This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1CBC9AF5D511F0AA1EDC92DAE4EC9C.roa
File:                     6A1CBC9AF5D511F0AA1EDC92DAE4EC9C.roa (raw, json)
Hash identifier:          JiKeUtnxKCBCo9/2ngQ+lFmsVhPm9DLedJzY701zO18=
Subject key identifier:   1B:A1:82:8E:FC:C1:07:3D:45:D8:BE:9D:24:29:A6:EB:A5:53:28:52
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B585
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1CBC9AF5D511F0AA1EDC92DAE4EC9C.roa
Signing time:             Tue 20 Jan 2026 07:55:41 +0000
ROA not before:           Tue 20 Jan 2026 07:55:36 +0000
ROA not after:            Tue 24 Feb 2026 07:55:36 +0000
asID:                     63139
IP address blocks:        154.94.69.0/24 maxlen: 24
                          154.94.70.0/24 maxlen: 24
                          154.94.71.0/24 maxlen: 24
                          154.94.72.0/24 maxlen: 24
                          154.94.73.0/24 maxlen: 24
                          154.94.74.0/24 maxlen: 24
                          154.94.75.0/24 maxlen: 24
                          154.94.76.0/24 maxlen: 24
                          154.94.77.0/24 maxlen: 24
                          154.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112005 (0x1b585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 20 07:55:36 2026 GMT
            Not After : Feb 24 07:55:36 2026 GMT
        Subject: CN=696f34fd-c1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:e4:f5:c7:59:49:48:5b:4c:42:e4:ca:2a:
                    5e:16:6b:9a:a5:ab:8a:c7:82:9c:50:66:86:69:61:
                    1f:61:b7:b6:26:3b:28:f1:81:06:b0:f0:a4:aa:ba:
                    1a:00:2b:c9:03:ef:63:38:25:63:70:0f:2b:87:42:
                    b3:6e:73:77:e9:35:53:31:b7:64:32:4b:e2:51:d7:
                    37:66:18:69:5b:62:a5:37:bc:be:f0:ac:1e:27:3c:
                    59:1b:f6:ce:55:82:22:49:19:7d:e7:53:e9:9e:a5:
                    aa:e5:d4:d1:2d:a5:b6:8e:e6:0b:fa:e3:56:b9:b9:
                    57:4f:66:65:b9:66:c3:00:e9:33:85:d2:c4:69:7b:
                    de:0b:96:2e:93:1d:86:7b:21:59:0c:d2:bb:01:80:
                    be:a1:84:bf:20:b6:2f:e7:8e:06:22:dc:fe:3d:98:
                    96:73:e1:5b:ef:bf:4e:94:a0:08:69:b1:62:a5:0a:
                    47:76:b5:2f:27:8a:31:7f:db:3a:ee:d1:40:44:da:
                    e4:2b:7b:34:56:27:3e:09:ed:92:c2:a6:13:f0:2c:
                    b3:5d:75:e3:67:9c:6e:12:76:29:98:54:5c:d3:0e:
                    3d:9f:43:eb:33:c0:ae:60:8c:ec:77:e8:0d:0f:16:
                    52:ae:24:26:e9:99:3f:bc:fe:89:bf:a1:a0:3e:34:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:82:8E:FC:C1:07:3D:45:D8:BE:9D:24:29:A6:EB:A5:53:28:52
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1CBC9AF5D511F0AA1EDC92DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.94.69.0-154.94.78.255

    Signature Algorithm: sha256WithRSAEncryption
         44:8d:f4:b3:8a:62:ce:e3:50:ae:19:ce:19:09:9e:6f:9c:75:
         d2:23:91:ff:30:62:e1:ca:6d:c6:9d:6c:2e:97:80:9a:6e:4c:
         83:00:fd:5a:d7:d5:82:4d:fc:8a:d0:9b:4a:b9:f3:a0:11:80:
         c8:81:ad:3e:81:68:e4:0b:ff:a8:8c:25:73:b5:a7:cf:a0:c5:
         f2:3c:f9:55:72:58:82:ab:99:10:1a:40:81:31:d2:dd:4e:fe:
         ad:f1:37:e6:bc:5e:60:6b:40:75:ce:15:38:08:e4:68:8d:e5:
         2e:be:44:be:67:ca:4d:52:3f:97:3b:3b:d0:7b:96:a8:c0:d4:
         14:00:75:86:e8:27:3c:c6:d0:84:df:3a:15:55:e4:08:1d:8d:
         8c:7f:00:0f:cc:0d:46:42:7d:cf:df:6f:88:de:96:8d:1b:e4:
         49:c9:2c:91:4c:b9:9d:45:99:7c:a4:60:43:4b:26:65:be:61:
         26:41:42:33:23:08:40:2e:97:c1:1f:4e:db:a3:35:c5:7e:95:
         84:dd:a7:96:31:5b:93:2b:d1:68:2b:4f:93:10:4e:cb:22:12:
         f6:1a:be:09:3a:37:84:b6:a0:c8:49:86:48:b2:e5:68:7d:8d:
         fb:74:c0:cc:58:bf:af:d2:d8:c1:74:bf:ee:6a:b7:ba:2a:49:
         4f:2a:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:09:28 2026 by rpki-client