This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505B2986F05D11F087500795DAE4EC9C.roa
File:                     505B2986F05D11F087500795DAE4EC9C.roa (raw, json)
Hash identifier:          ppOKPPzWGOxl3cXN+NPIeFSVxyjoyFFlY7Tg0bMTqgE=
Subject key identifier:   5C:BF:28:E5:14:3C:4A:99:6C:49:2E:26:A0:E2:4F:71:48:EA:DF:59
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B46F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505B2986F05D11F087500795DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 08:53:22 +0000
ROA not before:           Tue 13 Jan 2026 08:53:17 +0000
ROA not after:            Tue 17 Feb 2026 08:53:17 +0000
asID:                     54801
IP address blocks:        154.81.61.0/24 maxlen: 24
                          154.81.140.0/24 maxlen: 24
                          154.81.161.0/24 maxlen: 24
                          154.81.164.0/24 maxlen: 24
                          154.81.178.0/24 maxlen: 24
                          154.83.128.0/24 maxlen: 24
                          154.83.135.0/24 maxlen: 24
                          154.83.137.0/24 maxlen: 24
                          154.83.141.0/24 maxlen: 24
                          154.83.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111727 (0x1b46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 13 08:53:17 2026 GMT
            Not After : Feb 17 08:53:17 2026 GMT
        Subject: CN=69660802-4f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:af:d1:41:c9:65:ae:7f:ac:8e:4f:e9:8c:
                    ed:e6:79:55:6d:fe:81:55:ae:c3:50:e5:70:9d:03:
                    c7:f6:f6:05:01:3b:2f:fd:25:a3:41:a5:f2:dc:d6:
                    80:b1:35:06:05:04:03:d6:8e:42:c9:8e:6e:2f:04:
                    1f:00:0a:9b:52:27:ab:01:18:6c:4f:3d:84:c5:8f:
                    91:3d:af:13:d7:8c:18:3d:c6:c5:02:e9:7d:94:ec:
                    46:24:62:0e:3b:db:29:70:6d:0b:ba:9f:76:33:a7:
                    6c:0a:08:cb:4d:f6:9e:82:2a:23:3d:2e:4e:f2:b4:
                    4f:48:37:14:43:9c:06:79:d3:0e:ac:d6:81:98:e0:
                    e2:55:3f:a7:fc:fb:a6:5b:52:18:b1:8a:0f:ca:44:
                    74:1a:c9:d8:18:c1:fa:2b:5b:a7:9d:69:74:62:c1:
                    1e:d0:43:d0:ff:87:5c:b8:bb:a4:d3:45:3a:36:a9:
                    91:e6:82:a9:f8:cf:31:80:e7:be:22:41:8b:21:88:
                    8b:1f:d8:f3:6a:4f:37:14:6e:e3:39:6f:44:92:6c:
                    df:34:3e:64:c3:d7:72:04:d8:a8:3f:6b:95:6b:f8:
                    86:5c:11:af:44:85:cf:5a:7f:9d:5e:97:8d:62:74:
                    1d:be:91:f6:bd:1f:ca:13:e3:ca:07:13:79:32:37:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BF:28:E5:14:3C:4A:99:6C:49:2E:26:A0:E2:4F:71:48:EA:DF:59
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/505B2986F05D11F087500795DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.81.61.0/24
                  154.81.140.0/24
                  154.81.161.0/24
                  154.81.164.0/24
                  154.81.178.0/24
                  154.83.128.0/24
                  154.83.135.0/24
                  154.83.137.0/24
                  154.83.141.0/24
                  154.83.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a5:f1:f7:7c:4f:dc:f1:22:67:57:15:4c:9f:ad:fd:fb:e4:
         fd:8c:a7:da:95:bd:79:1b:fa:b9:10:57:2b:73:7c:37:ca:cd:
         21:01:d6:5d:3d:16:4c:9a:67:7b:20:63:ff:cc:0f:0f:a8:c6:
         01:f3:18:3c:26:99:8e:90:94:dd:e7:96:f5:ca:71:ad:99:8e:
         80:cf:05:09:96:89:ed:bf:4b:f3:ed:01:75:ac:97:e7:c4:50:
         fc:33:d4:f7:7f:27:1a:ee:28:a6:5b:f3:8c:d5:98:20:47:9e:
         70:20:9b:ff:ab:ec:51:a2:c9:36:1a:61:6b:40:96:67:59:4b:
         f7:fd:c2:d9:ff:09:a9:bc:0b:26:dd:f6:97:9f:17:af:90:a8:
         d6:1b:28:92:7b:86:29:63:b7:0a:dd:af:f1:8e:73:b1:ab:24:
         d8:74:a4:f6:37:c1:c5:d9:8f:05:4e:51:4d:50:c3:f3:fe:a2:
         53:40:03:65:87:78:e1:29:26:cb:48:ec:25:e2:c8:88:6f:27:
         6f:c3:ed:2e:d2:2a:b7:92:2f:33:68:b0:9f:55:4d:af:60:0f:
         81:ec:ff:08:dd:88:dc:f3:0c:3d:5b:d1:6a:cf:54:e4:8c:fa:
         93:43:5f:e5:25:a3:b9:71:55:1a:3b:31:78:5b:0b:6b:7d:e7:
         5b:23:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:03 2026 by rpki-client