This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/552F4F7CF93711F0936AB2D5DAE4EC9C.roa
File:                     552F4F7CF93711F0936AB2D5DAE4EC9C.roa (raw, json)
Hash identifier:          I09YZ7ZShfxb3hqFVQodwIDxSq/GEidWGwwcfmOxFRU=
Subject key identifier:   66:94:41:63:33:67:F2:5F:F5:40:60:9F:21:8F:4E:77:AC:6F:6F:00
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B624
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/552F4F7CF93711F0936AB2D5DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 15:14:10 +0000
ROA not before:           Sat 24 Jan 2026 15:14:05 +0000
ROA not after:            Fri 18 Dec 2026 15:14:05 +0000
asID:                     140227
IP address blocks:        154.205.192.0/19 maxlen: 24
                          154.205.192.0/20 maxlen: 24
                          154.205.192.0/21 maxlen: 24
                          154.205.200.0/21 maxlen: 24
                          154.205.208.0/20 maxlen: 24
                          154.205.208.0/21 maxlen: 24
                          154.205.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112164 (0x1b624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 15:14:05 2026 GMT
            Not After : Dec 18 15:14:05 2026 GMT
        Subject: CN=6974e1c2-3ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:b7:17:b5:d6:16:40:b8:60:3d:38:05:94:
                    81:d2:ff:e0:b7:12:bb:a2:a0:0e:44:7e:11:ab:1d:
                    45:7c:9c:d9:60:23:e3:95:74:10:72:24:48:47:8d:
                    82:91:8f:63:c0:5c:65:af:89:28:c5:e2:b1:89:6a:
                    bd:af:22:84:43:79:16:ae:00:f5:cb:84:42:39:a5:
                    4a:4e:1c:5c:11:e6:fb:44:dc:a5:32:8c:82:60:ae:
                    e1:ea:3e:8b:bf:af:06:1e:a3:5a:c8:29:39:bb:ca:
                    07:b6:07:08:0d:55:04:0a:3e:bd:2f:17:13:19:dc:
                    e8:62:83:46:4a:07:53:38:27:6b:e4:80:0e:58:a3:
                    56:64:5a:c1:8a:2a:05:aa:ae:c7:96:e8:9d:11:4c:
                    03:b1:1c:86:ce:f3:d0:61:e1:bb:53:f4:ac:bf:82:
                    8f:1d:65:59:1a:b1:fd:b2:c3:0f:47:e6:5b:62:ae:
                    9c:95:7b:54:19:81:7a:69:4c:d6:87:74:b2:cd:1e:
                    01:4c:3f:f9:61:84:f9:a8:99:11:de:70:d9:02:d2:
                    a5:9c:6d:76:cd:a3:ef:65:0e:a4:aa:c8:b3:d4:45:
                    6f:68:5d:e6:c0:3e:be:4a:8f:64:0e:ee:b3:18:01:
                    0c:97:78:f9:26:39:cc:cf:4f:a1:4e:0d:b5:44:e6:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:41:63:33:67:F2:5F:F5:40:60:9F:21:8F:4E:77:AC:6F:6F:00
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/552F4F7CF93711F0936AB2D5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.205.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:83:3a:1b:cf:cf:18:61:2b:84:69:10:a9:b6:ba:13:9f:
         92:a3:08:7a:fc:55:85:fa:72:8e:71:9f:a7:61:8d:93:d4:d3:
         9b:88:5e:ec:3f:41:74:64:30:3a:58:22:00:4c:46:04:ce:95:
         07:56:f3:58:be:9c:32:fc:1f:6f:28:9b:2b:6b:45:23:6c:e2:
         79:21:a1:ef:4a:d4:33:65:f3:37:7c:47:b0:70:cb:1b:35:c4:
         46:b0:9d:d7:12:7a:aa:81:1e:26:fd:a5:75:fe:c7:9a:75:e8:
         68:2b:bf:a8:8e:9d:81:66:41:76:13:42:65:87:db:78:d3:72:
         df:13:1e:08:d9:cb:38:57:28:f8:ce:41:18:28:7e:44:cf:57:
         b5:eb:06:23:aa:8b:b7:fe:5d:35:44:14:c7:94:d0:96:f3:81:
         ef:c3:15:dc:04:6f:3a:5f:a6:38:f1:b8:a6:fe:8b:fa:e7:ec:
         e2:c7:51:50:87:fb:3e:0b:60:2c:6f:99:6c:f0:34:e2:74:b5:
         a1:83:08:b1:15:52:cd:4e:6c:e6:4c:15:0a:f0:8a:3f:7c:13:
         e0:64:bb:23:ac:76:e5:ab:a3:7e:28:2d:30:e8:00:9e:ff:24:
         ce:82:e6:98:6a:6e:43:66:52:01:24:76:af:af:e4:7e:2f:d8:
         7b:4b:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:18 2026 by rpki-client