0:d5:
                    77:f6:40:1c:d4:91:03:22:d4:30:70:df:4c:b4:bc:
                    ac:59:85:1e:da:20:5f:18:bb:a9:b5:59:2f:2b:10:
                    4e:ce:64:62:c3:a9:84:db:2b:ad:3c:94:35:a5:ab:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:9B:9F:7A:4F:15:F5:FE:07:B5:1E:96:C9:05:FC:F1:23:5B:BA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C4A2634EBA411F08C9CC386DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.95.95.0/24
                  154.223.22.0/24
                  154.223.25.0/24
                  154.223.27.0/24
                  154.223.30.0/23
                  154.223.36.0/24
                  154.223.38.0/23
                  154.223.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:5f:cd:4a:c1:1a:35:f4:95:77:56:8d:c9:cd:2e:9b:c4:36:
         75:de:2d:7a:70:b7:14:bd:93:22:2f:9c:bb:39:88:b3:ff:c1:
         eb:47:3b:a6:78:25:d6:4d:b7:87:c8:40:61:33:f3:63:d7:19:
         5b:b3:38:60:94:95:48:04:43:8a:71:2d:2e:62:23:4a:60:74:
         47:1c:2a:52:96:79:17:67:6a:31:01:91:66:43:94:a1:2c:c4:
         b0:38:ee:aa:45:7f:59:88:a8:89:0b:1d:13:67:ab:7f:14:ac:
         48:c2:d4:8e:29:b9:21:80:59:bf:e3:e6:42:f1:87:d1:20:4e:
         b5:8b:ce:22:51:f0:60:1f:43:d2:4a:74:aa:03:9a:f1:7a:3b:
         6c:3a:13:f7:f2:75:37:cd:ff:1b:8f:d7:0a:d1:9e:51:ea:fe:
         69:76:db:4f:f4:1f:e9:4e:d8:0d:ac:69:10:a6:7d:d5:50:69:
         c5:4e:71:c0:b5:3a:d9:87:1f:c3:c3:55:b1:01:3e:99:62:2e:
         c1:2d:51:c2:d6:78:9c:20:0e:82:90:de:3d:70:44:7d:dc:1c:
         ff:99:43:4b:ef:4d:57:cc:b4:e5:98:24:06:6c:e9:af:71:e0:
         a4:8d:bc:e7:8a:15:13:dc:14:d0:c7:cb:77:aa:58:62:7d:bb:
         2d:56:28:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:57 2026 by rpki-client