This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65876C56F93C11F0BF8558F6DAE4EC9C.roa
File:                     65876C56F93C11F0BF8558F6DAE4EC9C.roa (raw, json)
Hash identifier:          LHsb3i4g2XjX+8XfcXpG3cyxOTVG9JDzkbx7Zf685C4=
Subject key identifier:   1B:A3:C9:17:D1:31:17:4E:23:95:3B:3C:73:7A:F5:B4:C7:1A:70:BD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B638
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65876C56F93C11F0BF8558F6DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 15:50:25 +0000
ROA not before:           Sat 24 Jan 2026 15:50:18 +0000
ROA not after:            Sun 01 Mar 2026 15:50:18 +0000
asID:                     214143
IP address blocks:        154.82.172.0/23 maxlen: 24
                          154.82.174.0/23 maxlen: 24
                          154.83.18.0/23 maxlen: 24
                          154.83.32.0/24 maxlen: 24
                          154.83.40.0/23 maxlen: 24
                          154.83.42.0/23 maxlen: 24
                          154.83.72.0/23 maxlen: 24
                          154.83.74.0/23 maxlen: 24
                          154.83.76.0/23 maxlen: 24
                          154.93.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112184 (0x1b638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 15:50:18 2026 GMT
            Not After : Mar  1 15:50:18 2026 GMT
        Subject: CN=6974ea41-534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:ac:0a:d2:bd:f1:dc:0d:e4:c1:3b:78:fc:
                    be:d0:4f:9c:9f:bb:09:47:8b:d7:2f:7e:84:97:fe:
                    13:e3:78:ad:cd:1b:7b:61:24:64:c2:e2:f8:f9:77:
                    87:8a:5e:a2:ab:22:2c:80:a2:a7:4c:1b:bf:9b:5b:
                    18:1b:68:9a:b4:a8:75:8d:03:a4:63:b7:7c:30:48:
                    d4:e9:52:49:c6:1e:f6:00:37:ea:9a:f3:7b:70:3a:
                    b4:23:72:79:99:f7:49:3a:c6:8f:27:35:30:d3:af:
                    87:9d:13:9f:63:8f:75:c9:a7:2c:b3:ef:5f:d0:df:
                    62:6f:a9:89:2d:d5:7d:c0:d7:02:b5:69:cf:88:39:
                    8b:70:51:f7:96:e8:a8:a4:ac:df:39:a0:a8:5c:74:
                    bf:87:08:98:4f:5a:56:e1:89:f2:54:14:e6:55:20:
                    f6:96:ce:6c:c9:00:19:44:4e:a1:5d:20:b8:f5:e4:
                    23:e7:e3:c0:72:69:98:48:9a:a6:b1:2a:c8:0f:c7:
                    5a:c1:7f:62:01:d1:c7:bc:09:30:51:58:5a:01:89:
                    bd:0f:9e:da:7f:b4:a5:53:0f:e5:9a:cd:97:7d:5f:
                    74:4a:d7:d2:40:28:dc:5f:a6:3d:66:aa:fa:e8:05:
                    32:aa:e5:be:fe:3d:3d:bd:7a:db:3b:f7:bf:d6:6d:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:C9:17:D1:31:17:4E:23:95:3B:3C:73:7A:F5:B4:C7:1A:70:BD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65876C56F93C11F0BF8558F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.82.172.0/22
                  154.83.18.0/23
                  154.83.32.0/24
                  154.83.40.0/22
                  154.83.72.0-154.83.77.255
                  154.93.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:7f:7b:4f:29:c7:2e:a7:4d:e5:f2:0c:f7:1b:0a:98:f8:df:
         9f:6d:c1:eb:d3:ac:35:4e:da:a6:69:fc:e0:a4:7a:a5:06:0b:
         e8:03:64:52:59:8c:b5:e0:62:75:71:77:5d:bd:1f:73:1b:d4:
         a6:5a:30:dc:ee:93:a1:20:30:3e:6d:f7:65:50:2f:5d:6f:de:
         18:ea:2e:71:1f:3c:19:c3:53:5f:79:c4:df:92:1a:44:16:be:
         0d:0d:88:5e:e1:15:02:76:1c:5f:fe:e9:36:b7:9c:64:a1:85:
         7b:f4:00:f6:cb:e3:98:12:02:e2:4f:c5:6c:46:16:0e:44:93:
         08:ba:83:02:b2:94:96:4b:f1:55:ec:c5:38:66:d4:37:c2:cc:
         df:52:37:2b:c4:36:3a:a1:24:da:13:5a:1b:af:1c:b7:6c:2d:
         9f:2f:84:4b:27:69:93:54:b9:cb:95:d5:ee:f7:07:96:2f:55:
         12:d8:8e:d7:1c:2c:70:b8:e3:ba:3f:e1:d7:c5:55:c8:f8:fd:
         a3:d9:23:78:25:4f:c4:78:49:88:62:32:e7:f2:af:80:b9:24:
         39:0b:d6:fb:58:cb:e8:6a:46:ea:0d:9f:10:b3:3b:f2:d3:f1:
         b4:75:a3:25:ec:3f:aa:5a:0f:69:86:72:f9:ab:28:b7:da:5c:
         25:8b:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:35 2026 by rpki-client