This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF34EB0F13211F093F20AB2DAE4EC9C.roa
File:                     5BF34EB0F13211F093F20AB2DAE4EC9C.roa (raw, json)
Hash identifier:          45oJeZ9h+T+D5B+iOvB9ZooQ6j/+ueh4FPcaRLBjWsY=
Subject key identifier:   79:D4:38:9A:38:0E:2D:12:A8:0D:D9:67:37:7D:EA:47:79:5E:DA:B8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B4A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF34EB0F13211F093F20AB2DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 10:18:25 +0000
ROA not before:           Wed 14 Jan 2026 10:18:19 +0000
ROA not after:            Fri 22 Jan 2027 10:18:19 +0000
asID:                     138995
IP address blocks:        154.198.48.0/21 maxlen: 24
                          154.198.48.0/24 maxlen: 24
                          154.198.49.0/24 maxlen: 24
                          154.198.50.0/24 maxlen: 24
                          154.198.51.0/24 maxlen: 24
                          154.198.52.0/24 maxlen: 24
                          154.198.53.0/24 maxlen: 24
                          154.198.54.0/24 maxlen: 24
                          154.198.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111785 (0x1b4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 14 10:18:19 2026 GMT
            Not After : Jan 22 10:18:19 2027 GMT
        Subject: CN=69676d70-b282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:5d:d5:f5:33:c5:29:26:f1:7c:68:1c:fe:
                    ac:cc:00:c7:b4:41:dc:a4:d8:f2:ab:49:49:da:14:
                    19:51:b7:25:ea:5f:56:1f:7f:d1:9b:de:59:91:85:
                    e6:b5:61:22:09:12:9b:59:56:7f:b3:18:0e:74:f8:
                    71:59:2f:48:57:d9:42:aa:9e:9f:96:64:24:5f:3c:
                    07:fa:53:d2:d5:9c:e8:36:48:62:18:22:61:8d:ee:
                    b3:7f:13:04:87:11:11:3f:a5:92:8b:f8:36:23:f2:
                    92:f7:b7:00:39:8e:a9:e5:ad:a3:52:d4:aa:e7:5d:
                    71:ba:ff:c2:61:28:14:be:72:70:9e:94:23:b9:c8:
                    dd:18:e8:1e:59:9c:d9:98:90:64:14:9b:0b:5d:7b:
                    78:59:86:2a:83:46:36:64:8d:95:bd:2a:30:1c:c1:
                    dd:4c:29:29:1b:2a:50:fb:bd:39:ad:bb:c3:1e:e4:
                    e0:30:58:01:a5:9c:d4:2b:7f:c1:21:a6:05:a0:b4:
                    5f:71:ff:b0:36:62:c3:46:41:16:9f:01:c2:d9:26:
                    04:fa:28:69:62:9a:ee:fe:62:72:fb:da:62:69:fa:
                    36:38:84:5a:5f:98:de:b0:90:7b:27:77:f7:b9:cc:
                    ac:1f:ec:a8:dd:e0:6f:b1:f1:30:29:95:68:94:cb:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D4:38:9A:38:0E:2D:12:A8:0D:D9:67:37:7D:EA:47:79:5E:DA:B8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF34EB0F13211F093F20AB2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.198.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:30:c2:ec:9f:68:04:c0:9b:bb:d4:31:43:b0:43:f8:af:b0:
         84:46:24:82:3f:b2:4b:d0:da:31:e4:cd:ea:05:96:f3:a9:69:
         85:7c:40:d2:09:f1:80:e6:f6:22:76:6a:bf:dd:c0:a0:59:38:
         aa:c4:a3:70:b5:03:6a:5c:99:98:f1:9b:a4:f7:df:74:4d:80:
         95:24:f0:a3:e6:c4:12:62:b0:c0:44:2b:c7:46:7d:00:59:8e:
         0e:d5:b2:1c:b1:48:83:62:0f:bf:8b:3d:8b:89:f7:ca:a9:78:
         a4:cb:bc:b6:ae:ae:0c:85:1b:e0:a6:12:15:d1:e7:06:24:ea:
         be:aa:0c:3f:40:60:6d:f0:c7:fd:99:e6:03:b4:7c:61:1d:4c:
         a8:b1:4c:5e:81:2c:c3:46:0e:9a:8e:a9:b9:36:a7:76:ac:29:
         db:b6:6b:cd:11:45:16:5f:ec:89:17:29:8b:07:3f:23:08:20:
         55:9c:1b:e4:07:4e:49:f4:d9:c4:61:23:c8:0d:1b:b4:97:70:
         fb:01:ab:48:c8:ae:1e:bc:23:d7:10:43:45:c3:f7:68:38:66:
         4f:a6:d4:5b:a6:9d:d7:be:4a:c9:a1:84:19:4b:06:8f:5e:4b:
         a5:ca:52:21:b7:a9:6a:6e:bd:15:aa:f7:fd:41:46:3c:b0:c9:
         8c:70:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:38:33 2026 by rpki-client