This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74476B4AEBEC11F09AF3C7B8DAE4EC9C.roa
File:                     74476B4AEBEC11F09AF3C7B8DAE4EC9C.roa (raw, json)
Hash identifier:          p3/+u3Bd/yLE6hwNsJgtwXmMMD4g5TzZaCm5sSDD1hU=
Subject key identifier:   0B:84:75:BD:06:E3:24:75:7C:21:16:18:30:4F:0E:42:A6:64:68:C4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B3BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74476B4AEBEC11F09AF3C7B8DAE4EC9C.roa
Signing time:             Wed 07 Jan 2026 17:15:25 +0000
ROA not before:           Wed 07 Jan 2026 17:15:20 +0000
ROA not after:            Tue 27 Jan 2026 17:15:20 +0000
asID:                     63139
IP address blocks:        154.194.68.0/24 maxlen: 24
                          154.203.160.0/24 maxlen: 24
                          154.203.161.0/24 maxlen: 24
                          154.203.162.0/24 maxlen: 24
                          154.203.163.0/24 maxlen: 24
                          154.203.164.0/24 maxlen: 24
                          154.203.165.0/24 maxlen: 24
                          154.203.166.0/24 maxlen: 24
                          154.203.167.0/24 maxlen: 24
                          154.203.168.0/24 maxlen: 24
                          154.203.169.0/24 maxlen: 24
                          154.203.170.0/24 maxlen: 24
                          154.203.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111551 (0x1b3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  7 17:15:20 2026 GMT
            Not After : Jan 27 17:15:20 2026 GMT
        Subject: CN=695e94ad-b8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:48:3c:bb:6c:46:b2:22:08:a9:c0:71:37:bd:
                    bb:54:0d:7b:64:cd:3a:b7:47:11:ce:a9:52:9d:c2:
                    cb:c0:58:fe:60:0d:12:58:7e:60:15:8f:02:04:76:
                    1e:2f:16:0b:16:a0:3e:81:d3:2a:6c:95:36:71:a8:
                    17:ff:69:e1:b5:30:c5:fc:e9:2d:0a:4d:dd:82:f3:
                    7e:0e:49:ea:26:fe:d7:a8:0a:8e:3b:e3:ff:26:ec:
                    5f:4f:b1:ff:a1:ad:91:ad:ba:2b:a7:3f:bb:d1:79:
                    f4:1f:01:cc:6b:2e:04:c8:44:25:b3:b0:17:18:79:
                    95:62:75:a3:8d:f4:dd:24:ce:1c:5d:ff:74:b3:d3:
                    40:26:ab:1d:20:ae:e0:b0:6b:a2:ab:69:5d:5b:49:
                    7c:66:89:06:3a:fc:82:63:a1:32:69:fe:3e:4a:10:
                    c8:a5:e3:a6:8e:77:85:ed:9a:79:32:05:3f:d3:3c:
                    04:04:f3:5e:47:e0:a3:d5:09:e3:03:9c:bd:db:27:
                    c2:fa:76:91:91:c4:73:c8:33:02:03:45:ba:fc:a2:
                    33:7c:a1:0b:63:51:24:66:a5:22:14:9b:22:f3:18:
                    e8:26:bf:b5:57:54:ec:81:6a:d3:6b:f1:96:1b:f5:
                    44:ba:92:9c:66:7d:d3:90:97:87:3d:f7:11:ea:24:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:75:BD:06:E3:24:75:7C:21:16:18:30:4F:0E:42:A6:64:68:C4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74476B4AEBEC11F09AF3C7B8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.68.0/24
                  154.203.160.0-154.203.171.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:da:c4:21:5b:21:c9:ac:6a:c6:7b:0c:0f:42:e6:59:8d:
         dd:18:39:3b:c3:94:2a:57:90:bf:15:4b:d5:6f:3a:0c:bf:3d:
         c3:4c:26:1d:d3:fb:ba:39:5b:61:8c:33:bf:5f:65:51:6d:cf:
         d1:65:0a:78:02:2d:42:1a:11:7f:39:33:7a:c6:29:c0:c3:35:
         72:9a:ae:7f:2a:bf:97:89:87:c0:45:a2:c0:ea:a0:27:06:e2:
         59:e4:97:3d:58:62:89:ef:16:e8:c2:8e:90:04:25:6b:44:e7:
         d8:8d:36:2d:f3:5b:c6:59:1e:6d:50:82:54:b0:21:b8:f0:7c:
         e9:ef:2a:59:89:ee:f9:d4:85:a5:78:47:27:9d:52:cf:76:f1:
         a7:6e:0c:ee:a1:d9:7f:5d:d0:a3:92:38:22:3b:fd:e8:a6:13:
         a7:84:99:2b:9d:28:50:75:89:ea:7c:9a:b9:87:af:ea:58:c0:
         2a:61:d7:ca:6f:cf:b2:e7:5d:0e:0e:32:6e:6a:44:53:b7:7a:
         e6:22:67:f5:8f:71:66:cf:bb:0d:ea:42:81:d4:8e:e7:f6:f6:
         2e:ae:6a:ac:40:ca:85:d0:f9:b0:e8:16:fe:2a:c7:68:5e:14:
         81:ee:70:a5:4d:e6:1b:d7:60:17:cd:b9:0f:8b:0f:7e:ff:a9:
         fb:43:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:37:14 2026 by rpki-client