This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7033744EF95811F08D5D93A1DAE4EC9C.roa
File:                     7033744EF95811F08D5D93A1DAE4EC9C.roa (raw, json)
Hash identifier:          H7vvN+YndocG7cWSWNY8hlAko7GqevM2m2TZ6hFcZfQ=
Subject key identifier:   BD:E7:E6:3B:59:4C:20:15:33:15:B7:AC:5E:2F:3E:24:A4:2D:D4:0B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B67A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7033744EF95811F08D5D93A1DAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 19:11:09 +0000
ROA not before:           Sat 24 Jan 2026 19:11:04 +0000
ROA not after:            Tue 03 Mar 2026 19:11:04 +0000
asID:                     62240
IP address blocks:        154.195.3.0/24 maxlen: 24
                          154.195.97.0/24 maxlen: 24
                          154.195.98.0/24 maxlen: 24
                          154.195.99.0/24 maxlen: 24
                          154.195.101.0/24 maxlen: 24
                          154.195.102.0/24 maxlen: 24
                          154.195.103.0/24 maxlen: 24
                          154.195.104.0/24 maxlen: 24
                          154.195.105.0/24 maxlen: 24
                          154.195.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112250 (0x1b67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 19:11:04 2026 GMT
            Not After : Mar  3 19:11:04 2026 GMT
        Subject: CN=6975194d-a497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:b5:0e:97:fd:60:50:e2:cf:99:b9:5a:d2:
                    d7:9f:b1:8c:7d:34:c5:c1:74:6d:d3:e1:ca:8a:89:
                    a9:f0:a5:b6:d2:8e:c1:e1:b7:06:e5:12:9a:ab:89:
                    e8:e7:98:fa:a0:eb:31:7c:9b:e0:84:9c:76:a6:af:
                    15:dc:3a:f6:51:35:14:07:27:dd:aa:46:ec:f6:e2:
                    c3:cd:60:8c:d9:13:09:ba:35:5b:59:62:6a:77:c1:
                    bc:28:29:5b:6e:5a:fa:90:cc:32:57:28:a1:8c:f9:
                    9c:3e:4c:ba:2f:8e:f8:25:54:d8:1c:34:35:21:ac:
                    03:bc:bf:9d:12:1b:fc:01:cd:23:dd:7b:bf:89:79:
                    2e:ed:e5:34:6e:3e:ea:78:98:bb:14:71:eb:d5:6a:
                    13:16:55:fd:09:db:cb:e4:33:60:61:7f:10:a8:3c:
                    1a:44:08:94:ea:8f:24:32:09:f2:18:b4:26:82:58:
                    96:ca:eb:80:d7:58:e5:f4:3f:ec:04:a7:8e:91:7e:
                    08:ea:5e:e2:4b:71:88:1f:b8:cc:e8:d0:1a:3c:83:
                    a5:73:f3:c3:e1:9a:bb:d4:c9:15:e9:7d:fd:2a:21:
                    90:65:96:95:5f:60:d5:3f:6e:ed:4b:fe:f8:ac:34:
                    5a:da:da:e6:b9:73:4b:4c:35:ca:af:9e:2d:1d:e5:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E7:E6:3B:59:4C:20:15:33:15:B7:AC:5E:2F:3E:24:A4:2D:D4:0B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7033744EF95811F08D5D93A1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.3.0/24
                  154.195.97.0-154.195.99.255
                  154.195.101.0-154.195.106.255

    Signature Algorithm: sha256WithRSAEncryption
         14:52:5d:6d:73:6a:a2:97:14:83:60:9c:85:ca:e8:90:f1:a1:
         ba:68:57:69:be:cb:14:e4:a2:fd:75:ab:50:db:54:4b:2f:f2:
         df:18:fc:cb:7e:2f:b0:d9:e9:05:44:4d:c0:95:0e:cc:4e:17:
         25:83:0a:62:89:55:ca:d1:1e:d4:b8:3f:ce:35:23:36:7c:b1:
         6c:1e:b5:1f:d6:9f:bb:ed:67:01:5b:c9:97:92:44:52:26:4b:
         f3:1e:29:6d:26:6f:3e:3d:8d:8b:60:df:93:81:71:53:8d:0c:
         e0:07:fb:78:cd:c5:19:72:29:49:b8:57:40:f6:32:bd:9e:d9:
         2f:10:09:f7:3f:1d:93:55:43:19:6e:5f:b4:b3:84:d0:ba:a6:
         cf:a9:8a:ec:d2:97:08:3f:d0:59:8a:45:c4:01:e4:0a:f8:19:
         6c:36:a5:df:44:4f:f7:15:dd:ee:e3:e6:d8:38:d5:32:db:9d:
         7f:64:79:b4:db:9e:78:7a:cd:7e:9b:d9:cb:ec:51:62:b1:ac:
         1f:80:da:d2:e8:84:65:ad:4d:74:d5:eb:50:65:4a:82:00:ab:
         20:fe:3b:44:a9:1b:6e:96:88:15:c1:59:94:04:fd:32:8d:a9:
         91:16:d3:31:31:5c:74:84:cd:99:c7:8d:99:67:3e:e2:9b:6c:
         0f:77:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:24 2026 by rpki-client